Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa
File: 1svvHfzgNRrD5Fy2l87e_BOPRG0.roa (raw, json)
Hash identifier: 4Hur6dUesSOiGQMeqQBfH5t+Nh3GnuaFkK/9ZjGHt0M=
Subject key identifier: D6:CB:EF:1D:FC:E0:35:1A:C3:E4:5C:B6:97:CE:DE:FC:13:8F:44:6D
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0183B80A630446CC280774314E3B8C7DA81A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa
Signing time: Sat 08 Oct 2022 14:40:31 +0000
ROA not before: Sat 08 Oct 2022 14:40:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50653
IP address blocks: 217.113.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:0a:63:04:46:cc:28:07:74:31:4e:3b:8c:7d:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Oct 8 14:40:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6cbef1dfce0351ac3e45cb697cedefc138f446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:7f:00:34:cd:4c:d0:5f:c8:c4:eb:95:1b:
0a:4d:65:5e:91:8a:ec:df:eb:cb:a9:4b:33:82:ce:
84:b2:0b:0e:3c:0f:27:9c:9d:b5:5f:af:e1:0a:3e:
8d:74:ef:84:2e:1f:c8:fc:40:d9:e3:f4:d3:9e:07:
e6:3a:ea:be:2f:17:d1:7c:64:21:69:01:01:82:59:
a0:25:85:18:96:4f:12:a3:e5:f6:f2:1a:8a:00:ec:
ff:6c:8f:42:2c:56:c1:d4:ce:b6:ad:02:7a:ff:08:
76:16:7a:b4:95:65:0c:e8:be:ba:cf:24:88:be:9c:
a8:2d:64:b0:2c:c8:b8:38:08:b6:68:e4:77:1d:97:
6e:fd:29:ee:b3:00:c5:11:51:73:38:eb:55:08:db:
d9:51:64:ea:f2:29:be:f4:67:59:2c:89:3e:06:81:
d6:32:aa:92:a7:59:3e:6d:e0:83:5b:67:ab:99:25:
2f:f8:68:ca:50:77:93:5b:85:d4:d6:df:db:e2:18:
20:a1:12:a9:7d:0e:04:21:9a:e8:14:ff:b9:de:2c:
f7:09:79:af:b2:b2:6d:07:1a:23:be:dc:08:05:5b:
fb:de:d5:5a:18:86:dd:04:82:23:0d:6b:5c:7a:f8:
af:a9:b9:65:24:be:fe:94:94:21:6b:eb:3d:3b:44:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:EF:1D:FC:E0:35:1A:C3:E4:5C:B6:97:CE:DE:FC:13:8F:44:6D
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.10.0/23
Signature Algorithm: sha256WithRSAEncryption
56:e8:fe:98:5f:9d:30:b1:44:4d:39:a1:ba:77:aa:16:f0:63:
29:94:81:c9:fd:86:e0:9a:55:d1:58:84:1d:8a:7b:38:91:2e:
9a:80:91:3e:3f:fc:32:2f:01:23:f8:46:49:9e:06:2a:f5:9c:
8e:34:c7:9a:63:ea:53:53:39:07:52:e0:8d:85:73:f0:8a:b2:
a9:40:f4:7c:f6:f6:72:33:7a:29:1f:6e:8a:e5:8f:2d:36:d6:
e7:d9:77:4c:91:81:83:be:66:c7:4a:b4:d5:92:41:e3:01:18:
51:13:a1:ba:70:6d:a1:a5:35:5f:a5:89:75:ba:f4:46:d2:b8:
5f:10:a6:1e:ea:c9:8c:b8:54:49:96:27:fc:a4:bc:50:72:82:
c0:86:ff:7d:f4:03:08:4d:87:ec:68:55:d1:b7:6e:ce:74:6a:
e4:a7:b7:27:c1:3f:a3:e6:ff:03:a3:b1:1a:67:d6:f0:fa:85:
b4:0f:3f:a3:bb:31:69:34:b2:b6:90:e4:3a:55:c1:5f:a9:58:
cd:83:d6:92:80:9f:a1:9e:8b:32:54:2d:e1:06:e5:38:38:55:
c0:4e:27:f6:7c:06:e4:d2:60:b7:d3:b8:05:b8:9f:b0:e8:f2:
cb:ef:90:20:d0:fc:83:ee:3f:a2:0d:28:8f:b1:d7:90:5a:37:
93:d6:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:31:25 2025 by rpki-client