Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/IAhrIcUPN9UbxN7j_jCmy5skgjU.roa
File: IAhrIcUPN9UbxN7j_jCmy5skgjU.roa (raw, json)
Hash identifier: TNZe11EBn1vnr8OVNrEZip70dPh0CCC+A7+8YerJURI=
Subject key identifier: 20:08:6B:21:C5:0F:37:D5:1B:C4:DE:E3:FE:30:A6:CB:9B:24:82:35
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 37BECFCE
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/IAhrIcUPN9UbxN7j_jCmy5skgjU.roa
Signing time: Sat 01 Jan 2022 12:06:56 +0000
ROA not before: Sat 01 Jan 2022 12:06:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202220
IP address blocks: 83.230.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935251918 (0x37becfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 12:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20086b21c50f37d51bc4dee3fe30a6cb9b248235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:a4:be:93:96:15:f8:fc:d0:8f:a3:79:b5:
bf:a6:88:01:b9:cf:67:2d:fc:9e:de:a0:dd:a4:f3:
43:01:4d:1d:c1:70:2d:45:2a:37:2b:40:80:13:c1:
07:b9:6d:43:75:31:7f:e9:72:2d:7f:76:87:84:b6:
eb:6a:1a:43:e9:87:79:97:0c:ef:6b:31:ca:69:18:
4a:e1:f6:29:ab:9d:07:9c:eb:4d:9b:09:6f:5e:d9:
69:5c:e1:20:d2:af:99:c1:21:af:13:54:14:3b:48:
8e:6e:31:e1:c6:54:94:f7:b1:64:cd:19:2e:0b:12:
8d:d0:23:8b:1d:ce:de:b8:bb:36:ea:fb:e2:11:32:
5c:ea:4c:7c:26:65:c6:8b:43:db:37:f9:31:4b:96:
2b:04:60:f1:35:7c:0b:b9:18:e8:e3:f1:18:7d:00:
e8:ae:75:6a:7e:92:5b:f2:d1:73:dc:2d:1b:c1:05:
31:c6:92:e2:52:be:ea:8c:56:56:2b:0f:41:aa:54:
d7:1a:e1:9e:83:76:4b:b0:bf:49:54:c6:a3:77:fe:
72:e4:d7:9a:c1:a2:96:1a:b5:5f:6c:2c:6a:0d:1f:
39:94:6d:63:e3:07:cf:00:7e:79:b9:0f:0a:e4:80:
30:a9:39:f3:d6:5e:e8:04:0a:47:b6:57:4d:ce:63:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:6B:21:C5:0F:37:D5:1B:C4:DE:E3:FE:30:A6:CB:9B:24:82:35
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/IAhrIcUPN9UbxN7j_jCmy5skgjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e9:ac:69:7a:ac:44:a1:e4:a5:7e:9a:a2:46:1a:3b:76:33:
27:e7:0c:dd:3c:d7:77:97:82:04:98:4b:15:8c:91:7f:98:31:
1c:1c:28:b0:1a:ac:ab:b3:22:a6:65:d6:6a:db:0f:66:ea:39:
53:ab:0f:2e:ff:40:ec:5a:5c:a1:ab:6a:88:97:3a:d9:01:88:
b5:51:8a:79:d0:00:4b:89:43:dc:76:67:ad:f4:fc:66:90:54:
2f:d5:6d:c1:1d:70:56:bc:db:c6:80:68:1e:78:72:fc:02:28:
0f:c8:6e:1a:c2:bf:c0:09:6f:4d:81:8c:a7:9e:46:53:22:b1:
60:c6:e5:09:40:d5:da:2a:52:d9:56:e4:d9:a6:1d:79:3e:3e:
47:33:bc:6c:12:68:75:16:32:95:b4:5c:a1:c7:06:28:2d:6c:
af:4b:ce:e6:a8:4b:fd:59:0d:ac:9b:e4:98:64:81:2e:1d:c4:
2c:8f:39:15:2f:ac:79:c2:1e:c6:3e:0f:18:a6:fc:57:1c:6a:
2e:cd:95:5d:9f:30:aa:4b:cd:2f:52:08:c3:e0:0b:10:d4:44:
0d:af:23:5a:e0:78:a7:86:2e:e7:be:f8:34:96:8c:08:eb:bf:
1a:9e:83:06:f0:12:90:5a:2f:cb:ef:bb:f8:7b:3c:ff:16:60:
96:8d:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:53 2025 by rpki-client