Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/8iddQExOzQol8AKyQdyxA_sJpE4.roa
File: 8iddQExOzQol8AKyQdyxA_sJpE4.roa (raw, json)
Hash identifier: WEuHVN7Y2Svzf/V8nmOxBW/25Yq1mKA7NAU0kuyg9jA=
Subject key identifier: F2:27:5D:40:4C:4E:CD:0A:25:F0:02:B2:41:DC:B1:03:FB:09:A4:4E
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 01856CC15A7C90661CC8BD16ABD7C415BF05
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/8iddQExOzQol8AKyQdyxA_sJpE4.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24610
IP address blocks: 193.110.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5a:7c:90:66:1c:c8:bd:16:ab:d7:c4:15:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2275d404c4ecd0a25f002b241dcb103fb09a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:8f:27:c7:c3:35:1f:8f:5f:c2:c3:0c:e1:
0e:20:ea:98:bf:00:ed:3d:c7:da:23:ba:d4:8c:3d:
75:dd:26:f7:35:4c:42:b8:cd:8f:ae:5d:af:e5:1b:
33:54:e0:0e:83:af:4f:ce:54:c7:1d:9a:59:06:7c:
97:d5:8d:ce:d8:e1:ed:b2:38:49:84:27:da:7e:2c:
05:9a:35:1d:3b:52:b3:5d:93:99:ce:67:d9:35:3e:
34:c3:15:9b:39:98:a5:31:28:92:a1:87:02:41:7a:
08:b4:50:e6:e1:6c:95:13:f2:b0:fb:d9:dd:c3:26:
27:5b:b0:07:63:a1:2d:9f:cc:12:9c:73:66:09:1c:
41:a1:ee:47:75:dc:a3:26:e1:bd:5e:df:e1:c6:16:
24:01:d4:49:55:ab:34:0c:ce:c4:f8:c8:a2:0e:ec:
5a:8f:a1:ce:52:02:42:bd:f0:25:de:41:b2:75:7a:
65:04:6c:48:77:68:4c:e7:89:a1:64:c1:4f:99:df:
42:00:bf:9f:57:9a:c3:9a:c5:7d:2c:6e:29:7b:02:
f6:86:4d:f8:85:44:82:21:61:9c:98:2f:81:64:5e:
60:11:8b:09:21:cb:b7:af:38:17:45:de:ee:aa:65:
bd:b1:8f:fc:e4:bb:6a:f2:17:f0:c7:73:a5:9b:c1:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:5D:40:4C:4E:CD:0A:25:F0:02:B2:41:DC:B1:03:FB:09:A4:4E
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/8iddQExOzQol8AKyQdyxA_sJpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:95:f9:91:8d:1b:18:9a:41:ee:37:cd:7d:b6:41:57:6c:c8:
9d:87:85:5e:c3:5d:59:75:9e:3b:f1:0f:81:0b:26:c4:d0:8a:
35:f8:08:db:c0:f4:bb:b9:35:95:02:48:6f:fd:49:ca:fa:9b:
2b:98:6b:97:14:67:69:88:19:b1:4b:6b:b0:03:5d:b0:79:ea:
c1:73:bd:d2:2c:bd:04:e2:ac:5a:c5:40:7f:b0:a8:81:5c:e2:
02:3c:13:1d:5a:eb:96:c8:d7:44:29:ed:fa:18:27:3c:ec:d0:
6d:62:01:9e:11:83:ee:6a:6c:85:90:19:5a:46:31:a8:9c:ff:
9a:22:e7:10:72:22:05:4b:60:83:c1:82:94:fb:82:8e:56:d1:
0d:83:91:a3:b5:ba:ea:45:08:65:07:91:8a:3f:e4:6d:c3:2b:
0e:f4:ba:75:6c:1c:20:58:b4:17:da:4b:68:ed:b7:48:c8:08:
b4:00:00:da:34:04:f1:e0:55:79:e4:d3:87:1e:bc:00:52:28:
1e:15:25:b7:3c:e9:45:ca:6f:97:c0:ed:0a:96:cc:39:b5:b3:
3c:19:85:09:69:e6:33:bb:16:e9:e4:bb:b0:bc:3d:e0:f7:db:
93:78:cf:12:fc:73:e3:30:11:8e:32:b5:62:a5:69:53:f8:b1:
a9:27:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:40:52 2025 by rpki-client