Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8ZI4STpXeTaj-7E7oPWwIufooE4.roa
File: 8ZI4STpXeTaj-7E7oPWwIufooE4.roa (raw, json)
Hash identifier: mU2jdWuwqgS9vf4rB7luPt0JXm+kLubgljjXBIxmZ80=
Subject key identifier: F1:92:38:49:3A:57:79:36:A3:FB:B1:3B:A0:F5:B0:22:E7:E8:A0:4E
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 01856DD3F6335FD6396F44143804D253EE21
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8ZI4STpXeTaj-7E7oPWwIufooE4.roa
Signing time: Sun 01 Jan 2023 14:54:45 +0000
ROA not before: Sun 01 Jan 2023 14:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49491
IP address blocks: 193.169.80.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f6:33:5f:d6:39:6f:44:14:38:04:d2:53:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jan 1 14:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f19238493a577936a3fbb13ba0f5b022e7e8a04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:04:2a:f7:6c:a8:99:16:8d:b0:d3:40:da:
84:75:f3:37:31:79:11:b1:cb:53:be:e8:a8:97:a6:
3c:a8:aa:78:b3:f2:f1:9d:16:19:40:17:60:31:84:
c5:e9:29:b0:f3:08:43:52:7d:84:6c:a7:e5:41:e3:
35:f4:80:1c:ce:38:b1:5e:e5:62:1a:50:f4:f9:61:
e5:c6:a7:ac:8f:26:f7:44:41:09:07:9c:72:1c:69:
9f:b6:d4:55:4f:44:10:d0:65:d4:87:e5:b1:8c:39:
0b:b8:ec:d0:e1:ec:bf:57:38:fb:26:49:83:81:44:
18:f2:e5:dd:f3:a6:a3:bd:0a:6f:7b:9b:63:01:46:
71:c3:fd:ff:2c:ce:75:e9:4f:c9:6d:4f:0e:55:67:
73:2e:ee:b4:4d:06:14:3f:0c:36:28:78:e3:4b:e9:
70:ec:7d:d1:c6:dc:88:9c:9d:eb:0b:e2:66:27:3e:
e8:06:ec:91:53:17:8d:17:fc:ef:d9:36:8f:06:c6:
79:44:4d:7e:fc:01:c3:53:d8:84:7f:2d:e9:b5:bb:
5e:4e:d5:41:9c:31:c5:ef:e4:2b:c4:ba:47:30:64:
35:9c:d0:93:dd:fb:ca:19:02:96:c1:2b:47:1b:1d:
f3:d4:94:7c:d2:58:b2:5a:8d:2e:1f:44:1e:4a:ca:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:38:49:3A:57:79:36:A3:FB:B1:3B:A0:F5:B0:22:E7:E8:A0:4E
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8ZI4STpXeTaj-7E7oPWwIufooE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.80.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:4b:8b:0e:9a:5b:ae:42:da:92:37:0c:c5:7a:a9:df:26:44:
0d:34:a1:b3:dd:dc:b0:5a:b4:60:d3:48:d5:ab:87:de:49:b1:
a2:78:83:6e:ca:97:66:cf:12:61:47:ad:64:35:2b:1f:42:92:
b1:5b:a2:9c:46:b8:09:9c:ab:7a:b9:7f:9b:9c:7d:21:39:2a:
54:80:82:fa:d3:32:2f:cc:94:81:53:11:fd:73:00:9d:a7:71:
22:a7:91:0a:1b:06:4b:98:ff:c8:40:68:e0:57:55:e5:69:2a:
aa:04:39:86:72:9b:8d:e8:0d:3f:71:03:56:f8:a1:77:c7:24:
2d:59:d8:2c:e7:53:c4:87:09:75:a8:2d:5f:2f:0b:2d:c2:36:
16:e6:e6:6c:ab:66:5b:9d:be:4b:f6:54:f8:35:8b:ee:a1:72:
0b:53:27:7d:f8:ed:3a:fe:b6:04:af:5d:39:41:47:83:f6:c8:
78:36:a5:18:4e:c2:71:af:8d:85:7a:46:6a:28:80:bc:53:21:
d6:58:31:50:71:fb:f3:9a:bb:05:25:58:a5:06:00:26:12:8d:
3e:3d:fe:a0:c6:50:d0:34:34:a6:44:fa:93:7c:27:00:f7:83:
ea:f9:5f:a3:74:5f:dd:b0:61:41:c5:7e:28:33:b1:67:40:b3:
d8:a0:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:14:52 2025 by rpki-client