Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa
File: RiuqieJv_GBxnl-D7p4Z9UANwzM.roa (raw, json)
Hash identifier: vkCDwGmdmDLE1CDNpN18lm2NV79j2asfT503q5LAPdE=
Subject key identifier: 46:2B:AA:89:E2:6F:FC:60:71:9E:5F:83:EE:9E:19:F5:40:0D:C3:33
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018A2719D7A9A29278F969169E4D0F796710
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa
Signing time: Thu 24 Aug 2023 10:31:59 +0000
ROA not before: Thu 24 Aug 2023 10:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209880
IP address blocks: 193.220.161.0/24 maxlen: 24
193.220.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:19:d7:a9:a2:92:78:f9:69:16:9e:4d:0f:79:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Aug 24 10:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=462baa89e26ffc60719e5f83ee9e19f5400dc333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:6a:6c:c2:aa:da:0e:90:52:a6:1a:71:47:
32:ad:52:38:69:e0:e9:16:2d:37:52:a4:6b:a7:79:
23:22:d9:5c:f3:5a:7e:c2:18:f3:49:ce:30:c9:a8:
35:c0:ab:07:15:85:2b:ab:cc:f8:cd:09:57:8b:bf:
8f:0c:1b:1a:ce:1e:a5:52:7f:de:d6:b3:b2:ff:c7:
70:8d:db:d2:c3:a8:a3:ca:74:85:de:98:fe:97:4e:
b2:ce:95:3c:32:51:74:88:b5:12:58:7c:0d:66:ba:
d3:4a:3b:8e:60:2d:15:9c:2b:6a:6c:49:ef:a6:ac:
5f:fe:1e:3f:38:c4:e5:ff:f1:cd:a8:ae:6b:2f:b6:
58:cc:0e:64:ee:6b:00:d8:ac:b3:cb:76:82:49:94:
73:38:08:1c:1b:65:86:f3:9b:48:dc:d5:13:a0:9b:
a2:8e:cf:9e:c6:bb:36:1a:e0:8a:8b:24:1b:09:cd:
5d:65:9b:b6:01:6d:9d:53:94:07:e8:d0:53:67:59:
98:c2:f3:be:8c:f6:9d:d2:8c:55:6c:3b:ab:9b:f8:
1d:67:49:e0:1b:b7:1e:4f:a8:9b:fd:7c:fb:7e:04:
f0:e2:67:20:25:97:22:8c:67:28:e7:cf:f2:96:16:
22:a3:14:7b:5a:ac:48:72:35:bb:37:b4:f3:00:88:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2B:AA:89:E2:6F:FC:60:71:9E:5F:83:EE:9E:19:F5:40:0D:C3:33
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:51:fc:35:b7:16:e7:b1:82:be:63:11:a8:c3:d2:50:de:d5:
51:3d:67:29:e8:c8:10:94:f9:a0:c8:98:2a:90:dd:f4:6c:7d:
c8:12:e7:a4:e5:9b:50:de:b7:32:a4:d7:e4:c0:c0:5f:6e:b7:
27:7c:e0:75:85:f9:81:26:7a:97:48:02:19:51:49:f4:7a:4c:
0c:c0:6a:6e:a1:23:37:10:6a:26:32:eb:97:8f:3a:9c:1d:40:
91:bc:eb:db:aa:76:39:27:05:09:b0:eb:de:00:5b:9f:46:96:
b7:5b:2a:3d:2d:b0:fa:60:76:38:16:8d:99:96:63:4a:72:3e:
f4:cb:30:34:7a:12:43:9c:b0:7e:92:95:21:19:26:be:aa:12:
ee:3d:f8:f3:7e:be:6b:e8:b3:a9:6e:21:a8:b7:20:01:c4:2e:
02:35:39:4b:ac:07:c1:6a:ae:c6:42:2c:eb:ad:f3:87:2a:26:
33:c4:4d:41:45:7d:9e:c5:a7:0f:d3:6e:06:69:35:25:2a:bb:
3d:17:bb:cb:ee:4a:cc:c9:9f:de:90:e6:93:1c:4c:cb:60:94:
5d:28:1e:a3:96:52:3d:b4:0f:86:04:cc:31:28:dc:a7:f4:e5:
06:3c:b7:ae:4d:8b:c8:8e:bb:df:03:e5:a5:ea:c6:cf:58:a9:
0a:9f:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:37 2025 by rpki-client