Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/1aOD5TNwtpb670K91anKexnzHRw.roa
File: 1aOD5TNwtpb670K91anKexnzHRw.roa (raw, json)
Hash identifier: QhgY46DxFYkB69ddJLMY4WTW4+wiA+XqAPnh4NHbv3Q=
Subject key identifier: D5:A3:83:E5:33:70:B6:96:FA:EF:42:BD:D5:A9:CA:7B:19:F3:1D:1C
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 010AB667
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/1aOD5TNwtpb670K91anKexnzHRw.roa
Signing time: Sat 01 Jan 2022 05:06:22 +0000
ROA not before: Sat 01 Jan 2022 05:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196971
IP address blocks: 193.105.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17479271 (0x10ab667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jan 1 05:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5a383e53370b696faef42bdd5a9ca7b19f31d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:bb:a6:4f:1e:ab:91:ce:86:c9:6c:15:81:
26:92:58:c3:16:ae:ff:7f:93:11:b2:e4:ee:24:4a:
c3:06:c8:b6:b2:62:63:1f:54:1c:6b:67:2f:1d:12:
f5:77:7c:48:47:73:60:00:95:2d:fe:08:6e:03:ac:
00:38:91:3f:31:9d:3b:51:c2:f8:f5:64:bf:4c:4d:
e3:10:23:24:88:10:46:71:03:a2:77:0d:d0:b1:f0:
44:e2:f0:64:06:5e:65:ca:c6:5b:18:ed:c9:43:c8:
fb:37:01:ae:73:d0:a4:8c:ac:dc:ab:b0:42:dc:cf:
af:d7:69:f9:9e:19:e9:e8:15:a5:59:2c:ba:ef:b7:
8a:0b:9c:b3:31:8c:e1:ec:78:b8:ad:da:8b:6e:1d:
72:a1:9b:00:21:60:c6:39:22:3d:c2:c1:e1:7d:cb:
86:0f:87:97:35:02:89:71:9e:6c:8f:57:cc:47:92:
94:4b:25:5b:87:d2:aa:01:5b:92:47:73:16:97:6a:
a3:42:63:c4:5c:1e:98:9c:27:ea:85:c7:4f:f0:a8:
34:83:a6:47:de:e2:99:0b:74:f2:d9:82:55:f2:f0:
e8:b2:eb:e3:c0:88:8e:bc:97:91:c3:01:b2:49:7f:
b0:be:24:c7:91:59:b0:31:19:52:86:f3:2a:48:a3:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:83:E5:33:70:B6:96:FA:EF:42:BD:D5:A9:CA:7B:19:F3:1D:1C
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/1aOD5TNwtpb670K91anKexnzHRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cf:b2:d8:f4:c9:77:28:bb:16:b1:84:0a:20:83:f9:37:e9:
5b:2c:20:35:da:3b:0c:f7:2a:d7:7f:1d:d3:56:c6:b1:8a:10:
0f:94:7e:6a:6d:df:78:d7:87:36:e7:28:df:39:fa:0b:de:1c:
8e:74:f1:e3:19:3d:f2:11:9e:5a:0d:1c:2a:ed:14:f9:9c:2d:
1d:c3:c6:f1:6b:fe:25:e0:25:0d:08:29:25:56:da:4b:51:b5:
9d:49:3a:95:79:46:ac:7f:d2:11:3e:ff:0a:94:89:fa:2c:6a:
bc:e1:07:99:ac:a8:67:b4:7f:b5:3a:11:f6:a0:37:db:47:8f:
31:93:f7:9c:33:f8:c9:12:a0:3c:69:57:50:86:f5:c6:20:36:
3a:bf:87:81:d0:da:37:38:1b:fb:f5:81:0d:c1:62:e1:f8:9a:
47:16:4a:24:c8:38:f9:2c:dd:fc:0b:9f:e5:e4:5c:e7:8c:d3:
53:6b:62:bc:71:a4:44:46:f3:f6:57:39:27:f0:19:4b:53:10:
05:2e:e1:3e:90:6f:fc:31:0a:13:9a:43:eb:cb:59:8b:9d:f6:
85:97:68:b9:cd:11:ee:87:b4:77:9d:d0:97:39:74:25:ce:69:
f5:22:b2:c5:c4:1a:c0:1b:6b:51:ee:83:fe:1b:c0:cc:48:2c:
e9:2f:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:17 2025 by rpki-client