Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/c4dElDOTP_4m1r8bjsRikKfFRLE.roa
File: c4dElDOTP_4m1r8bjsRikKfFRLE.roa (raw, json)
Hash identifier: eOqglPH8/FkQw0nRwCiPVG1wdvb1W4jKeQwgsgCi4Jo=
Subject key identifier: 73:87:44:94:33:93:3F:FE:26:D6:BF:1B:8E:C4:62:90:A7:C5:44:B1
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 018B23C4B4D9420C1208CEF984927C0A7858
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/c4dElDOTP_4m1r8bjsRikKfFRLE.roa
Signing time: Thu 12 Oct 2023 12:02:55 +0000
ROA not before: Thu 12 Oct 2023 12:02:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.5.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:c4:b4:d9:42:0c:12:08:ce:f9:84:92:7c:0a:78:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Oct 12 12:02:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7387449433933ffe26d6bf1b8ec46290a7c544b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:78:3b:64:2f:4d:73:20:76:2b:27:c8:6f:
9a:0d:41:92:7a:76:b3:23:0e:8d:d0:24:dd:00:7d:
a6:11:6a:14:92:12:cd:13:d6:47:a5:9d:f5:ab:8b:
f3:7d:0d:66:33:ad:d8:8c:d4:33:0d:77:5e:87:92:
a3:60:09:90:fd:e6:63:05:d9:92:1a:da:e3:82:d3:
01:e8:78:24:76:5b:09:af:67:74:80:52:0b:bc:1c:
fc:a1:d1:38:af:76:6f:c0:89:36:47:1a:7f:b0:d5:
44:96:92:a3:d9:f7:4e:59:d0:9f:52:2f:64:20:82:
c6:5f:45:02:7d:db:51:14:c1:19:44:6d:9c:bb:b9:
2b:99:01:e4:82:da:76:1c:ae:f0:f8:56:be:1a:8d:
c3:61:04:de:19:1f:c6:97:75:2b:e1:ab:68:08:00:
f6:28:68:ec:64:74:29:7c:25:90:19:29:84:19:73:
a9:d4:c8:1b:86:dc:04:6e:8f:c5:c4:06:19:2c:c1:
0c:68:d6:a6:63:45:5b:99:c8:f1:f0:c9:25:8e:91:
38:6a:ad:29:13:bd:83:5a:9c:ce:6e:46:21:91:1a:
1f:c0:5b:1b:65:08:fb:fc:49:90:0a:01:b8:03:2b:
02:5e:d9:8b:cf:14:e2:6a:64:ff:38:e0:16:25:a8:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:44:94:33:93:3F:FE:26:D6:BF:1B:8E:C4:62:90:A7:C5:44:B1
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/c4dElDOTP_4m1r8bjsRikKfFRLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dd:91:c7:19:2f:da:d2:67:a9:a4:b4:7a:83:14:ba:2d:f4:
5f:9e:bf:dd:7f:8a:9a:44:f4:ec:e0:a6:88:50:5d:e0:16:5a:
25:7c:5e:49:aa:f2:4e:5a:e5:93:3d:26:03:22:53:7e:0d:4a:
28:79:0d:04:5b:19:1c:d8:a2:11:7f:67:bf:56:f9:3b:dc:1c:
f3:ea:de:aa:d6:db:fa:6a:53:e6:23:5a:da:94:c3:59:34:07:
8b:34:64:63:ef:32:ee:e9:d0:dd:b2:b8:56:52:4f:e4:79:6c:
31:8d:b7:b5:5d:11:3a:d3:e1:7a:e0:fa:0a:ad:01:b5:9a:9a:
70:38:03:66:39:63:77:bc:ba:b2:d2:8e:1f:f7:3b:ce:d3:a7:
a6:aa:f8:2e:45:b5:83:52:37:f7:24:2f:99:2d:6c:a6:37:b8:
e7:7d:03:cc:ea:a6:2e:57:a7:c2:a9:38:f9:6a:f5:99:9a:4e:
0d:5b:54:f6:db:e3:db:f8:47:54:a7:c7:c8:68:e5:66:5a:ae:
69:e7:5d:e1:66:aa:1a:ea:2d:55:d9:a0:aa:9a:a5:94:88:da:
b6:b8:0a:ec:f4:1c:fd:20:f7:5e:73:f7:47:d7:d4:cb:75:66:
5f:af:67:55:6c:a7:0c:bb:7d:bd:19:86:38:3d:df:f9:09:df:
bc:39:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:03 2025 by rpki-client