Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/A3dSKOTgIRvtcmyA-4MWgpMXOg4.roa
File: A3dSKOTgIRvtcmyA-4MWgpMXOg4.roa (raw, json)
Hash identifier: 0zR4aTAlfEPVItEVietYm/oD+LOMlFpcXojKq8VcFTg=
Subject key identifier: 03:77:52:28:E4:E0:21:1B:ED:72:6C:80:FB:83:16:82:93:17:3A:0E
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 01E4EC
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/A3dSKOTgIRvtcmyA-4MWgpMXOg4.roa
Signing time: Tue 26 Apr 2022 15:11:35 +0000
ROA not before: Tue 26 Apr 2022 15:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201223
IP address blocks: 193.134.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124140 (0x1e4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Apr 26 15:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03775228e4e0211bed726c80fb83168293173a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:ec:91:23:92:75:00:0b:07:86:c4:fe:0f:
74:71:75:f2:43:fa:30:81:89:01:27:cc:89:13:c2:
69:e6:15:6b:85:b2:f1:12:ee:f9:0c:44:bc:c0:3e:
0b:e0:b6:e6:27:a1:52:3c:d8:75:77:31:ec:04:42:
80:0f:df:89:98:eb:3d:8d:ad:ce:2b:5c:62:90:e7:
62:b9:af:38:54:1d:2e:2e:75:e6:e0:f0:20:a5:85:
bd:a6:c5:5a:67:92:09:ce:10:51:3a:77:c5:ea:cf:
84:b4:12:60:9a:fd:2a:83:46:27:cd:75:43:a0:45:
4c:09:f6:77:71:e1:0d:58:27:cf:5b:5a:ee:2d:6b:
99:54:4c:ac:d9:d8:da:9d:6f:ca:ea:a8:4f:94:93:
84:b8:a2:db:14:45:e8:d4:46:52:9e:21:c5:43:2b:
7f:0d:5a:e3:56:3a:70:64:cb:08:f5:c6:f8:3d:a9:
d3:b8:1f:ff:72:76:f6:71:bc:f9:f1:56:3e:ab:42:
c7:79:0e:dd:e6:0e:ac:69:05:a0:15:fc:a6:34:ff:
3a:27:ec:f5:77:c8:20:ea:bf:74:5b:31:f4:65:76:
ac:a5:2f:7e:43:2a:dc:5d:48:04:79:b3:f3:80:13:
1f:0a:67:04:87:e9:2c:df:20:13:cb:d0:08:49:30:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:52:28:E4:E0:21:1B:ED:72:6C:80:FB:83:16:82:93:17:3A:0E
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/A3dSKOTgIRvtcmyA-4MWgpMXOg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.163.0/24
Signature Algorithm: sha256WithRSAEncryption
53:33:31:05:bb:7a:24:fd:1c:0e:1f:8f:c1:38:2e:a3:36:9f:
37:f9:36:75:1b:25:04:06:31:99:0b:87:0f:91:b7:85:27:eb:
19:de:f5:8d:0b:21:d3:2b:b7:d2:ac:d2:bf:63:e5:c4:0c:b8:
c4:dd:dd:62:27:3e:df:56:af:ce:b7:53:80:31:06:c4:d9:24:
22:39:a7:3b:0b:6c:f5:05:41:de:d6:d3:bc:1d:eb:d9:e1:2e:
54:8e:f1:c7:da:ec:f5:bb:ea:65:41:f4:75:53:19:a3:b1:f4:
e1:17:6a:f5:6d:32:3c:0b:bb:bb:39:83:2b:86:f6:1c:3b:fe:
79:43:b4:74:b1:bb:a4:db:37:1c:9a:d8:b6:67:34:59:7a:8c:
58:23:b4:65:76:ed:3d:e0:02:75:26:ee:4b:11:cc:c8:d6:53:
27:10:8c:d9:c4:21:c8:cb:8f:27:91:dd:ea:9f:3f:5d:53:7d:
89:10:ac:df:98:c1:36:01:59:f8:ed:bd:2b:c4:14:a7:f0:58:
1a:c8:64:92:8e:d5:97:62:e0:c5:9e:5d:29:9b:41:34:74:04:
1b:e2:7e:e5:4e:9a:c5:07:74:20:01:af:72:a8:f7:96:81:9c:
52:9b:15:bc:7e:2e:ef:bb:89:5b:5a:80:33:44:62:33:13:36:
c8:d1:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:15 2025 by rpki-client