Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/_s1Y9Riuf0q73cnucceL-Q0Al0M.roa
File: _s1Y9Riuf0q73cnucceL-Q0Al0M.roa (raw, json)
Hash identifier: UqCFGtJ01N4iJ4KMSr23J06c21Qo+fkOGLyWtywyWbM=
Subject key identifier: FE:CD:58:F5:18:AE:7F:4A:BB:DD:C9:EE:71:C7:8B:F9:0D:00:97:43
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 01856E0B158E4F80B77E84D179D7391CC1ED
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/_s1Y9Riuf0q73cnucceL-Q0Al0M.roa
Signing time: Sun 01 Jan 2023 15:54:58 +0000
ROA not before: Sun 01 Jan 2023 15:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16167
IP address blocks: 193.41.230.0/24 maxlen: 24
185.243.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:15:8e:4f:80:b7:7e:84:d1:79:d7:39:1c:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jan 1 15:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fecd58f518ae7f4abbddc9ee71c78bf90d009743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:77:ef:be:2c:8a:b3:ed:21:42:75:b2:83:
e8:2b:f7:4b:d8:00:13:2d:8e:7e:4c:84:da:a3:39:
58:48:d3:15:9e:14:4d:20:02:25:61:87:94:d4:cb:
c9:3d:ad:06:b1:85:7d:30:83:a5:41:92:62:81:d1:
88:50:2c:38:71:2f:6d:08:17:3e:12:29:22:fb:d4:
a6:94:96:7a:6b:46:18:3c:bd:dc:e4:87:8e:22:0b:
0b:d2:81:cf:12:00:56:d7:84:6b:60:22:c4:a1:15:
cb:49:b2:ee:e8:8c:fa:b4:cc:fa:a7:76:28:c2:6d:
ba:bc:9d:12:9a:80:8f:c7:34:64:dd:d1:e7:e7:2c:
e4:83:ea:ec:35:f2:82:b6:14:60:98:e4:a4:48:a2:
4b:c7:af:38:2b:08:0c:bc:5d:dd:63:c5:a0:2c:2e:
80:a2:8b:31:84:99:77:99:89:32:5e:0d:57:8f:87:
19:d8:5a:bc:ae:40:61:83:95:e9:14:22:62:9e:a8:
6c:48:07:93:e6:6a:3f:13:ce:bf:26:17:cd:2a:fa:
1c:12:31:fd:44:f0:64:2b:65:0e:0c:90:60:45:c8:
38:4c:b3:1b:97:1f:d1:ce:f9:d3:b2:a7:5d:3d:5d:
6c:bd:39:a9:72:c3:20:2c:8e:50:2a:81:fc:a1:d6:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:58:F5:18:AE:7F:4A:BB:DD:C9:EE:71:C7:8B:F9:0D:00:97:43
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/_s1Y9Riuf0q73cnucceL-Q0Al0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.0.0/24
193.41.230.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ed:89:55:04:70:6f:8b:ee:dd:0e:d6:a9:ce:ee:f7:73:6b:
fc:7f:a1:f3:f3:a2:5b:53:2c:59:a9:1c:c2:e3:e7:05:a2:d4:
ea:82:9b:35:67:a1:31:67:42:8d:da:da:bf:3e:81:06:12:95:
1e:e4:da:e3:62:1e:66:13:58:e5:bd:b7:84:cb:b7:bf:4d:46:
98:1c:bf:4e:7b:59:81:47:1c:63:59:e2:dd:6a:1a:69:90:1d:
bf:f4:e9:76:2f:35:01:3f:a3:33:bd:f6:4a:0e:d9:a0:24:95:
54:c8:43:97:f7:bf:fc:3f:af:ee:84:34:84:bd:f6:45:1a:d4:
23:5b:27:19:80:7f:fa:55:3f:88:9c:e3:2a:c7:c2:60:00:63:
19:13:7a:f7:7a:5e:f0:79:98:ef:50:b3:2b:a6:a1:15:f7:9d:
6d:7a:3d:6a:1d:b4:92:26:26:85:64:dc:fb:14:b4:d0:dc:23:
23:26:38:cc:46:84:14:94:78:14:e0:f0:f8:2e:f4:2a:7d:cb:
05:ca:33:ac:18:95:d7:3c:80:85:63:67:ca:83:b8:d0:6c:a1:
4c:44:9b:06:15:5f:bf:99:2c:1c:1e:dc:7f:68:bb:7b:f9:51:
13:f6:09:a1:dd:a5:83:b5:32:94:58:0b:5f:7e:ee:43:c8:6a:
0d:16:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:46 2025 by rpki-client