Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/DJw0jt2I7Pv_GR39bihatluEGPc.roa
File: DJw0jt2I7Pv_GR39bihatluEGPc.roa (raw, json)
Hash identifier: CgFODzGzoi9keVpaFD9QwrhcVIiYBZbieh7n9kK9jXQ=
Subject key identifier: 0C:9C:34:8E:DD:88:EC:FB:FF:19:1D:FD:6E:28:5A:B6:5B:84:18:F7
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 01856F1DAD3BFE25EEA60779B0B47D0AE6DD
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/DJw0jt2I7Pv_GR39bihatluEGPc.roa
Signing time: Sun 01 Jan 2023 20:54:53 +0000
ROA not before: Sun 01 Jan 2023 20:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 193.103.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ad:3b:fe:25:ee:a6:07:79:b0:b4:7d:0a:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c9c348edd88ecfbff191dfd6e285ab65b8418f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:43:69:32:ac:e4:8d:3e:bf:45:46:df:66:
25:d5:2c:50:93:bf:90:da:8d:2c:1e:18:95:47:6d:
e0:30:29:4f:b6:71:a0:1c:ba:9c:00:84:74:40:66:
19:5f:f4:f6:4d:c5:6e:53:e3:70:55:63:af:ac:ed:
a5:2a:14:31:75:cc:fd:8e:01:a3:59:c5:a2:dd:55:
00:f7:8b:90:07:0a:d0:08:0a:83:3e:7d:76:51:88:
e0:b5:f7:38:f6:2f:e4:50:36:b3:4a:b5:c5:53:21:
35:4b:8d:18:20:c2:4b:ed:73:9b:53:29:c2:88:96:
89:a3:3a:92:17:85:ae:b3:35:75:22:1a:6b:98:6c:
99:e3:51:39:b8:fa:2e:7d:df:95:4f:61:bd:7b:5b:
ba:b2:e4:cf:e6:5c:42:42:84:8a:ec:69:85:48:59:
28:38:2b:58:ed:97:e1:4c:ab:a9:7b:5c:7c:a2:1c:
a6:c4:3b:07:e8:07:e2:d6:fc:c8:13:a6:35:36:e5:
f6:33:94:bc:d7:a2:a4:11:c8:cb:03:fd:f8:5b:99:
ee:f0:68:9d:4c:2d:e3:fd:b3:28:9f:7a:f0:10:87:
43:e0:21:d2:68:06:3f:89:8f:8c:77:86:6a:da:de:
22:f3:5a:b8:6e:40:a2:7b:7e:b6:59:e3:b3:d3:0b:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:34:8E:DD:88:EC:FB:FF:19:1D:FD:6E:28:5A:B6:5B:84:18:F7
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/DJw0jt2I7Pv_GR39bihatluEGPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7e:7f:b6:11:c0:76:bb:36:ae:91:9f:23:51:eb:9a:57:29:
4c:f7:79:46:7d:b2:f6:a1:2d:c8:58:3c:e3:99:ab:c7:7a:b7:
e0:19:65:d8:64:9d:4e:c0:1e:74:f0:07:98:ec:3c:c2:9c:d9:
28:23:55:e3:b5:88:a2:33:e9:58:7d:b1:ee:56:20:bc:0c:99:
e4:8a:03:28:a8:8f:f4:3f:fb:a4:73:4c:5e:1b:bd:5e:eb:34:
3c:ae:eb:26:be:d9:d7:d7:fe:66:c2:26:40:2d:56:6a:bd:86:
17:c1:96:9b:5f:88:c8:95:e1:4a:7a:62:e5:6f:42:22:df:84:
1b:31:50:55:97:1d:6d:9e:f2:5e:c1:54:74:5c:26:2e:6b:73:
ed:77:e2:bf:80:d1:8e:e2:47:23:34:4d:16:d1:77:6c:1c:c2:
53:e8:31:e2:bc:ba:b4:20:d0:f4:b0:d5:29:08:8f:c9:6d:e2:
45:cb:bb:a9:73:61:12:f0:4d:65:2b:a4:b1:cf:75:d9:36:ff:
9c:2e:b9:97:63:1a:24:f2:f3:2e:cb:57:92:f1:21:e6:57:e5:
6c:30:fe:ea:5c:6c:f0:c9:ac:ad:69:2b:b9:1d:fd:bb:9a:aa:
cd:4a:6c:57:15:8b:99:5c:37:02:55:82:a4:7b:78:a4:c3:ed:
4d:e5:1e:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHa07/iXupgd5sLR9CubdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm
NmM3MzEwHhcNMjMwMTAxMjA1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzljMzQ4ZWRkODhlY2ZiZmYxOTFkZmQ2ZTI4NWFiNjViODQxOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnChDaTKs5I0+v0VG32Yl1SxQk7+Q
2o0sHhiVR23gMClPtnGgHLqcAIR0QGYZX/T2TcVuU+NwVWOvrO2lKhQxdcz9jgGj
WcWi3VUA94uQBwrQCAqDPn12UYjgtfc49i/kUDazSrXFUyE1S40YIMJL7XObUynC
iJaJozqSF4WuszV1IhprmGyZ41E5uPoufd+VT2G9e1u6suTP5lxCQoSK7GmFSFko
OCtY7ZfhTKupe1x8ohymxDsH6Afi1vzIE6Y1NuX2M5S816KkEcjLA/34W5nu8Gid
TC3j/bMon3rwEIdD4CHSaAY/iY+Md4Zq2t4i81q4bkCie362WeOz0wsUOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAycNI7diOz7/xkd/W4oWrZbhBj3MB8GA1UdIwQY
MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt
Y2VjMzNiYTFiZGY1LzEvREp3MGp0Mkk3UHZfR1IzOWJpaGF0bHVFR1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1
LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWelMA0G
CSqGSIb3DQEBCwUAA4IBAQAsfn+2EcB2uzaukZ8jUeuaVylM93lGfbL2oS3IWDzj
mavHerfgGWXYZJ1OwB508AeY7DzCnNkoI1XjtYiiM+lYfbHuViC8DJnkigMoqI/0
P/ukc0xeG71e6zQ8rusmvtnX1/5mwiZALVZqvYYXwZabX4jIleFKemLlb0Ii34Qb
MVBVlx1tnvJewVR0XCYua3Ptd+K/gNGO4kcjNE0W0XdsHMJT6DHivLq0IND0sNUp
CI/JbeJFy7upc2ES8E1lK6Sxz3XZNv+cLrmXYxok8vMuy1eS8SHmV+VsMP7qXGzw
yaytaSu5Hf27mqrNSmxXFYuZXDcCVYKke3ikw+1N5R7o
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:34 2025 by rpki-client