Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/D_8Xp_FbORwtIC1ca0be7eN2M9E.roa
File: D_8Xp_FbORwtIC1ca0be7eN2M9E.roa (raw, json)
Hash identifier: fAkAnNaHEZvUu5l3dryws/00Ezc1QdwafTa56XjQXAQ=
Subject key identifier: 0F:FF:17:A7:F1:5B:39:1C:2D:20:2D:5C:6B:46:DE:ED:E3:76:33:D1
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 0189F40223DD43AB0D35F8FDFFDB5077D0EE
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/D_8Xp_FbORwtIC1ca0be7eN2M9E.roa
Signing time: Mon 14 Aug 2023 12:25:28 +0000
ROA not before: Mon 14 Aug 2023 12:25:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41077
IP address blocks: 193.104.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:02:23:dd:43:ab:0d:35:f8:fd:ff:db:50:77:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Aug 14 12:25:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fff17a7f15b391c2d202d5c6b46deede37633d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:44:0a:c5:be:a9:d7:6c:b9:da:cd:d3:07:
b6:b6:54:ae:7d:41:13:a4:79:0e:45:bd:18:62:e3:
fe:f7:91:28:b8:fb:c7:0f:25:e2:57:29:63:fa:1b:
cf:c0:14:75:57:69:74:0d:79:8a:bb:a0:5a:47:e9:
d0:bd:9d:e5:44:f2:0f:cb:d7:3c:2b:9d:bb:71:8a:
f5:f4:10:1b:d9:26:57:62:3c:06:f5:23:9a:d6:5a:
41:f5:2a:65:75:fd:88:c6:b8:25:9a:17:dd:ff:64:
a5:76:d1:0f:d2:89:d6:aa:c7:6f:c2:2d:b8:bd:72:
73:b4:57:28:7f:72:79:19:ef:9c:52:98:cb:8f:7b:
6b:de:a7:8f:c0:93:f9:e2:18:5e:ed:41:00:00:3b:
d0:fb:f2:b9:64:42:d2:3a:8d:28:68:21:8e:7a:49:
5a:f5:d1:d8:04:52:3a:23:c4:16:54:b8:40:09:2c:
62:d2:a4:d0:80:14:d8:85:8b:a5:88:fb:f8:5a:91:
ff:18:13:04:c0:84:07:9b:9d:26:ec:61:de:8c:8b:
d4:8b:7e:a3:bc:36:6e:07:fe:b4:dd:54:37:cc:f7:
2b:1a:48:d2:ea:c9:72:58:ae:19:6e:5c:ac:f4:d0:
b0:ec:63:52:3c:6b:83:86:8a:40:d5:a3:fb:d5:09:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:17:A7:F1:5B:39:1C:2D:20:2D:5C:6B:46:DE:ED:E3:76:33:D1
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/D_8Xp_FbORwtIC1ca0be7eN2M9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1c:55:92:eb:34:7b:a0:1f:f3:fa:62:62:bf:38:33:82:85:
cb:48:20:a6:2f:a1:cd:66:49:e1:9e:38:54:c8:62:48:17:a2:
41:45:28:3d:63:c1:bf:73:f1:5e:31:97:05:71:84:8d:fc:70:
5a:37:a0:c5:8d:1d:95:b3:61:33:5e:18:68:28:ab:1f:db:e4:
7e:20:00:ec:41:43:0c:00:b6:d9:c3:4a:05:5a:6c:af:05:2f:
8b:ba:b2:32:70:62:7b:4f:aa:82:65:52:eb:5e:72:a3:46:ae:
45:f2:e2:61:e7:50:44:1b:ff:a5:d0:f7:e4:77:65:49:b6:c1:
ca:38:c3:ba:10:f0:c3:e5:a7:b6:7e:be:31:46:cb:26:ed:83:
23:46:b8:56:b4:68:09:dd:80:33:08:49:77:7e:bb:2e:b6:15:
bc:af:5f:10:14:d5:4e:2b:4a:51:e3:2b:99:69:c6:0b:56:0c:
54:6f:5f:d2:d8:79:48:74:46:34:6a:47:1c:c0:a0:5c:fb:f1:
2f:bd:6c:32:d7:5a:4e:0c:31:a8:6b:23:b3:20:6e:44:db:44:
67:25:55:84:42:9b:33:61:0b:75:97:55:2a:12:51:7f:22:2b:
df:45:4c:17:b4:9b:16:60:3d:7b:e5:19:07:a0:1f:06:4b:60:
b0:b9:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:48:33 2025 by rpki-client