Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/kC-a_QAcOv63xVVA2iCy3c3uw-E.roa
File: kC-a_QAcOv63xVVA2iCy3c3uw-E.roa (raw, json)
Hash identifier: ipIybe/Qb5Q3emMhsjEPoaLZIl7VLSCGPha855RpAaM=
Subject key identifier: 90:2F:9A:FD:00:1C:3A:FE:B7:C5:55:40:DA:20:B2:DD:CD:EE:C3:E1
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 01A299
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/kC-a_QAcOv63xVVA2iCy3c3uw-E.roa
Signing time: Wed 08 Jun 2022 12:24:03 +0000
ROA not before: Wed 08 Jun 2022 12:24:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107161 (0x1a299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jun 8 12:24:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=902f9afd001c3afeb7c55540da20b2ddcdeec3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:d2:f4:b5:82:76:08:7b:5e:40:fa:d3:8b:
19:d2:c5:3c:1a:29:d5:72:0b:57:b1:a9:1d:32:44:
20:5b:be:83:27:00:21:b7:f0:0d:e2:a9:4c:29:3c:
49:1a:65:da:5b:1e:cd:d0:0f:0d:56:d3:e9:0d:13:
10:83:19:3f:cb:17:ad:3e:19:40:37:5d:71:ca:cc:
db:54:3a:c9:f8:fa:ff:1d:34:d9:ee:bf:69:a1:ce:
68:57:8b:ed:35:74:0e:bc:dc:53:2c:32:2a:5b:8a:
9d:a9:39:94:2c:9c:f5:c8:9d:0f:c9:4c:87:dd:79:
e0:67:37:ed:1b:89:55:d0:20:b9:51:51:7d:cb:62:
96:5d:1e:c7:b7:e1:b6:ae:e4:ee:ea:c8:3e:99:73:
e4:5b:31:6c:f6:5f:3a:db:fa:d8:10:ef:09:43:ed:
2d:c1:ec:1b:33:9d:e1:a2:d7:42:ff:95:b5:04:0d:
5e:91:b2:77:b5:1b:ac:a7:29:7c:80:f2:4d:b6:93:
85:f7:00:cd:1c:43:cc:e6:c8:1d:65:e5:bf:77:59:
b3:b1:3a:f5:e2:f5:7d:fd:d2:43:74:76:8d:3b:01:
62:fa:4f:06:ef:79:94:01:27:03:aa:a5:f1:23:42:
f7:5b:9f:87:a9:ce:88:51:71:71:15:19:7d:8a:a1:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:9A:FD:00:1C:3A:FE:B7:C5:55:40:DA:20:B2:DD:CD:EE:C3:E1
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/kC-a_QAcOv63xVVA2iCy3c3uw-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c0:2c:f0:78:83:a8:7a:64:e7:bf:dc:b9:88:2e:d0:80:05:
3f:80:93:b6:62:be:12:73:e0:eb:26:32:ca:c3:18:2f:49:42:
60:4c:8a:fa:15:67:c6:6d:ad:c4:53:5b:07:2e:8b:e2:99:bc:
df:70:45:95:37:bb:d2:80:39:8c:7c:3a:8f:7a:f5:f8:1d:1d:
36:f2:bd:8b:84:21:f0:a2:7e:c1:18:30:72:39:36:09:95:8c:
a8:b8:f8:c4:7d:f8:c4:81:62:22:c4:5b:6e:16:7f:29:69:fa:
a2:09:c2:ad:8a:4e:ad:37:94:4e:9b:7d:f2:e2:de:0e:ba:5a:
8d:31:ad:2f:54:fa:94:be:6c:3d:7a:12:e0:27:b6:c5:39:85:
45:ab:18:f0:a0:91:9e:7b:b2:00:35:8f:5a:77:94:08:40:f1:
4a:f9:8b:53:ce:b5:86:f6:0c:e3:2f:d5:11:89:1e:fd:cb:fe:
69:48:c1:af:1e:d6:2e:38:96:3d:40:41:cd:2c:5d:7b:18:b6:
f1:de:59:b0:f9:27:1f:8b:19:8b:67:d4:5a:2e:49:27:67:0c:
07:88:81:5d:b6:34:87:13:23:27:6f:3f:05:14:8a:5b:bb:f9:
2c:0c:63:58:5c:6e:ee:48:d4:c8:1f:0a:09:4b:be:4b:1d:8a:
c2:b2:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:16 2025 by rpki-client