Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/t4Tpyi_Culz3D__u4osHWK8poJ4.roa
File: t4Tpyi_Culz3D__u4osHWK8poJ4.roa (raw, json)
Hash identifier: NqLI/Ll94V8xaxSFL+55cxP1ke5dDNuFh50cF3hexT8=
Subject key identifier: B7:84:E9:CA:2F:C2:BA:5C:F7:0F:FF:EE:E2:8B:07:58:AF:29:A0:9E
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 4054B9E7
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/t4Tpyi_Culz3D__u4osHWK8poJ4.roa
Signing time: Sat 01 Jan 2022 03:56:05 +0000
ROA not before: Sat 01 Jan 2022 03:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199155
IP address blocks: 193.236.16.0/20 maxlen: 20
2001:697::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079294439 (0x4054b9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 03:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b784e9ca2fc2ba5cf70fffeee28b0758af29a09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:fc:5a:76:71:e8:53:e6:b0:62:a7:9c:8e:
cb:b3:21:49:98:cc:47:21:bc:a2:9c:fc:0e:9d:a3:
31:1c:22:73:4d:e6:37:50:c0:fb:bf:19:b6:5d:a0:
7d:8f:95:fe:76:6b:e5:81:c4:9b:2e:71:6d:53:6a:
55:4f:a0:af:86:43:44:e4:38:2a:46:22:67:98:16:
4a:69:bc:b6:13:f1:72:44:01:fd:b9:39:fb:5d:4e:
89:3f:53:85:29:a2:e6:b0:6f:e3:cb:f7:d4:c4:5d:
51:c5:4b:c0:93:05:f1:a6:3e:13:11:0c:86:de:04:
8a:70:0d:f9:4d:1d:a3:b7:0a:cc:11:71:eb:7f:41:
53:3b:0a:af:2f:5c:54:03:45:b9:a4:0a:3b:1a:0a:
d0:d7:ae:03:cf:60:ee:52:11:e5:c9:75:90:cf:c8:
40:d3:02:1c:e8:7b:ec:33:05:46:77:8b:99:51:45:
36:c2:89:63:71:f7:0d:c3:84:59:3c:c7:67:04:b8:
8f:8d:aa:04:97:d7:03:fb:18:78:83:1a:27:72:68:
3e:de:9f:86:b0:39:15:1a:5f:3e:87:5b:c2:3b:d2:
44:5e:3e:6b:ff:32:d8:10:8d:ed:f1:49:83:08:90:
2f:bf:c5:c0:0f:1b:7d:12:e0:7d:7c:46:23:aa:69:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:E9:CA:2F:C2:BA:5C:F7:0F:FF:EE:E2:8B:07:58:AF:29:A0:9E
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/t4Tpyi_Culz3D__u4osHWK8poJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.16.0/20
IPv6:
2001:697::/32
Signature Algorithm: sha256WithRSAEncryption
06:d2:22:42:9b:d6:17:77:59:dc:4d:06:9e:c0:87:c0:8b:e1:
db:04:f3:19:26:db:7d:4c:17:12:0b:52:81:8e:79:e7:bd:97:
79:05:6f:97:12:71:7d:82:65:c2:40:34:08:0a:fe:ab:78:84:
1f:39:20:38:e2:1d:f7:13:a8:73:e7:23:11:82:b0:7a:75:07:
65:16:e9:9b:64:5d:b8:ce:7a:72:22:17:20:c4:03:9c:77:a4:
f9:d6:82:d8:93:a1:a0:16:e8:04:c5:83:a5:72:76:3c:01:1e:
16:f6:4b:9d:a5:66:f7:c6:74:22:a5:73:71:1a:4a:7d:48:16:
7b:e9:a0:a8:8e:e0:66:32:e6:18:0f:53:ea:e0:5c:af:96:71:
7c:3a:f6:cd:bf:1f:1a:b9:16:c6:fa:a8:1b:09:e5:60:e3:73:
29:eb:b9:fc:31:2a:9b:1a:5d:11:38:f1:4c:c2:11:fa:f6:c4:
52:fd:3b:2c:62:98:f5:96:23:75:72:a8:3f:89:21:fa:ff:8e:
a7:93:20:69:e2:1c:b6:16:15:47:46:8f:9a:30:70:a0:2b:14:
e9:72:be:c1:38:74:65:57:46:b9:a7:d1:af:6d:84:0a:fe:95:
ae:4c:21:64:01:44:11:55:4a:57:c6:b0:61:a4:b0:2d:f9:c0:
49:d3:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:33 2025 by rpki-client