Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/xojkhyR2QSCyVDvCAHquklxSQ4g.roa
File: xojkhyR2QSCyVDvCAHquklxSQ4g.roa (raw, json)
Hash identifier: uJ1TgJXbZCXKGyBGiCYXRVF8ihmiSYIWZFlIhIbD1JY=
Subject key identifier: C6:88:E4:87:24:76:41:20:B2:54:3B:C2:00:7A:AE:92:5C:52:43:88
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 015BC302
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/xojkhyR2QSCyVDvCAHquklxSQ4g.roa
Signing time: Sat 01 Jan 2022 03:00:14 +0000
ROA not before: Sat 01 Jan 2022 03:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35343
IP address blocks: 193.47.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22790914 (0x15bc302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Jan 1 03:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c688e48724764120b2543bc2007aae925c524388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:de:4c:0f:05:95:3a:75:93:a7:f7:bd:47:
00:fb:d1:5f:94:19:53:ae:66:ee:1a:1c:73:5a:65:
2b:c8:4a:af:a8:f1:87:4b:20:01:1b:79:75:f3:d1:
31:26:74:ac:bf:e4:9c:48:a6:1c:8f:e1:81:f5:cb:
81:8c:ae:7c:d8:91:57:e1:4b:cc:10:58:d0:1c:f3:
b8:fa:88:42:21:0c:dd:34:b4:ea:e5:54:cb:16:36:
6c:ad:16:15:26:1c:db:11:c1:47:35:3b:92:91:b4:
42:ae:14:5a:c7:57:c4:09:b5:12:50:0b:4a:df:fb:
6a:ea:dd:73:b8:da:66:af:84:ca:c6:54:ce:67:d1:
ed:b3:7e:3a:b7:e3:cf:c3:87:82:cb:9b:a4:dd:37:
1e:34:83:8e:7f:02:cc:df:99:6a:92:c1:77:88:f5:
5b:4d:cf:71:cf:6a:34:f1:c0:f5:ad:86:a3:2a:01:
ea:bd:34:c5:77:0c:1a:46:e5:ab:cd:1f:13:be:f8:
c7:41:0c:4f:dc:74:51:34:04:4f:19:8c:e5:c5:0e:
9c:19:c2:b0:ee:71:2c:60:5b:ac:9b:77:d7:bf:b7:
61:d2:95:31:cc:6d:72:67:d0:d7:ce:96:f5:04:cd:
53:51:ef:de:af:71:fd:6c:b3:64:40:21:bc:02:03:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:E4:87:24:76:41:20:B2:54:3B:C2:00:7A:AE:92:5C:52:43:88
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/xojkhyR2QSCyVDvCAHquklxSQ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:35:8f:ed:45:bb:09:10:15:29:62:af:c7:6a:e6:a7:a4:08:
49:1e:f4:db:2f:df:0b:aa:fc:08:06:89:d4:c3:d2:e3:7f:be:
98:cf:e6:01:5e:45:00:01:8c:87:9a:5f:cf:1e:92:fe:12:d9:
f2:fd:e5:8f:d8:c5:cc:e3:36:5b:26:5d:1c:81:ac:71:e6:e0:
49:5b:13:7a:d6:e1:07:84:ec:d5:d8:90:cd:7f:6f:96:37:cb:
ac:5c:0b:f1:b3:5b:de:92:e9:45:7e:12:a1:10:b7:ae:7e:4d:
f9:b1:92:a0:4a:89:a7:02:68:a9:25:fc:cf:e8:6d:6a:7c:00:
43:5d:d4:7a:7d:1a:90:91:60:42:d3:ed:77:bf:7a:92:ce:66:
5e:c9:e9:17:32:db:6f:a6:39:10:86:03:7e:66:49:d0:a2:0b:
19:dc:a2:fa:bd:bd:32:e6:9f:d8:bc:ac:03:13:f9:28:d8:68:
ba:39:a7:ee:29:91:9c:28:69:70:c6:7a:95:ed:6c:0f:30:76:
da:43:01:63:56:e9:77:7b:98:cb:cf:06:c5:30:98:80:49:61:
ed:be:34:44:71:b3:6a:fc:8a:0c:46:ff:44:e0:bc:37:cc:30:
73:29:cc:4d:16:9c:e3:f0:4f:90:e6:97:ef:29:d2:3a:9c:62:
20:ed:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:08 2025 by rpki-client