Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/zF-kcKzWP_R_Y7D4kKZg7jp9Vo8.roa
File: zF-kcKzWP_R_Y7D4kKZg7jp9Vo8.roa (raw, json)
Hash identifier: 9mhf9YgcrgkBWtvqm1HIfLs6M/xMe789gT2DOqw2USM=
Subject key identifier: CC:5F:A4:70:AC:D6:3F:F4:7F:63:B0:F8:90:A6:60:EE:3A:7D:56:8F
Certificate issuer: /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial: 01892FC13B832766AFCB627822EE0A9918CF
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/zF-kcKzWP_R_Y7D4kKZg7jp9Vo8.roa
Signing time: Fri 07 Jul 2023 09:49:00 +0000
ROA not before: Fri 07 Jul 2023 09:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.17.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:c1:3b:83:27:66:af:cb:62:78:22:ee:0a:99:18:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Validity
Not Before: Jul 7 09:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc5fa470acd63ff47f63b0f890a660ee3a7d568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:6b:30:89:df:99:30:d6:ce:0a:49:81:37:
15:f1:bf:2d:70:d8:8e:be:e6:66:97:f2:1f:40:45:
29:a8:8f:15:44:5a:11:96:52:f2:f0:52:97:be:59:
ad:01:0f:12:b1:87:bc:f2:f2:9e:ef:47:50:70:53:
30:6b:9f:75:f2:b4:a4:7e:6f:72:6c:50:fc:36:2b:
1e:08:a9:15:ab:ff:ea:3b:a6:3d:e6:dc:dd:47:69:
62:e3:40:fd:39:9b:00:4c:f8:00:c7:73:a3:f9:2c:
a7:76:3b:22:a2:b9:f1:85:71:5e:b3:a5:f0:8d:52:
48:66:c7:82:7b:08:2b:c5:c1:5b:ee:56:97:61:4b:
56:2a:6c:82:2a:ed:10:78:7f:1e:b8:b0:4f:b2:01:
74:cb:1a:93:53:e9:92:f1:8c:df:82:f2:09:3a:c5:
6f:fe:18:6e:db:38:ba:6e:cd:b1:fc:9a:38:16:36:
ec:5b:25:3f:d7:15:ea:58:7e:ba:ae:aa:52:3f:73:
e7:f4:50:e4:4b:02:9c:90:84:54:fe:4a:82:68:b4:
23:50:1f:ab:bd:51:75:c0:3f:e6:c3:71:11:b2:e1:
cd:60:6e:05:b6:76:51:36:39:a7:2c:bd:bb:e5:7b:
1f:ce:98:7b:7b:ad:79:e1:9e:2c:77:63:89:49:bb:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:A4:70:AC:D6:3F:F4:7F:63:B0:F8:90:A6:60:EE:3A:7D:56:8F
X509v3 Authority Key Identifier:
keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/zF-kcKzWP_R_Y7D4kKZg7jp9Vo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
99:aa:55:a0:76:16:2a:6e:1a:7f:92:c0:43:b2:d0:2f:73:04:
22:6a:1e:64:65:69:6b:53:46:44:7f:36:63:d9:3b:be:37:d9:
df:46:1a:32:81:86:90:9f:8a:44:e6:ca:7b:41:92:30:38:7e:
ae:6a:82:62:9a:7a:e5:e0:8f:fc:91:79:59:2a:d3:9a:d7:64:
fa:25:bf:a6:a7:de:75:76:d5:f1:59:93:ca:47:93:8e:3e:85:
e0:f2:06:b8:f3:45:c4:11:28:d0:6b:01:bb:1c:9a:00:19:8d:
7d:ae:45:1f:04:8e:91:4f:fc:86:59:84:66:71:97:56:78:97:
f0:a5:34:1c:6d:be:f3:2b:a2:10:5b:ab:4a:31:ad:f9:32:be:
fb:b3:aa:5a:f9:23:07:b6:95:d5:4d:e0:31:16:c0:30:76:59:
5d:f6:af:d8:52:62:a6:1c:b8:16:33:8b:a9:f4:8f:1a:8b:c0:
ca:aa:44:4d:0d:b4:30:20:a1:76:23:d3:d3:e2:e2:5f:6c:7a:
e0:be:8a:31:4e:ab:21:61:dc:8d:9e:8c:76:43:11:07:cd:08:
6d:9b:50:8e:3e:e5:9b:28:e1:03:36:c3:5c:6f:62:8b:eb:da:
a4:e2:93:d1:b7:0d:e8:3a:3e:f2:66:00:57:06:71:ec:b7:5d:
10:dd:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:20 2025 by rpki-client