Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fo2DJkVlQ53zXY1Z33I960C6lzw.roa
File: Fo2DJkVlQ53zXY1Z33I960C6lzw.roa (raw, json)
Hash identifier: 35E23Xm2YlUNGSHq2uJC3Qhg0fvkdTEGujFzQtqsnrM=
Subject key identifier: 16:8D:83:26:45:65:43:9D:F3:5D:8D:59:DF:72:3D:EB:40:BA:97:3C
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01898D0D02F1A7D7FA449A99DD0B8AC891EB
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fo2DJkVlQ53zXY1Z33I960C6lzw.roa
Signing time: Tue 25 Jul 2023 12:36:27 +0000
ROA not before: Tue 25 Jul 2023 12:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
45.133.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:0d:02:f1:a7:d7:fa:44:9a:99:dd:0b:8a:c8:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 25 12:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=168d83264565439df35d8d59df723deb40ba973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:b9:13:b6:8b:35:45:94:d0:42:c8:09:7d:
fa:00:a1:83:79:24:d0:ad:af:b4:f6:9f:a9:05:2d:
54:7d:dd:8c:a8:49:a1:dd:a3:cf:23:c7:e1:c8:f5:
18:ad:2c:a8:63:7e:b0:a0:bf:62:51:a3:62:9a:52:
f5:c6:b9:ed:8c:93:ac:8c:94:bc:6f:a4:36:0f:36:
5a:e3:87:63:fd:3c:17:f1:5e:58:af:0d:03:b2:e0:
d9:3d:71:9d:24:00:13:40:33:34:84:60:7d:1a:51:
ac:83:9b:17:96:9f:a9:79:33:0a:3a:98:e8:04:56:
b5:33:d7:4d:d9:7a:41:87:af:07:8d:8d:0c:f8:78:
c2:ee:8a:2f:99:0d:86:58:a9:04:a2:18:22:b3:be:
ff:51:8e:b7:49:b4:3f:4c:3a:36:20:0a:bc:bf:54:
fc:0b:8a:7c:d5:fd:94:dc:71:31:fd:df:59:dc:8d:
eb:cf:af:0c:57:cb:bc:3e:c0:89:f7:d7:45:a4:ad:
bb:0a:d5:c0:1b:de:80:24:6e:8d:54:3b:dc:1e:22:
3e:f7:61:9a:8a:3a:e0:e7:d5:9e:0f:1b:5e:9b:42:
d2:19:5e:fa:ee:fc:fc:22:2a:a6:09:dc:cb:ca:01:
3a:3d:13:c2:3a:76:30:6c:f0:a4:41:bb:31:93:9c:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:83:26:45:65:43:9D:F3:5D:8D:59:DF:72:3D:EB:40:BA:97:3C
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Fo2DJkVlQ53zXY1Z33I960C6lzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/23
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:42:34:ab:d7:f4:bd:8e:d9:07:d5:cd:61:af:ab:63:e1:20:
44:d0:68:95:58:e9:cd:cb:72:0a:ff:1c:38:04:ec:b8:14:0f:
0b:ed:5d:22:42:f1:ec:a3:b0:1f:3a:6f:8f:d3:86:b2:d0:b3:
71:b1:61:aa:43:5a:84:e2:ec:3b:e1:42:2a:37:dd:16:1a:a7:
b8:41:dd:fc:a6:f9:82:a2:ff:56:cc:ff:aa:d8:79:f0:b5:47:
b1:60:9e:89:e3:b7:64:16:1f:db:d9:f6:c6:8c:30:30:98:c2:
d2:b0:2a:4c:73:e4:03:05:16:00:cc:21:21:cc:cc:67:63:41:
cd:9f:73:ac:57:a3:84:3d:c2:1e:27:32:57:a0:d6:ad:c1:d1:
84:76:f5:18:a6:df:8a:e8:d1:20:15:7f:87:43:73:ea:fd:85:
b1:0f:ea:c7:5f:4f:87:f0:23:d4:d6:6f:65:1f:01:4c:25:1c:
78:70:6b:f3:ce:e5:e7:80:03:32:85:87:31:ba:5f:23:de:02:
77:e5:c0:8d:3e:31:7a:9b:7c:bb:23:88:8b:3c:de:33:7e:91:
19:77:d6:0b:d4:42:46:c9:06:1d:b3:ce:15:84:77:bf:b8:fb:
3e:5d:85:41:23:b8:c7:de:65:88:5a:bd:ef:10:8a:36:8b:1b:
26:bd:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:21:34 2025 by rpki-client