Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/w3u8G6c-YbFS16-twCBx8KEnMs8.roa
File: w3u8G6c-YbFS16-twCBx8KEnMs8.roa (raw, json)
Hash identifier: n+5Fxf4Gp+SszNcoQ1BymNm1HGI1JHGcq4zPiR0SuTY=
Subject key identifier: C3:7B:BC:1B:A7:3E:61:B1:52:D7:AF:AD:C0:20:71:F0:A1:27:32:CF
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 018BE496AB98B283C5A4C0B6E2B2752E77DF
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/w3u8G6c-YbFS16-twCBx8KEnMs8.roa
Signing time: Sat 18 Nov 2023 22:39:21 +0000
ROA not before: Sat 18 Nov 2023 22:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25141
IP address blocks: 93.157.8.0/23 maxlen: 23
93.157.9.0/24 maxlen: 24
93.157.11.0/24 maxlen: 24
93.157.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:96:ab:98:b2:83:c5:a4:c0:b6:e2:b2:75:2e:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Nov 18 22:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c37bbc1ba73e61b152d7afadc02071f0a12732cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:1f:32:4f:39:2f:09:fa:19:74:62:53:24:
a2:90:bd:d9:0a:3c:dc:39:63:4d:d1:8e:16:72:9b:
0d:c6:5c:5a:c0:6c:d4:71:ed:98:64:83:16:c1:3b:
25:be:a7:a6:66:4c:04:b7:29:70:6b:03:45:8a:0d:
03:36:d0:b3:37:a8:cb:cd:89:80:43:9f:18:50:f7:
f8:f6:1e:aa:fa:70:05:2b:0c:d8:b8:49:64:63:49:
a2:a8:ec:5c:37:1a:2d:b7:fa:37:4a:d7:59:6b:fc:
f7:a5:39:63:f0:2a:e2:b1:68:7c:2e:4b:33:af:d0:
f6:c9:18:a4:f6:6e:73:c7:10:ff:76:eb:74:67:87:
06:2e:91:6f:f7:ce:ca:e8:2b:75:37:bb:36:43:b7:
db:b7:9c:03:f5:79:45:e8:a3:25:a1:cf:4c:a3:f7:
d9:69:6f:5f:b2:c7:51:55:f9:3b:29:98:04:5c:37:
53:9a:5a:31:58:6a:13:8c:7c:fd:1c:44:6f:57:03:
cd:63:d7:bc:91:ba:27:75:2d:6e:a5:44:2f:00:5d:
31:f6:bd:0a:b6:be:10:39:d4:c9:b2:7a:9a:11:40:
80:40:9a:46:a7:93:e8:56:7c:6d:69:e4:88:c2:f9:
a5:26:fc:21:a0:20:4e:12:37:17:c3:b5:34:72:91:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7B:BC:1B:A7:3E:61:B1:52:D7:AF:AD:C0:20:71:F0:A1:27:32:CF
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/w3u8G6c-YbFS16-twCBx8KEnMs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.8.0/22
Signature Algorithm: sha256WithRSAEncryption
99:60:7d:be:32:ff:8b:ff:e9:46:ce:ba:d8:ab:10:1d:eb:b9:
a1:24:56:e7:47:57:0b:79:c1:31:e2:7f:fe:5e:5b:3f:8a:10:
fb:98:a6:09:82:28:36:48:24:c7:e8:26:28:d3:54:5f:76:0f:
ee:b4:b8:7e:d8:d6:92:cd:2a:92:32:5f:a7:fa:8f:6c:92:b1:
99:72:4a:47:81:6c:7e:57:94:f6:31:4f:63:c6:e2:7a:7f:c9:
b5:f9:0f:5a:aa:11:6e:29:1e:52:96:4a:c8:e5:e7:9f:04:39:
dd:10:3a:59:f3:53:c1:3b:b1:0b:d1:c0:83:50:d0:76:15:62:
cb:dc:a7:90:81:ac:17:0b:f9:c2:22:af:ad:f0:18:4b:f6:fe:
82:fb:50:9c:a5:af:df:e5:29:46:02:6b:95:0e:59:5b:98:48:
4e:8c:08:68:7a:d3:25:90:e9:00:35:0b:19:4c:75:59:38:90:
72:8d:f2:4f:e3:2d:bf:7f:4e:ec:38:d3:84:bb:2c:f8:e0:24:
d1:db:88:ab:71:fa:3b:e2:67:ce:fc:9b:c5:11:2a:b3:ca:e9:
52:25:38:cf:63:5c:4b:6e:f3:51:17:1d:6b:4b:06:ec:c4:57:
cb:a4:22:1e:08:54:99:1e:8b:15:05:27:e0:8a:df:be:70:5a:
7a:b4:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:52:21 2025 by rpki-client