Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/vCd9UwkN-gbXhHYxGefBPvWcKiI.roa
File: vCd9UwkN-gbXhHYxGefBPvWcKiI.roa (raw, json)
Hash identifier: WytNnuij+eMigGLxf5SRoEMUbbdoyATs9qk77nP/iU0=
Subject key identifier: BC:27:7D:53:09:0D:FA:06:D7:84:76:31:19:E7:C1:3E:F5:9C:2A:22
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 01856CEF3AE203066642D3B6CC25DC86FDC9
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/vCd9UwkN-gbXhHYxGefBPvWcKiI.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203210
IP address blocks: 193.43.100.0/24 maxlen: 24
193.43.110.0/24 maxlen: 24
193.43.126.0/24 maxlen: 24
193.43.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3a:e2:03:06:66:42:d3:b6:cc:25:dc:86:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc277d53090dfa06d784763119e7c13ef59c2a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:f6:3d:de:ba:ce:e5:93:28:3c:3a:dd:58:
95:56:82:23:44:63:5b:5a:5d:29:03:19:15:7d:9e:
f5:41:c8:cb:ed:31:7e:58:bf:87:db:6a:c6:c4:1c:
17:ab:8a:62:06:cf:8b:9a:8e:cc:82:2d:db:d0:3c:
9e:25:76:3b:c0:44:aa:6b:30:31:41:e8:42:f2:5f:
a4:b8:c0:79:ff:88:74:bd:36:48:b8:6b:21:cd:38:
ee:db:0c:a2:3a:63:ba:fe:fc:c5:98:7b:32:45:a2:
fc:75:dc:8a:47:01:1c:02:70:b4:33:9b:fb:f6:d4:
b7:62:53:44:80:31:47:62:38:8c:8d:dc:d3:a4:1c:
42:9e:ef:5a:36:58:87:14:60:83:1b:b3:2b:73:b8:
b4:ab:83:91:3b:28:78:d8:ac:04:b9:1b:18:3b:8e:
40:dd:be:95:28:73:3f:ea:6a:94:7b:2a:03:ee:5d:
37:bf:d3:20:99:80:47:09:c5:1a:d1:46:19:2a:a8:
ac:ae:86:8d:60:2a:c4:21:4d:28:59:f1:a4:38:e7:
31:a5:14:15:75:b0:24:41:9b:ae:42:35:02:c8:11:
d5:25:08:86:36:34:7e:7d:78:0f:87:d3:f8:33:0b:
b3:e9:4f:5c:4d:b3:d1:09:6c:74:0a:37:88:a5:7d:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:27:7D:53:09:0D:FA:06:D7:84:76:31:19:E7:C1:3E:F5:9C:2A:22
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/vCd9UwkN-gbXhHYxGefBPvWcKiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.100.0/24
193.43.110.0/24
193.43.126.0/24
193.43.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:77:e1:bd:3c:d7:a0:9f:db:91:1d:43:c2:67:da:53:0b:1f:
14:0c:ff:c8:c9:3d:33:ad:d0:39:8c:b3:a2:dc:8f:3f:ab:aa:
16:55:ab:c0:4b:13:a0:41:c0:3c:6c:c8:af:06:25:c9:63:87:
df:1a:d9:6d:72:54:26:10:6f:b0:de:0c:84:cd:d0:8b:7d:8f:
65:83:5b:99:f0:55:de:2f:4e:bf:d3:b2:bc:cd:f0:95:5b:45:
f7:be:e4:51:00:ac:5a:06:cb:c0:3f:d8:d5:28:ad:a4:c1:4a:
47:5e:47:0a:ca:1a:25:d0:c8:5d:ed:79:62:cc:d8:1e:e4:1c:
41:d6:02:45:43:a4:ba:75:09:8e:99:16:5b:c3:39:ed:93:1e:
47:fb:c6:1e:ff:66:f5:24:2b:0a:2e:e7:0a:cb:74:9b:31:2a:
4a:bc:e1:31:be:6a:1a:3b:40:3c:0d:eb:e7:bd:70:1f:34:47:
78:ec:23:64:54:da:41:06:8d:90:36:9e:b6:b2:7d:b3:d7:4d:
b5:ee:41:58:61:c5:0e:fe:45:80:78:99:a7:de:13:2c:6f:94:
78:c4:2b:d5:64:6f:dc:e4:5c:ab:02:81:13:4c:06:70:e3:f5:
12:c8:69:38:0a:04:f8:c8:30:73:40:60:e8:e6:fe:37:79:ec:
01:06:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:25:48 2025 by rpki-client