Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/aJtWiw5-63TqFry7GiM2Amw8BWo.roa
File: aJtWiw5-63TqFry7GiM2Amw8BWo.roa (raw, json)
Hash identifier: o6XbZzt1AvcY3hJLWmdQ1IQDExwglQiT78wAJIgSUUQ=
Subject key identifier: 68:9B:56:8B:0E:7E:EB:74:EA:16:BC:BB:1A:23:36:02:6C:3C:05:6A
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0185732814356944078EF23F1E1B0FF7C8ED
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/aJtWiw5-63TqFry7GiM2Amw8BWo.roa
Signing time: Mon 02 Jan 2023 15:44:44 +0000
ROA not before: Mon 02 Jan 2023 15:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57635
IP address blocks: 193.203.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:14:35:69:44:07:8e:f2:3f:1e:1b:0f:f7:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 15:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=689b568b0e7eeb74ea16bcbb1a2336026c3c056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:b5:4c:0d:9e:dc:42:b6:6e:da:d7:3c:40:
92:6b:2c:fb:c7:2a:7b:91:21:80:58:8f:60:de:92:
91:37:16:fb:cc:bd:1d:68:0c:ad:72:78:a2:fe:2f:
5f:ca:bb:26:d9:17:7a:1d:ca:a2:e4:4a:94:49:f2:
73:17:bd:3d:1f:66:1e:1f:46:7c:2c:10:76:d1:d7:
f8:3e:f9:22:af:9c:b0:1b:9e:7c:27:ce:78:54:7c:
7a:2f:3f:b1:ad:90:3a:96:68:9b:73:86:5f:aa:3d:
aa:3a:2b:4a:20:b4:e9:8f:b5:b4:32:77:2d:42:9b:
40:b9:c2:f6:3b:e9:e8:61:65:b1:14:d4:ab:7a:29:
5c:83:0a:88:b8:49:bb:de:28:ab:53:1a:85:ab:1f:
0e:de:a7:12:d3:d4:8a:a2:c9:f2:3e:af:21:0d:b1:
cf:34:fd:54:a1:ab:bf:34:a2:3b:9b:18:ac:a6:3d:
62:b7:29:25:02:07:b2:e7:09:ab:29:68:d4:e5:27:
50:4c:ec:e2:40:5a:7b:b9:d8:12:fa:37:8c:f2:61:
17:e1:7c:90:3c:3d:42:94:30:ba:5c:d7:c8:fc:00:
07:9c:41:e1:2e:81:9d:af:25:0c:7f:89:c8:16:dd:
71:4a:20:90:2b:ce:d1:2b:04:0a:52:ab:60:ae:69:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:56:8B:0E:7E:EB:74:EA:16:BC:BB:1A:23:36:02:6C:3C:05:6A
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/aJtWiw5-63TqFry7GiM2Amw8BWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:d4:d9:8f:22:4b:6e:2a:3d:dd:a4:6d:d7:44:6a:96:05:
1f:90:7d:2b:39:12:3c:f5:01:dd:3e:e4:a4:8c:d5:3b:5b:9b:
39:5f:f9:af:af:6f:45:89:0c:c0:10:f7:36:3d:21:de:11:8d:
f7:cf:da:c0:36:a1:56:5c:cd:ef:b0:d7:25:e5:39:6d:e3:77:
04:a7:25:1e:44:e0:1e:06:cb:c5:10:d4:da:39:6a:20:c5:f7:
d6:11:12:78:b5:d4:c5:59:cc:b8:62:e2:2f:f8:97:01:4b:2e:
eb:ae:25:60:61:ba:cf:54:9a:99:ab:08:08:f2:9c:3c:04:e5:
7c:9f:d7:da:12:42:d4:ea:8d:cf:16:f5:a8:3f:ef:eb:16:bf:
5f:d3:82:88:d8:af:66:93:ce:49:de:76:f8:3b:95:c5:63:e7:
78:64:26:67:e3:e7:d6:60:f1:fc:69:d3:8d:63:c0:99:38:c1:
c4:29:13:08:ca:a1:b8:d0:df:6c:ee:a0:ad:50:39:d6:dc:e5:
58:10:70:66:2f:6d:f8:1f:f9:68:58:8a:07:19:6f:30:3a:88:
52:39:40:56:cd:55:8b:23:bb:6d:e2:05:93:82:b5:ed:f2:bd:
19:f8:dc:41:51:ac:d3:9e:fc:31:ed:a4:28:4c:a4:2e:60:f0:
0e:b3:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:22 2025 by rpki-client