Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/oN_w_87Zh4uP9cpO9VkHBgP2Qho.roa
File: oN_w_87Zh4uP9cpO9VkHBgP2Qho.roa (raw, json)
Hash identifier: OS03QX/fmjX0MUQyQIyJnU9tdRpTobfwW5CIk3zRugw=
Subject key identifier: A0:DF:F0:FF:CE:D9:87:8B:8F:F5:CA:4E:F5:59:07:06:03:F6:42:1A
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 01856D8AD3DE17ED0BE22D920C1FC18ABB6F
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/oN_w_87Zh4uP9cpO9VkHBgP2Qho.roa
Signing time: Sun 01 Jan 2023 13:34:52 +0000
ROA not before: Sun 01 Jan 2023 13:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9023
IP address blocks: 193.46.40.0/22 maxlen: 22
2001:67c:2418::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d3:de:17:ed:0b:e2:2d:92:0c:1f:c1:8a:bb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jan 1 13:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0dff0ffced9878b8ff5ca4ef559070603f6421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:6c:72:b8:27:54:5f:4e:ad:d0:21:0f:e3:
68:17:04:e8:1e:77:3e:fc:b7:4b:54:b0:3d:63:6d:
f8:10:8f:34:55:e0:22:06:d0:53:62:36:67:62:e2:
4e:aa:d4:85:14:9c:f4:e1:3c:d0:cf:e2:d2:05:ad:
46:4d:38:44:8f:ec:74:b7:be:9e:e1:ed:4b:c6:56:
a7:e4:b0:12:22:ac:68:b5:4b:21:57:01:39:4f:e7:
24:95:31:77:6f:9d:e5:d4:73:e9:92:74:a4:d3:eb:
8f:ce:7f:a7:6e:0b:32:e4:b9:b8:bb:83:0a:f6:f6:
ce:8f:70:c5:b6:68:7f:7b:ed:24:d9:7f:3e:4a:fd:
1b:64:c0:6f:8d:a1:0c:02:cb:fe:b1:e9:6e:dc:9f:
c8:0d:15:52:04:d6:8d:21:95:16:f9:df:90:03:58:
be:d2:59:c5:8d:e4:83:99:23:cb:8f:b4:84:1f:17:
aa:2c:fb:d7:8e:ea:3e:fa:19:cc:62:d4:b3:84:f0:
ed:d8:df:ad:e0:88:08:6e:7f:e0:12:46:c7:87:78:
3a:a2:8e:d3:a2:24:35:1d:f7:39:d2:9f:5e:f2:1f:
bd:86:cb:3d:0a:d5:fa:ea:28:3e:a4:8a:85:ba:46:
61:f7:c0:84:a7:3c:83:cb:2d:39:0a:8d:5c:79:af:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:F0:FF:CE:D9:87:8B:8F:F5:CA:4E:F5:59:07:06:03:F6:42:1A
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/oN_w_87Zh4uP9cpO9VkHBgP2Qho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.40.0/22
IPv6:
2001:67c:2418::/48
Signature Algorithm: sha256WithRSAEncryption
7a:f6:7d:bc:21:59:fb:3d:f9:9b:49:cb:7e:28:b8:1e:13:22:
c9:62:57:61:c1:02:a1:99:66:4e:a3:bd:49:f6:60:f1:98:e2:
55:4d:d8:d9:e3:11:dd:d2:10:93:7c:cf:9e:98:49:0d:56:74:
53:ac:ae:99:76:a5:d6:61:5d:46:1c:d2:ee:24:92:40:b5:48:
37:44:f1:03:a0:02:d9:08:ee:1a:c7:49:b4:b7:a7:8b:2e:a2:
0b:3f:8a:ba:3a:9e:c5:22:a3:4e:ff:83:a6:0c:94:3b:72:fa:
43:ff:94:b4:9c:b0:04:fc:53:bb:04:9c:09:55:b2:01:b7:85:
de:1c:b8:2d:e6:a7:88:a8:77:79:cd:62:0c:65:2d:4f:cd:00:
04:0a:0b:3f:da:a1:8d:c3:f9:51:99:b4:4a:c4:44:33:1f:db:
1a:03:a1:75:10:11:95:68:47:74:a1:5c:08:1f:98:5f:f2:1b:
0c:cb:53:62:59:3d:41:79:4e:dd:97:b1:c5:ca:87:3f:d9:e7:
45:e9:0d:21:61:e4:01:03:0e:8b:6f:cb:d1:5e:b9:78:4b:08:
20:38:62:a9:4a:60:5b:37:3b:b5:c0:74:a7:3f:d9:25:96:0b:
68:64:f1:5f:f3:b5:57:15:65:0b:a2:c9:d4:b0:62:f9:91:84:
f4:60:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:29 2025 by rpki-client