Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/movH8sbpZlP-uKQj3EExZ1i3Hkk.roa
File: movH8sbpZlP-uKQj3EExZ1i3Hkk.roa (raw, json)
Hash identifier: 87KkCsAAYdfMJeUgCuBaWgoUMqVnbdW5LYEOdfJ1k8I=
Subject key identifier: 9A:8B:C7:F2:C6:E9:66:53:FE:B8:A4:23:DC:41:31:67:58:B7:1E:49
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0186D9FEB4DBCF4102027D14D9B494DAB5C7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/movH8sbpZlP-uKQj3EExZ1i3Hkk.roa
Signing time: Mon 13 Mar 2023 08:03:13 +0000
ROA not before: Mon 13 Mar 2023 08:03:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44136
IP address blocks: 193.180.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:fe:b4:db:cf:41:02:02:7d:14:d9:b4:94:da:b5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 13 08:03:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a8bc7f2c6e96653feb8a423dc41316758b71e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:29:c8:47:a5:4f:82:cd:03:ab:26:76:6b:
46:14:8a:fc:09:7d:ef:e6:aa:2d:9e:ca:2e:ce:02:
4b:30:4c:b2:49:8a:ba:ce:25:02:15:50:23:1d:8b:
8c:14:7b:7c:53:f2:78:02:0b:b0:39:9e:51:30:f2:
8e:0d:85:26:cc:7b:37:75:81:5d:8c:59:7a:7d:fd:
3c:2b:73:96:dc:98:c1:a0:c6:76:a4:5d:44:35:40:
9c:5a:4c:48:5b:46:cb:7d:73:47:ad:89:17:3d:0f:
74:d0:34:9c:9c:b2:ce:eb:d2:48:af:cb:b6:20:69:
14:c7:bd:1f:9d:3e:d0:6b:6e:c9:80:4c:c5:e1:1b:
05:e0:22:67:b8:6e:22:86:6d:bb:43:c9:37:05:28:
4b:c5:8a:e3:16:3b:58:41:0e:41:1e:12:e3:2b:4b:
94:eb:a0:78:45:9a:af:2d:c6:72:29:49:6e:94:00:
54:78:62:ce:dd:c2:f2:78:f8:54:35:35:dc:b7:65:
b1:87:4d:6a:a0:93:77:a5:6d:f2:ed:a2:d4:62:a0:
99:86:3e:3e:de:ed:33:00:96:ce:e5:2e:f1:5a:3a:
3f:3a:52:70:d5:3a:50:18:25:5f:71:6f:24:a8:29:
f0:c1:59:93:bd:8e:fc:25:07:81:c6:14:2d:96:18:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:C7:F2:C6:E9:66:53:FE:B8:A4:23:DC:41:31:67:58:B7:1E:49
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/movH8sbpZlP-uKQj3EExZ1i3Hkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.18.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d3:a4:0a:7c:fc:a9:98:d6:6f:dc:00:a6:7b:8f:6e:b7:27:
34:bb:65:9c:8e:e9:b3:92:86:08:f2:ce:62:0e:1c:d2:f5:47:
11:b0:ab:61:2d:3c:94:16:f0:3a:3d:dc:03:75:21:5a:8e:3d:
e5:f8:4b:f0:bd:73:28:2a:25:35:78:d3:58:e5:a7:2c:57:bb:
ee:8a:a6:9c:92:ef:d4:a4:ee:85:84:6f:0a:93:31:bd:ce:de:
17:83:42:fe:0e:c8:63:3c:16:a0:13:b2:6c:6c:91:f9:f9:e2:
6e:3a:ad:48:d7:87:54:d3:c7:03:c8:cf:84:78:7c:d6:7e:01:
eb:a6:b6:58:f1:3e:0c:49:3b:46:e7:ba:62:dc:e0:25:d0:5f:
87:19:6b:1c:87:8d:2c:58:24:3c:d0:47:57:c7:78:c0:e2:37:
83:dc:ce:3f:4e:38:78:62:02:d4:09:98:51:6c:87:09:06:40:
fa:0d:75:79:39:04:00:78:3d:3c:9d:03:d4:a5:49:a7:ed:7d:
d6:34:04:3d:94:c0:f6:c1:28:56:87:dd:62:34:f4:d9:85:71:
be:74:42:58:ae:db:a8:16:6b:3e:8a:f1:13:91:eb:ed:a7:4d:
12:7f:a7:5e:36:a2:85:a0:09:ab:65:8a:03:06:c7:8f:b0:fa:
92:df:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:03 2025 by rpki-client