Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/s87Ch2xxi0L4JrQYtBYazpFDw3I.roa
File: s87Ch2xxi0L4JrQYtBYazpFDw3I.roa (raw, json)
Hash identifier: AqwvPrMJtSkY55hhBS6IyTreWk3x87SHh0cgZrDBVEg=
Subject key identifier: B3:CE:C2:87:6C:71:8B:42:F8:26:B4:18:B4:16:1A:CE:91:43:C3:72
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 09FA36EE
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/s87Ch2xxi0L4JrQYtBYazpFDw3I.roa
Signing time: Sat 01 Jan 2022 16:06:18 +0000
ROA not before: Sat 01 Jan 2022 16:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206907
IP address blocks: 193.200.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167393006 (0x9fa36ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jan 1 16:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3cec2876c718b42f826b418b4161ace9143c372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:08:84:03:71:88:a1:b4:fa:c0:d3:16:24:
51:e3:41:39:c1:43:04:e0:46:8c:19:cf:72:52:0e:
68:3a:0f:ac:bb:3d:99:c4:cd:61:02:ca:4c:8b:3a:
35:9e:99:da:4d:c3:00:c1:40:a3:36:5c:a9:9f:ab:
c5:19:e1:20:28:82:87:bd:21:65:6c:d5:e7:18:f2:
2e:ff:e5:9a:1f:7f:71:c7:2b:f1:d5:4e:21:b6:0d:
43:b6:1c:a9:f6:81:19:5b:64:3f:36:71:58:e3:5f:
b5:10:65:88:26:ba:84:0b:fd:d7:b4:b9:8a:03:3e:
41:3f:0a:28:c2:fa:6a:f2:bc:5b:c3:c2:6f:cc:c4:
4b:01:a1:82:31:e5:f5:35:b2:a4:ea:38:68:d1:15:
f7:0e:6a:b6:42:bb:59:0b:5d:e4:5a:65:e1:5e:fd:
3e:10:b4:4f:63:32:53:3c:b7:24:6d:c8:ab:65:8c:
c0:d7:b7:46:49:79:d6:96:c7:c9:91:a4:cb:a8:37:
d5:08:95:bd:71:98:63:b7:6d:3e:8f:66:6f:06:87:
51:48:04:96:4e:48:1c:9a:33:10:99:44:c9:cc:44:
c4:4f:f4:19:d9:39:23:96:f9:87:10:2b:49:47:ae:
81:2a:d6:54:75:fa:f0:6f:d1:16:6f:5d:c3:cc:f0:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:C2:87:6C:71:8B:42:F8:26:B4:18:B4:16:1A:CE:91:43:C3:72
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/s87Ch2xxi0L4JrQYtBYazpFDw3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.84.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:78:c9:17:45:dd:34:cb:82:4f:b4:d0:e2:fc:c5:2b:95:25:
e7:3d:f7:6e:90:9b:c2:ec:9b:84:62:54:69:cc:a6:91:c0:7b:
2a:ff:95:68:f5:4e:e2:58:a5:28:35:2a:6c:fc:b1:0e:81:19:
b8:8c:08:bc:91:2b:49:c4:d0:0d:2e:42:32:6d:12:83:5b:14:
a7:70:a9:0e:85:af:f1:76:a0:f1:59:27:63:16:c0:8d:d6:1c:
c0:b3:70:62:30:4c:e2:d2:05:ea:89:ff:de:91:3b:30:aa:46:
8b:01:d3:54:a9:86:02:73:a7:43:52:d2:dc:dd:71:5d:7a:82:
42:dc:46:a2:98:fb:cd:e9:20:e5:4e:63:83:52:7f:92:ab:b7:
8c:84:ad:cc:40:87:d7:e5:f0:10:ed:40:c0:1a:ef:c9:93:25:
91:75:86:6f:24:69:5c:a3:3f:a0:b8:27:83:34:08:6e:19:49:
6b:6d:df:e3:1b:c1:bd:90:e7:7d:06:f4:a7:9b:3c:c0:f3:f2:
23:35:ae:88:28:ed:d8:0f:00:8a:e8:61:d0:b7:c0:a2:c0:22:
e5:e7:b0:3f:ea:af:fc:d2:3b:c7:2c:df:ce:b5:ab:68:f0:e5:
05:cc:77:5c:f8:f6:e0:84:25:5a:d6:02:2f:ab:35:c4:dc:53:
b4:8f:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:48:24 2025 by rpki-client