Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/Tp0j3YTMBLFttq4s4TuZSzPKFtE.roa
File: Tp0j3YTMBLFttq4s4TuZSzPKFtE.roa (raw, json)
Hash identifier: xlVNPRJcUBcCN+SizWTqdcqbOvT48K3pPxU655BGnNY=
Subject key identifier: 4E:9D:23:DD:84:CC:04:B1:6D:B6:AE:2C:E1:3B:99:4B:33:CA:16:D1
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 0185714C2CEB228A980673F1FFA4996A37BF
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/Tp0j3YTMBLFttq4s4TuZSzPKFtE.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212485
IP address blocks: 193.163.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2c:eb:22:8a:98:06:73:f1:ff:a4:99:6a:37:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9d23dd84cc04b16db6ae2ce13b994b33ca16d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:43:7a:f1:98:44:9a:e9:cb:7b:27:96:17:
32:b8:ae:7f:75:cf:09:44:55:4e:cf:3d:f1:ce:af:
01:d0:06:52:39:97:46:86:14:1a:8c:57:38:49:3f:
c9:3e:cf:bd:a4:89:f5:8c:08:0a:de:0a:17:96:ca:
63:45:91:5c:4b:d8:b0:9c:d0:ce:eb:42:b6:be:f3:
58:cc:f4:0d:e6:4c:83:fc:16:28:70:05:e6:e1:f9:
6a:b0:42:c2:cd:89:c3:e9:24:c5:d8:11:37:9a:72:
13:9a:61:90:6a:5d:95:12:c6:35:90:e8:c0:ae:28:
da:43:41:1c:49:5c:bb:65:51:4e:74:49:f2:b5:89:
7c:03:b7:22:1e:95:e4:35:dd:a6:15:8d:35:5e:ca:
1c:7d:b1:9f:aa:4d:10:25:bf:38:73:cc:6c:62:2c:
79:f9:7e:40:f8:35:75:ab:78:fa:a6:e9:1c:17:60:
eb:93:2d:71:f3:6d:7c:af:2b:d5:40:e1:3e:08:8a:
c7:eb:96:7c:20:a2:32:ba:a8:b2:fc:e5:ef:78:d4:
19:86:fa:f8:a7:26:40:12:2a:d0:fc:04:05:cc:a7:
cb:7c:fb:e4:39:8c:2f:7d:be:d0:dc:81:1b:59:7e:
7c:55:a8:4a:db:59:f1:e4:9a:58:f1:eb:df:b3:36:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:23:DD:84:CC:04:B1:6D:B6:AE:2C:E1:3B:99:4B:33:CA:16:D1
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/Tp0j3YTMBLFttq4s4TuZSzPKFtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8e:37:7e:66:6a:6f:a0:5f:30:d0:54:f3:81:e3:e5:97:1d:
d8:1c:9c:97:0a:00:6f:c1:2b:16:14:52:8d:5a:90:a6:81:91:
54:1e:18:88:a7:0c:0c:7a:67:3c:1a:a1:f1:c2:b3:b3:9d:22:
8f:bb:60:56:a4:a1:83:d6:25:8b:02:54:71:c1:48:4a:eb:7b:
1f:fc:fd:57:99:5d:64:fe:52:54:b0:c5:43:a0:49:e1:9b:67:
78:88:75:47:e8:92:8c:5b:1a:48:f4:99:22:14:db:99:c9:a0:
35:29:f3:46:f8:d0:b3:0b:27:8c:b9:9b:f8:ed:08:9d:5d:ee:
06:3a:26:d6:07:0e:e5:b4:a5:49:67:0a:03:3f:d7:5d:08:fc:
25:a7:c1:0c:6c:4e:f4:59:29:a1:7e:90:06:d7:b4:88:5b:4f:
ae:c2:8a:fd:4e:b0:6d:e0:79:65:df:72:cf:c7:b4:c6:13:42:
8f:ab:6c:19:42:44:2f:b2:a4:41:00:8c:55:68:88:44:3c:e9:
f1:ce:c7:c1:fb:83:af:6c:e4:0d:76:fe:4a:36:04:03:f8:d1:
96:11:47:93:86:a9:fb:71:5d:ec:47:be:97:ee:93:32:ad:8b:
03:50:96:da:1a:f2:a0:fd:04:8f:29:b9:f4:c4:a8:3e:49:54:
34:fe:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:19 2025 by rpki-client