Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/_A2b-9oKxjTHmBm3C7BKkdRZ-hc.roa
File: _A2b-9oKxjTHmBm3C7BKkdRZ-hc.roa (raw, json)
Hash identifier: Xsv7QpXK7SbUHgDSG65IOGV3M2GgGCYWc4EZxQm5ojI=
Subject key identifier: FC:0D:9B:FB:DA:0A:C6:34:C7:98:19:B7:0B:B0:4A:91:D4:59:FA:17
Certificate issuer: /CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Certificate serial: 018A17F8A1ECA67B3CA38CA9FE1627331EF7
Authority key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/_A2b-9oKxjTHmBm3C7BKkdRZ-hc.roa
Signing time: Mon 21 Aug 2023 12:01:24 +0000
ROA not before: Mon 21 Aug 2023 12:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43957
IP address blocks: 194.93.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:f8:a1:ec:a6:7b:3c:a3:8c:a9:fe:16:27:33:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Validity
Not Before: Aug 21 12:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0d9bfbda0ac634c79819b70bb04a91d459fa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:e8:e5:e2:5e:79:16:62:b6:d2:35:5b:ba:
89:57:ce:1e:44:ed:1b:ab:12:f9:41:d2:44:47:06:
fd:b5:64:44:f8:93:02:ef:c1:d9:d8:59:8b:c2:c4:
df:9c:15:cd:39:2f:98:ac:dc:f3:68:68:09:75:ff:
af:8c:bf:06:64:8f:d7:69:94:af:f3:0c:4c:87:17:
f9:55:fd:75:44:51:6d:3e:7c:12:96:80:0b:92:42:
a8:db:61:86:f9:32:4d:5b:a0:e6:40:37:81:61:53:
e4:85:62:92:49:51:ca:e0:47:47:b0:6e:08:65:1c:
c9:f7:76:fb:66:8f:94:29:4f:84:de:e7:73:f5:bd:
59:8b:7d:5f:8a:4c:8e:d8:c9:d0:cc:ae:2f:f8:fb:
16:46:9e:f3:cc:e7:33:6a:25:05:45:cb:7e:3d:56:
ec:26:7b:46:d7:17:da:51:3c:05:3a:8e:3e:80:00:
2c:8f:23:7d:c9:f1:35:40:56:41:69:f7:38:32:38:
da:3f:cd:f0:61:9d:b8:26:0b:fc:90:df:c7:df:c6:
71:83:ef:6a:fc:10:67:1c:b3:92:04:d9:dc:ab:cb:
e4:a8:d7:70:cc:96:d7:cb:92:f8:45:65:37:be:98:
57:f5:5c:6a:40:0c:f2:cb:a9:e1:eb:b2:8c:6e:a6:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:9B:FB:DA:0A:C6:34:C7:98:19:B7:0B:B0:4A:91:D4:59:FA:17
X509v3 Authority Key Identifier:
keyid:15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/_A2b-9oKxjTHmBm3C7BKkdRZ-hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
02:84:06:46:de:d5:94:5b:3e:16:c0:d4:ae:f9:c6:63:ae:38:
a3:27:4b:d7:15:dd:50:7f:b1:85:05:84:41:05:d7:2b:99:a7:
65:82:12:fe:98:34:2a:b7:af:d0:2b:47:e4:3a:d1:e9:c8:11:
d9:9e:81:7f:02:1a:fe:61:7a:94:04:24:65:54:75:1a:2d:b0:
95:aa:34:ac:6f:88:99:cf:57:da:f6:49:1b:26:dc:01:ee:84:
04:a8:38:94:33:77:f6:9d:e3:5c:38:67:41:67:95:35:33:7a:
a2:ee:b7:00:ec:ac:1d:29:fe:16:0b:bd:14:27:29:35:93:a4:
f1:d5:cf:20:84:5a:4d:03:3a:74:9d:a6:29:96:2c:c5:b6:ab:
fa:85:c5:46:a0:64:61:f8:d4:ef:f1:1a:f8:87:c4:4f:66:6b:
ca:b8:62:89:76:8e:64:25:17:82:44:f5:1f:20:59:35:b1:48:
0a:16:bb:d2:87:5c:bb:65:6c:3e:1f:b3:b2:65:50:bb:5e:f6:
13:be:19:42:3b:df:08:25:c3:29:0d:fd:12:11:36:ea:ca:25:
af:7b:66:0f:56:37:b7:93:ab:b0:9e:64:9b:4c:1c:42:4b:71:
2d:e0:ca:71:1d:34:0c:00:a4:94:91:43:44:b0:65:03:fb:60:
ef:6a:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:29:35 2025 by rpki-client