Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/wOjcHfZZQceTVGBfj7yWTzV0UX8.roa
File: wOjcHfZZQceTVGBfj7yWTzV0UX8.roa (raw, json)
Hash identifier: iYVlwtGjuuoBaGJqpRU7niUBy8rnZeXvTie0Cw7WTiU=
Subject key identifier: C0:E8:DC:1D:F6:59:41:C7:93:54:60:5F:8F:BC:96:4F:35:74:51:7F
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01856D13B454B6E2E1AC99E93B96B24C820E
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/wOjcHfZZQceTVGBfj7yWTzV0UX8.roa
Signing time: Sun 01 Jan 2023 11:24:45 +0000
ROA not before: Sun 01 Jan 2023 11:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 193.30.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:b4:54:b6:e2:e1:ac:99:e9:3b:96:b2:4c:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jan 1 11:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0e8dc1df65941c79354605f8fbc964f3574517f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:7f:e6:ba:a6:94:0f:0e:3c:a9:a0:7f:ef:
cf:4f:a9:f4:9f:00:bc:ab:b4:79:59:f7:a8:b5:0a:
e7:79:9f:35:d9:be:69:41:6d:18:15:07:53:db:84:
e0:7d:34:ba:2e:fb:39:3c:ca:0a:59:87:88:95:97:
29:e4:7a:e2:25:87:8a:4b:fd:fc:e1:48:ac:14:58:
9c:4c:70:fa:57:8c:60:4a:11:82:64:07:2b:b7:b6:
fd:82:91:3a:df:40:6c:9f:46:cb:5c:3c:34:19:c7:
85:06:d9:c5:50:1e:bb:19:99:de:a3:c2:ac:91:73:
33:96:eb:02:05:38:27:96:95:23:fe:54:ff:a8:40:
13:00:2e:ee:a6:db:73:1f:18:10:b5:1d:1f:be:ba:
bf:ac:fa:ec:9e:bc:63:c4:be:b4:af:01:be:a3:1b:
53:3c:76:06:86:96:31:10:ea:50:3c:18:3a:79:af:
b4:e3:5a:c5:d9:81:fe:c2:87:ac:81:25:2f:a8:d5:
75:50:7a:f5:f4:a5:e3:0e:aa:af:c6:fe:e2:75:f8:
29:ac:91:c8:76:f7:15:13:ff:1b:a1:97:41:6f:25:
28:39:8e:ca:4d:a2:76:80:c6:58:f6:cd:ff:f7:39:
31:bc:fd:8d:fd:67:27:8e:8f:43:0c:6c:8f:4e:33:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:DC:1D:F6:59:41:C7:93:54:60:5F:8F:BC:96:4F:35:74:51:7F
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/wOjcHfZZQceTVGBfj7yWTzV0UX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
80:16:ef:2d:4d:dc:e3:1f:88:10:8e:d7:30:39:3c:f3:bb:40:
58:a2:f5:08:57:c1:48:39:97:50:5a:71:ef:c5:14:ec:f7:4e:
c5:42:91:d4:a8:0a:ec:af:f6:7d:77:44:8c:72:81:d0:d3:d4:
55:7a:8b:be:c2:7c:e9:f3:d0:69:5a:4c:42:50:d4:9f:4f:c9:
70:c4:40:d1:15:ae:ec:1f:f2:2b:7f:97:c2:bc:7f:ce:a6:c7:
40:fa:5d:54:f1:c5:49:cd:55:42:fd:72:f7:9e:a7:98:75:d8:
2c:bf:53:13:55:74:2f:cf:7d:8b:62:35:fb:65:d0:2c:a0:e2:
4b:78:46:fe:98:ee:7f:8a:7c:a9:9e:f6:ed:ff:9c:fe:02:f9:
81:3b:df:d1:db:83:d8:bc:f1:a0:2a:e3:5f:ee:a3:48:d1:fd:
27:82:3b:50:30:dc:1f:b1:1b:a2:5d:c8:d3:4c:83:99:25:6a:
4d:27:98:6c:48:5e:89:ab:ba:da:0b:74:f0:5f:ee:38:5d:12:
97:7b:9b:66:8c:ea:a8:56:5c:ba:d1:04:69:31:2e:24:a3:ef:
a5:90:b5:1f:4d:63:da:8d:1e:fe:9b:97:ae:4e:c1:26:0f:21:
b0:0a:60:08:9f:3d:77:89:21:87:0c:a2:72:42:02:bf:55:4b:
fd:b3:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:26 2025 by rpki-client