Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/dsnkSk1Gbfb8BzHinw-eqx-rAcs.roa
File: dsnkSk1Gbfb8BzHinw-eqx-rAcs.roa (raw, json)
Hash identifier: vWbudhuMUj9w5HJqKbhi60p4nKY/WE9VZlWqQA1fau0=
Subject key identifier: 76:C9:E4:4A:4D:46:6D:F6:FC:07:31:E2:9F:0F:9E:AB:1F:AB:01:CB
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 0185700B8C02FE544666B4823BCF6234B760
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/dsnkSk1Gbfb8BzHinw-eqx-rAcs.roa
Signing time: Mon 02 Jan 2023 01:14:43 +0000
ROA not before: Mon 02 Jan 2023 01:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.73.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8c:02:fe:54:46:66:b4:82:3b:cf:62:34:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Jan 2 01:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c9e44a4d466df6fc0731e29f0f9eab1fab01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:dc:08:df:df:1a:2c:ef:e3:07:cc:6f:47:
43:e5:b9:95:e3:3b:32:f7:8c:09:59:fc:6c:0e:87:
9d:87:e2:8b:e8:6d:a7:c0:12:6d:6c:ca:55:6c:03:
1a:ba:27:84:39:07:66:3e:db:56:4f:4b:df:91:42:
58:f4:09:55:f2:f9:3f:67:27:ed:91:f2:ce:1b:e7:
a1:3a:39:77:f1:15:44:d3:49:5c:b8:da:f3:b1:64:
f1:1f:22:aa:02:7e:d2:ac:e9:cd:55:0a:dd:58:64:
12:3d:27:0a:de:ab:c6:7f:02:ff:10:7b:bb:80:53:
d9:dc:27:4d:16:cc:7e:82:62:ac:4d:5c:a4:25:2c:
02:e7:63:3a:45:82:ad:2d:ea:2d:dc:ed:85:15:67:
54:dc:f4:cd:e2:fc:b6:e3:61:09:4d:58:30:08:b1:
79:fa:33:8f:f5:30:61:74:10:05:13:93:95:d8:84:
db:37:e1:9f:f6:6f:13:c6:3b:7e:88:b7:bf:64:54:
92:35:5d:a7:94:9c:da:06:08:2d:a7:08:09:b3:94:
b4:98:6a:73:62:d3:c7:6b:3c:b6:88:23:69:13:f4:
de:bb:06:29:ea:bd:44:48:f4:b3:93:3c:f4:7c:c2:
61:73:46:9c:ed:08:86:cb:80:c7:c1:da:37:ac:f0:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:E4:4A:4D:46:6D:F6:FC:07:31:E2:9F:0F:9E:AB:1F:AB:01:CB
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/dsnkSk1Gbfb8BzHinw-eqx-rAcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.251.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9c:66:66:4a:98:69:6f:12:cf:2d:f1:bc:5e:3c:95:37:62:
67:3d:97:11:81:09:d4:f5:6c:0a:4c:d6:02:57:7b:1c:d0:f4:
19:7a:01:68:43:0a:12:05:e3:9e:63:22:ba:6c:be:11:d7:48:
f4:38:d3:0d:18:c8:63:ef:f7:11:5b:2a:54:69:f0:44:1c:1f:
15:92:a5:4b:2c:0f:b2:f4:48:9d:19:eb:c9:a6:e2:71:4a:39:
79:dd:11:ab:ae:b8:6a:de:c2:3d:07:71:57:fe:86:20:c2:69:
be:8a:fa:89:66:4a:69:5d:5f:d6:d5:0a:ba:c2:3e:67:1e:e1:
f9:fb:ff:dd:6d:4a:c2:a7:92:63:e2:18:8c:0a:46:3f:5b:66:
9d:1a:35:62:3e:fd:9b:8c:da:f1:94:97:16:52:7f:7e:47:46:
1e:6a:7c:ce:b1:41:28:d5:38:b5:55:7b:d6:b3:df:f5:fe:54:
54:50:65:48:c9:c1:01:0d:9d:f5:32:72:6a:20:23:5e:9f:af:
15:e7:9c:3a:16:ea:8a:c7:74:cf:10:e5:0c:c0:ea:62:a8:b6:
a4:8c:e0:c3:03:fb:cc:ed:ab:e0:8f:f5:58:6e:1e:e9:f8:f0:
1f:9e:c7:e8:94:b9:65:eb:67:8d:f4:b3:82:a6:0d:a3:c5:d6:
9a:db:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 3 10:07:07 2025 by rpki-client