Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa
File: j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa (raw, json)
Hash identifier: lZai0dm+eGwqvser4HObkQroEy5BCR71K37UF09SWDY=
Subject key identifier: 8F:C6:6E:88:50:DB:AA:B5:95:67:2D:81:BA:CF:9D:B7:AA:DD:EA:53
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 018570D5015D4FE56B290B55FEE7208A8893
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa
Signing time: Mon 02 Jan 2023 04:54:45 +0000
ROA not before: Mon 02 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47773
IP address blocks: 193.162.105.0/24 maxlen: 27
2a10:8dc0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:01:5d:4f:e5:6b:29:0b:55:fe:e7:20:8a:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jan 2 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc66e8850dbaab595672d81bacf9db7aaddea53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:7c:7c:d2:65:e1:f4:c8:1b:86:8b:a6:a4:
2a:9a:d0:9f:de:76:6f:6a:94:7e:a1:9f:ea:33:81:
1e:1b:c7:9d:61:f8:4a:bf:f3:0d:46:3f:f4:56:df:
cd:de:7e:9b:f0:90:ac:09:62:fb:0d:12:95:c7:c0:
7c:b2:c2:52:e2:e3:5c:c7:96:ad:dd:3a:ff:64:ef:
7b:2e:13:41:13:41:c0:ce:91:3e:45:f6:51:ec:66:
76:9d:c2:23:38:c6:a4:0d:ca:81:e7:db:e9:9f:fe:
bf:1f:5f:70:0d:c7:e2:77:d3:c9:0b:54:9c:d6:79:
49:14:14:34:2c:3c:60:c0:c5:08:44:05:5f:38:5c:
de:0f:37:f2:68:8b:83:2a:f3:ec:e3:39:a0:f0:c3:
23:e1:b5:6f:6b:ae:be:0b:b0:a3:38:95:d8:0a:36:
58:f5:71:8f:fc:2e:ca:1d:f5:b3:04:51:04:bb:b2:
93:69:ba:37:1a:ac:53:f0:eb:0b:c7:2c:72:8a:43:
b6:24:2f:5b:8e:64:36:4d:69:e0:ff:c9:cc:4d:4e:
d5:5e:b7:9f:dc:6e:02:a4:d7:7d:7b:8e:22:f9:13:
e4:f7:93:61:91:47:e7:a8:ab:7c:94:59:68:7d:b6:
38:0c:6e:59:90:7c:d9:93:ca:9d:a7:df:7c:70:6f:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:6E:88:50:DB:AA:B5:95:67:2D:81:BA:CF:9D:B7:AA:DD:EA:53
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.105.0/24
IPv6:
2a10:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
a0:c9:f4:5b:87:d8:2f:56:9b:c3:50:79:13:a4:d4:e4:06:6e:
df:26:3b:59:c6:e0:be:98:27:ec:33:69:8e:c8:cc:75:d0:a2:
aa:ca:cc:5c:43:f7:d3:95:b7:c2:1e:57:b1:8a:18:af:8c:0a:
ea:b2:d5:31:b1:05:fb:e9:36:2f:1e:30:7f:d9:70:48:4c:72:
3e:a3:4c:3e:a2:b2:3d:18:d0:4f:61:9a:2b:e5:83:df:b5:c4:
97:e2:aa:cb:20:eb:6a:5f:8f:73:ec:11:0d:df:31:e8:68:c0:
e5:4f:69:79:ed:87:08:dd:c7:9a:f4:37:79:6c:f6:a7:f7:3e:
8c:ee:da:6b:cb:0a:2b:e6:cc:6f:c7:0b:9b:de:00:41:e4:fb:
89:d0:31:d9:26:bc:60:b2:ce:d8:19:f9:3c:8c:40:d7:7b:e7:
bc:3c:32:7a:d4:c2:5f:84:6f:c6:17:c2:04:43:b2:e1:cf:ac:
69:ef:99:ac:aa:85:a9:e4:d0:ad:02:32:44:b5:25:e3:ba:a3:
97:6d:a5:9d:27:d4:6f:8c:90:c0:58:ec:ed:b9:09:15:ec:c0:
ce:12:af:ed:f3:6a:1a:36:86:7b:be:0b:e7:1d:44:0e:b0:e0:
b9:36:5f:ec:b9:9e:eb:a0:63:3b:e7:cf:f8:e0:29:f2:15:e1:
31:8f:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:07:35 2025 by rpki-client