Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/PfkfkR6bc1jjZ5TdRVpvTygRZPo.roa
File: PfkfkR6bc1jjZ5TdRVpvTygRZPo.roa (raw, json)
Hash identifier: +gq20r1MWs39zRHR4jbYXU6/oWdPOVAcRO3GzWxUIoU=
Subject key identifier: 3D:F9:1F:91:1E:9B:73:58:E3:67:94:DD:45:5A:6F:4F:28:11:64:FA
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 01857169B2D303DA0D0DC8F364831E578B7B
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/PfkfkR6bc1jjZ5TdRVpvTygRZPo.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57291
IP address blocks: 193.194.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b2:d3:03:da:0d:0d:c8:f3:64:83:1e:57:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df91f911e9b7358e36794dd455a6f4f281164fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:5c:f1:b3:cb:b6:ef:05:70:4a:cf:be:06:
58:c8:01:a4:21:9c:21:c1:3d:53:12:c1:1e:e8:12:
3c:24:44:aa:f0:1f:e3:0f:6f:94:e9:dc:d4:2a:a1:
87:c3:7a:b0:b6:2a:38:a4:50:64:cb:27:0a:0b:5f:
83:f0:b5:bb:9a:6a:e3:d5:a3:4f:88:23:3b:16:65:
3f:a7:e0:ff:18:70:d6:31:13:fe:c7:99:5c:16:c8:
68:1d:d2:1e:04:7c:54:03:cd:28:8b:bf:20:0f:07:
cf:0b:93:66:7f:d0:67:48:3c:96:c9:76:9b:8f:fb:
d5:3d:69:d7:62:73:c0:af:ab:0f:2d:53:0e:96:11:
81:81:cb:de:0a:5e:35:52:1c:bd:7c:1c:1e:99:79:
5f:8a:83:f4:89:d7:e1:a2:06:cf:c9:57:da:29:69:
c4:e5:99:54:88:3e:b8:0f:02:93:92:62:78:e5:b8:
a0:be:87:4b:03:ce:85:11:e4:b8:fb:f0:4b:d4:7a:
fb:53:31:dc:f4:a6:93:14:1a:3c:47:06:de:25:ca:
94:c8:12:13:94:16:f7:d5:72:e7:79:d4:7e:4c:8d:
e5:76:49:1c:2a:e7:5c:d7:7c:16:23:dc:e0:e2:45:
85:22:0a:45:9d:e5:1d:ba:37:6f:39:dc:97:df:8b:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F9:1F:91:1E:9B:73:58:E3:67:94:DD:45:5A:6F:4F:28:11:64:FA
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/PfkfkR6bc1jjZ5TdRVpvTygRZPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:30:9e:32:84:74:7c:c0:9c:c9:49:17:e5:5a:9f:15:cc:f1:
f4:7a:ad:45:9b:02:10:fd:a8:b6:1b:cd:c7:f4:12:99:3e:52:
07:54:fa:ea:0f:ec:a7:e1:76:b8:f6:dd:23:92:a3:e3:b8:ab:
36:f6:be:84:e1:35:a3:5a:7b:c6:44:43:80:73:d1:d2:9c:d9:
76:b5:ac:75:85:b0:78:20:5c:67:da:ef:e1:c2:0a:c1:25:8f:
71:d7:01:f1:8a:98:74:71:40:da:59:22:56:71:c3:1d:15:75:
8b:d1:41:69:df:51:82:03:15:9a:d5:5e:ac:4f:a8:38:ea:11:
da:c5:34:89:5c:90:3c:3b:a4:a3:ab:14:97:a9:75:88:cd:b8:
04:76:cb:c0:28:cf:e4:f5:1e:14:a5:d0:61:86:d8:9a:dd:9e:
2c:91:b0:33:22:2a:90:09:45:35:00:50:6d:57:b8:bb:68:75:
dd:c4:95:fb:57:1e:a1:2f:b8:87:80:9e:ad:0d:33:5d:49:ca:
a9:cd:4d:9d:8d:08:84:26:94:3c:b6:1a:38:0c:cd:2c:51:53:
f6:b3:c8:1b:59:16:44:66:d1:38:e7:ad:06:79:7a:58:33:d6:
7f:fa:da:81:b2:39:68:a5:2a:c1:6e:ca:46:b2:1e:76:c5:19:
60:bc:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:49 2025 by rpki-client