Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/PlhrygFHP41ATJsIeOrZ4FB8POg.roa
File: PlhrygFHP41ATJsIeOrZ4FB8POg.roa (raw, json)
Hash identifier: MvaAeMT1XUawNTunXjTK4jhGz2tlGIn4VDbaK12WDk4=
Subject key identifier: 3E:58:6B:CA:01:47:3F:8D:40:4C:9B:08:78:EA:D9:E0:50:7C:3C:E8
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 01856CC1437B94391AFB0076005686500F36
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/PlhrygFHP41ATJsIeOrZ4FB8POg.roa
Signing time: Sun 01 Jan 2023 09:54:42 +0000
ROA not before: Sun 01 Jan 2023 09:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8400
IP address blocks: 193.203.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:43:7b:94:39:1a:fb:00:76:00:56:86:50:0f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Jan 1 09:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e586bca01473f8d404c9b0878ead9e0507c3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:a6:cb:da:a1:ba:22:aa:50:89:65:28:40:
1e:37:87:5c:92:d1:68:72:32:d2:3d:01:2e:b5:c3:
04:9c:0d:08:a6:72:de:b9:f9:dc:4d:f8:81:72:39:
1c:07:b8:3b:47:ea:e9:62:95:3f:c6:2d:a6:9d:2d:
5f:d7:8b:8f:cf:c2:f9:e4:e9:e9:8d:b3:04:a7:ea:
98:d8:f6:85:b7:93:39:79:1c:7c:71:dc:f4:fb:06:
26:2d:f8:60:ea:17:ce:69:64:a7:11:90:96:09:8d:
f0:7d:a3:35:09:95:e0:29:01:0b:eb:2b:30:d6:31:
d1:43:42:9d:dd:7c:38:7b:5d:44:29:30:65:dd:58:
e4:19:09:92:cb:94:db:c8:ee:5c:a5:cb:ce:f6:ed:
7f:9f:b3:84:31:44:e7:42:9d:20:22:15:9d:1c:d3:
4c:25:ed:88:f7:da:43:65:b2:d2:ee:72:c5:07:1c:
66:fd:69:8d:0a:eb:3f:87:88:da:85:c5:4e:14:0b:
05:64:11:15:27:8f:1d:6a:0d:a0:97:bd:2b:4f:1a:
0a:7a:d7:15:5d:bd:1e:a1:46:83:c8:71:8b:f8:26:
0a:1f:7a:db:ac:1e:86:ca:21:f8:9c:cb:a1:0e:6c:
60:42:60:a9:2b:c0:6b:e4:f5:bb:b4:d3:d0:fb:3c:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:6B:CA:01:47:3F:8D:40:4C:9B:08:78:EA:D9:E0:50:7C:3C:E8
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/PlhrygFHP41ATJsIeOrZ4FB8POg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:36:ac:86:61:cf:b6:79:32:67:79:5f:0d:bf:f7:ba:9b:84:
aa:92:f4:1c:c8:95:80:d9:16:ac:c5:fb:31:eb:9d:46:10:0b:
83:1c:32:c4:49:83:f3:97:0e:4d:71:cb:4c:65:52:6c:f1:8f:
2a:25:ae:74:8e:ea:44:35:23:8a:f3:5a:0d:0c:66:51:0f:ad:
ec:cd:3f:a0:78:07:f9:35:f9:6f:c9:23:33:4f:fa:86:a1:25:
b9:e7:d0:80:2d:3a:99:fe:6f:51:2e:22:1a:04:f7:ba:2a:7e:
fc:9c:bb:d7:02:e7:28:07:13:99:49:25:be:4c:59:db:34:04:
23:85:cf:43:c6:1f:80:49:bb:49:26:d6:d8:ad:9e:c1:4d:77:
fa:3e:25:ab:23:4d:2b:b9:bb:cb:e9:f3:4e:29:1a:a2:bf:2f:
1d:8e:70:6b:65:5e:fa:e5:8d:b9:25:b3:1d:60:33:95:cd:04:
ae:14:5c:69:1a:84:23:fc:c5:09:83:85:62:fd:9e:34:19:10:
e1:aa:6d:da:ee:80:81:84:04:80:56:cd:fc:e5:f4:eb:e7:24:
c1:8f:11:66:60:72:3b:c8:65:c7:73:83:d9:84:19:e7:81:96:
18:20:09:22:4b:14:29:7f:17:60:73:6b:e8:42:a9:b3:6b:3f:
d8:d0:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:51 2025 by rpki-client