Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CBjX59YrJsn9mTlrGasUSsmFU7s.roa
File: CBjX59YrJsn9mTlrGasUSsmFU7s.roa (raw, json)
Hash identifier: P8HdnAMF7TI3QwLVwspToU96+dXrxBnISCkac5tDVdM=
Subject key identifier: 08:18:D7:E7:D6:2B:26:C9:FD:99:39:6B:19:AB:14:4A:C9:85:53:BB
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018451304AD9407A7AA3D9906873F725BDD7
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CBjX59YrJsn9mTlrGasUSsmFU7s.roa
Signing time: Mon 07 Nov 2022 08:23:50 +0000
ROA not before: Mon 07 Nov 2022 08:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:30:4a:d9:40:7a:7a:a3:d9:90:68:73:f7:25:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Nov 7 08:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0818d7e7d62b26c9fd99396b19ab144ac98553bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:b7:3f:a1:23:c6:06:dd:30:b0:0d:86:0c:
20:10:2f:a0:a3:f7:c3:db:37:9a:d3:b8:30:57:76:
a3:34:d9:82:04:0f:63:bf:0d:e5:aa:d9:67:44:79:
ac:9e:85:8b:04:e3:f6:8b:fc:9e:14:68:f7:10:03:
9a:e5:cc:52:2c:76:40:d2:a3:b6:b1:6e:8f:ff:15:
9b:ae:56:a8:8c:af:ec:9e:25:8a:6e:ad:02:b4:c2:
d7:09:7d:db:0a:b8:b6:13:d3:cf:ff:7a:be:df:c2:
c0:eb:0e:19:64:ae:e5:a9:30:48:62:34:d3:89:18:
db:6a:69:bd:e8:67:9f:c7:c6:96:98:15:c7:a3:c0:
33:50:a8:b8:26:6e:11:9c:e1:39:15:11:d2:f6:5a:
fc:e1:4c:f0:e9:a5:21:8c:a7:75:dd:ab:bf:e9:c8:
9e:ff:37:a2:d5:da:f7:c6:fb:73:8f:d4:69:f1:d4:
bc:d3:94:00:98:f8:77:7b:f5:ba:ed:02:37:56:ca:
05:64:31:bf:f3:26:97:dd:cb:3b:ba:6d:d5:55:ba:
ec:33:68:34:26:41:d9:dd:8d:4c:04:ee:17:21:a6:
01:4a:c9:73:6e:a2:27:00:0c:2b:06:27:24:b3:8b:
e2:f5:9c:62:1e:c5:8f:73:10:a3:12:9b:96:a6:3a:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:D7:E7:D6:2B:26:C9:FD:99:39:6B:19:AB:14:4A:C9:85:53:BB
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CBjX59YrJsn9mTlrGasUSsmFU7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ee:f4:ad:b3:53:39:34:a6:bf:9d:73:ff:5f:43:1e:f7:3c:
86:40:ed:7f:94:f2:41:c9:85:5f:ec:02:5a:2a:7d:c3:60:c1:
8f:77:e4:b4:1e:ca:81:c6:49:5a:2d:bb:7e:f2:c2:cf:f1:93:
f1:e8:68:b2:97:70:5e:9f:ff:18:11:23:79:9d:ee:94:ee:ac:
08:2f:08:c2:1b:30:25:c4:af:86:8d:d2:32:79:fc:80:89:05:
57:86:3c:21:7a:ab:a2:13:bf:49:48:11:28:6e:b2:10:ec:5b:
44:8d:f1:98:61:df:cb:2c:9d:91:e0:35:b1:aa:33:8c:c8:1c:
f0:3f:98:12:00:76:36:bc:aa:66:24:e1:a2:7e:18:ff:e1:10:
a7:a2:90:9d:f1:0d:66:a5:59:74:15:1e:a2:e2:db:69:d9:82:
e1:38:48:cb:4e:33:f4:56:eb:22:3a:bb:6b:8b:4b:f7:6d:05:
ab:c5:e0:bd:8c:61:cf:b7:ec:76:f9:68:df:39:2a:9f:49:e7:
8d:c5:20:fa:6a:f9:46:9e:bf:60:3f:72:65:2b:bf:d0:6e:c4:
24:6a:41:df:09:b7:04:e1:fd:f4:c2:3c:6d:21:77:4e:b8:67:
2d:7e:ef:0e:57:7f:d9:3b:30:91:e5:0a:a5:1f:bd:ff:47:af:
65:d0:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:00:35 2025 by rpki-client