Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa
File: 0sHYEgirCe-C6AYNk1mQWNi1owE.roa (raw, json)
Hash identifier: GBvzX+W0p+uJhbchB/sHnvu2oXdsbJWBtXf57sjH9Og=
Subject key identifier: D2:C1:D8:12:08:AB:09:EF:82:E8:06:0D:93:59:90:58:D8:B5:A3:01
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: ED72
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa
Signing time: Tue 25 Jan 2022 17:18:52 +0000
ROA not before: Tue 25 Jan 2022 17:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210104
IP address blocks: 193.105.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60786 (0xed72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Jan 25 17:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c1d81208ab09ef82e8060d93599058d8b5a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:b8:06:fc:96:25:f2:c5:97:73:c4:ea:43:
eb:36:44:ea:e1:71:9e:e4:fd:29:09:47:9d:14:26:
1c:e1:d7:2f:24:33:c0:75:c5:6c:b5:4a:96:51:8d:
9b:c1:d2:17:c4:02:99:88:77:35:fb:34:92:91:ab:
5a:1c:ed:7d:5c:1a:7b:db:d9:49:67:04:3b:1b:50:
3c:3d:99:89:dc:07:02:b8:d4:92:8c:89:07:0e:80:
e8:ca:26:d2:db:e9:be:db:b6:4a:62:8a:ae:d8:aa:
24:d5:88:1b:89:42:63:6b:f4:0b:8d:ce:91:02:a8:
1d:84:73:2b:99:59:e9:07:77:79:df:72:9d:9f:3e:
db:6e:28:0f:c2:38:d7:e7:3b:2f:05:5c:32:d2:24:
d2:76:1e:32:89:e8:fb:91:0f:cb:4c:6a:c2:ca:d1:
da:cd:2c:5c:44:43:22:b0:6d:f5:88:ce:38:17:e1:
7a:b4:33:81:c1:b0:bc:6a:b0:2f:14:a3:99:a4:4d:
69:ec:50:97:39:b5:32:32:90:ed:c9:f2:2a:fb:39:
ca:bc:c9:a3:23:e1:d4:43:ad:73:3c:c2:7b:d9:85:
1f:11:4c:e6:3f:f1:ca:11:83:fa:5f:a5:eb:2e:4f:
b5:23:ff:bf:50:b1:ca:81:59:3a:98:6a:0a:cd:34:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:D8:12:08:AB:09:EF:82:E8:06:0D:93:59:90:58:D8:B5:A3:01
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/0sHYEgirCe-C6AYNk1mQWNi1owE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.83.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f0:2b:c9:e0:4c:e4:5d:dc:ea:ac:92:de:27:0e:ae:d0:92:
ab:36:10:84:f4:77:e0:26:82:30:7e:f1:ad:d6:56:e3:5e:4c:
09:a6:63:4d:4d:d0:c0:f0:02:5c:65:7d:7e:21:6b:60:4d:06:
b0:48:8e:87:de:9a:7c:a4:a2:05:a8:25:fe:b8:64:ef:39:91:
00:b4:42:18:1d:3b:62:5e:c8:fa:c1:96:4b:ba:ad:fe:95:84:
07:51:76:75:77:0f:e1:de:a7:e9:b8:d1:42:f3:f3:7a:74:03:
43:f6:d7:02:ae:41:16:a2:ae:67:e9:45:1b:3e:c3:9e:3b:80:
e7:1b:d2:21:92:0a:22:b9:fb:7b:18:8c:bf:e5:f9:02:df:8b:
c5:e7:9f:0c:91:33:42:73:56:c4:af:cb:a7:9d:24:24:5e:72:
55:a8:e5:65:8f:e3:d1:9a:a2:e1:8c:ee:f3:7e:53:95:ea:0f:
bd:ab:43:6d:07:46:83:fb:f6:93:89:b5:d9:1f:68:26:70:fa:
13:6e:05:44:dc:40:c9:64:69:57:76:9f:f4:87:ee:93:5b:c8:
71:3b:fe:4b:e1:16:e9:6f:fa:54:79:2a:10:9d:f8:f6:b0:ee:
07:c9:54:9a:81:95:13:1a:78:3d:2c:00:0c:5f:8b:5b:9c:7b:
a2:75:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:47 2025 by rpki-client