Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/3-85i8ZoIJRfp1HKUvPuYRJa95I.roa
File: 3-85i8ZoIJRfp1HKUvPuYRJa95I.roa (raw, json)
Hash identifier: eJhk631waDEgByy4coQyPqdml7PE99+Tr0ib8Ldq+8w=
Subject key identifier: DF:EF:39:8B:C6:68:20:94:5F:A7:51:CA:52:F3:EE:61:12:5A:F7:92
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 018C9DAAB05792277261330A1F075517491E
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/3-85i8ZoIJRfp1HKUvPuYRJa95I.roa
Signing time: Sun 24 Dec 2023 21:10:58 +0000
ROA not before: Sun 24 Dec 2023 21:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43674
IP address blocks: 193.43.90.0/24 maxlen: 24
91.198.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:aa:b0:57:92:27:72:61:33:0a:1f:07:55:17:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Dec 24 21:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfef398bc66820945fa751ca52f3ee61125af792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:10:15:cd:25:86:e7:80:17:3d:cf:de:27:
e8:ff:cf:2a:59:99:cf:2d:ae:7f:c5:e7:ab:1f:76:
c0:da:7f:c3:e4:1b:07:2e:ec:6b:5d:4c:b8:95:3d:
73:04:3d:c6:52:30:96:3f:ab:70:7f:44:6e:18:bc:
b4:2d:61:a8:e4:bf:9a:82:ef:74:37:dc:0b:77:cf:
b2:5e:e7:9c:47:df:6d:85:d1:3f:61:2e:15:74:1a:
77:08:b4:43:f2:af:3d:6c:a9:b7:95:fa:cc:ba:8f:
5d:86:96:a5:59:3e:4e:35:98:61:46:d6:4a:09:c7:
02:07:8b:a8:a9:89:e3:5b:a1:e5:0e:80:a8:82:44:
43:63:67:d2:d4:8f:e3:5d:a9:24:1c:09:df:2c:5e:
0d:15:19:2e:f9:14:29:19:b6:dc:c9:3f:2e:fa:88:
8c:b5:c0:71:61:73:fe:27:c7:90:0d:d5:cd:f6:cc:
7f:25:e2:56:65:bb:57:dd:05:0f:2e:98:f5:fb:ac:
85:0b:88:4c:87:19:90:5d:34:1f:cf:ab:3a:49:6b:
38:37:71:62:fd:9f:d1:ca:39:8f:ca:eb:f7:a9:05:
54:94:1e:ce:f8:42:58:46:45:1d:54:6c:d1:59:99:
99:5d:18:c4:de:74:de:1b:71:b5:85:b4:30:7a:14:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:39:8B:C6:68:20:94:5F:A7:51:CA:52:F3:EE:61:12:5A:F7:92
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/3-85i8ZoIJRfp1HKUvPuYRJa95I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.100.0/24
193.43.90.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1d:05:56:45:d9:d4:5e:19:2c:6c:e6:b7:12:43:d2:b5:ac:
69:aa:56:52:41:5d:29:84:6a:59:5c:a5:0c:7b:3e:1e:a8:ce:
80:2e:bd:f3:aa:41:4b:df:56:26:aa:a4:06:6c:47:65:a9:a6:
31:3d:31:bf:f6:6e:cc:f5:42:17:d1:5a:da:58:9f:40:ed:6d:
16:2b:f4:0e:80:ad:e9:ff:25:c9:a4:66:f2:83:67:0c:f7:6e:
5c:96:60:44:8c:aa:d7:06:54:8c:d1:ef:92:46:30:07:8d:e9:
f7:50:6f:fe:85:e0:6b:fb:c5:de:df:42:39:81:eb:11:ec:58:
4c:25:8e:1c:2d:09:f4:af:c0:ca:af:64:ee:8f:bd:10:b3:95:
19:08:89:b6:5b:65:79:7c:7f:d4:51:1c:77:35:89:43:e0:7f:
07:f8:83:30:19:c3:96:d5:8f:76:3b:a7:2a:8e:42:46:cc:20:
42:e4:33:69:6a:11:f7:bf:56:2c:8a:18:f9:d9:cc:df:03:48:
09:ec:c2:57:38:c9:a2:84:07:10:39:75:8b:1c:f6:04:62:cd:
6f:87:4e:fa:07:29:92:ab:17:b8:73:d3:f1:ca:cf:8a:c7:ca:
a8:a1:f0:f9:ed:51:06:98:ac:66:cf:7d:58:3c:07:22:9f:92:
9d:4d:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:50 2025 by rpki-client