Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/Fksq23bLzu-sn6dVgwmktt9sosg.roa
File: Fksq23bLzu-sn6dVgwmktt9sosg.roa (raw, json)
Hash identifier: CAoA31OglOc7hrLHBnq5rD3ynqGdnBXRD9Po3aq5zO8=
Subject key identifier: 16:4B:2A:DB:76:CB:CE:EF:AC:9F:A7:55:83:09:A4:B6:DF:6C:A2:C8
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 01856C413E83A4538561618AA3BAE6EAD0FA
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/Fksq23bLzu-sn6dVgwmktt9sosg.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25682
IP address blocks: 193.57.173.0/24 maxlen: 24
2a0f:8640::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3e:83:a4:53:85:61:61:8a:a3:ba:e6:ea:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164b2adb76cbceefac9fa7558309a4b6df6ca2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:eb:fd:c9:6d:79:65:28:f7:3f:96:0f:74:
4b:13:22:51:ee:4a:5e:9b:41:de:2f:ce:ff:30:40:
22:9b:27:08:5e:0e:51:87:24:2d:72:71:dd:12:13:
11:d0:2c:53:83:4f:14:6a:21:1a:d1:46:fd:60:26:
b8:5a:fc:9e:b5:a8:43:4d:05:df:9f:6c:5f:8d:1c:
23:2d:d0:e7:28:b3:03:ec:4d:3b:cb:ee:1b:27:fd:
ed:67:ca:5d:9c:70:e0:f1:f3:84:f5:d4:9a:8d:48:
cc:fa:7f:80:1a:b2:60:1c:7f:5a:b9:ee:54:ef:ce:
f9:57:89:16:f0:54:c2:aa:e3:8b:7e:10:7f:d6:fa:
99:76:ee:b0:85:65:a0:fc:80:fb:d4:07:e1:dd:c4:
2b:91:24:27:20:11:65:00:be:fa:a9:64:8e:e4:67:
96:6d:85:8b:35:f7:02:05:7c:4a:28:61:80:f8:44:
f1:7e:7f:da:97:8a:a4:01:e2:89:01:c4:38:7f:20:
3e:dd:29:16:db:5d:82:4b:8c:d7:f6:ab:ca:66:fc:
3b:fb:51:88:e1:8d:e4:a1:f1:de:43:69:05:97:d3:
ee:dd:86:22:b4:0d:57:03:10:fb:50:98:7f:ab:ab:
de:b5:7d:1f:00:68:00:e3:25:1a:59:b0:4e:f6:b5:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:2A:DB:76:CB:CE:EF:AC:9F:A7:55:83:09:A4:B6:DF:6C:A2:C8
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/Fksq23bLzu-sn6dVgwmktt9sosg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.173.0/24
IPv6:
2a0f:8640::/29
Signature Algorithm: sha256WithRSAEncryption
be:ed:c5:21:3e:a1:dc:c9:ad:62:ca:32:b7:32:76:a0:40:30:
74:23:6c:ac:48:7f:6a:38:9f:a2:c4:3c:6b:5d:eb:3d:6d:b1:
32:19:fa:e2:dd:72:5f:52:42:d9:4a:69:53:8c:82:11:0e:9d:
36:26:f2:b0:fc:60:3f:b8:eb:4b:bf:07:45:22:8b:9d:cc:db:
50:9c:27:ae:f8:67:16:56:69:de:ef:75:b2:77:22:6a:23:ee:
86:ed:a6:3d:b0:d9:08:f1:4a:0f:af:ba:a5:43:21:dd:af:74:
9a:6d:e6:eb:77:20:f1:65:eb:ae:72:c8:8d:06:51:0f:0e:17:
dc:78:a9:92:69:ec:a2:fa:ed:0c:f0:db:62:9a:45:e8:56:2d:
3f:ea:37:da:9d:b8:16:b1:eb:94:a5:6a:67:05:9e:ce:63:60:
b1:a4:36:36:f3:89:cb:ed:53:8a:ab:47:15:d2:c8:ea:10:66:
ba:7c:95:8e:95:ee:01:7b:ea:1f:b0:1e:7d:c3:0d:b6:a0:0e:
65:3f:36:9c:3b:b9:68:3f:84:6a:3d:53:22:20:4b:75:48:75:
e9:3e:fc:63:b3:74:0f:8d:3d:f1:ce:b9:62:ce:13:64:40:29:
c2:8c:3e:a1:0a:64:6b:96:4e:a4:24:99:a6:0f:a6:24:49:5d:
1c:4a:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:20 2025 by rpki-client