Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/BT3y6jnUh8Zs8t8EjgAtJQ5E-74.roa
File: BT3y6jnUh8Zs8t8EjgAtJQ5E-74.roa (raw, json)
Hash identifier: LZVTtM78Y+H/2nJVHIma5sqJSIaCKDD1TwCN3/zQ6+s=
Subject key identifier: 05:3D:F2:EA:39:D4:87:C6:6C:F2:DF:04:8E:00:2D:25:0E:44:FB:BE
Certificate issuer: /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial: 0185715526C2DD7323B72A9A15DD2E3A56DD
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/BT3y6jnUh8Zs8t8EjgAtJQ5E-74.roa
Signing time: Mon 02 Jan 2023 07:14:43 +0000
ROA not before: Mon 02 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35480
IP address blocks: 193.192.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:26:c2:dd:73:23:b7:2a:9a:15:dd:2e:3a:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Validity
Not Before: Jan 2 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053df2ea39d487c66cf2df048e002d250e44fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:89:9a:f1:1c:8c:2f:2d:60:80:1b:a3:ff:
56:9e:2c:da:a3:1a:d9:f4:57:e0:bb:e9:bf:aa:5f:
38:8d:68:1d:41:85:eb:7b:f6:ff:59:1f:b5:d6:e1:
4c:ae:f6:c9:51:17:f3:19:19:fa:09:da:73:a3:45:
3a:0d:61:7c:82:a8:91:75:92:a5:89:81:4e:49:97:
75:f0:ad:0d:f4:ca:3b:c2:53:2d:e2:02:31:62:19:
c5:f3:97:6b:9d:4d:85:40:37:dd:fa:b7:32:a5:5f:
1b:93:cc:38:57:cf:f4:4c:3c:9c:fe:35:83:e7:72:
6a:d6:67:f9:4a:bf:71:85:f5:c4:32:f2:44:28:e6:
61:7e:e7:61:2d:a4:41:bc:d6:f2:21:2e:95:8d:45:
c7:83:a3:e7:c4:09:30:03:a2:a4:10:bb:f6:e9:b0:
c0:05:3a:c4:54:cf:dc:d0:12:63:17:5c:3b:fc:71:
ca:c0:c1:67:87:b3:94:31:61:98:ba:20:aa:e8:ed:
f2:12:c0:20:6c:60:3a:28:e5:ef:70:67:c5:f5:33:
38:b1:9b:6b:c8:c7:b0:14:c1:de:1e:5f:39:0e:2a:
38:da:ef:3b:db:a9:cc:ac:79:82:b3:47:4f:a5:aa:
0a:19:a6:07:ed:50:12:e3:8d:95:43:b7:7f:e5:a3:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:F2:EA:39:D4:87:C6:6C:F2:DF:04:8E:00:2D:25:0E:44:FB:BE
X509v3 Authority Key Identifier:
keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/BT3y6jnUh8Zs8t8EjgAtJQ5E-74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
12:06:ab:29:f4:be:4c:4c:39:58:bf:54:95:67:06:ed:91:d8:
cc:9e:45:34:73:8e:a0:06:02:88:71:df:ae:58:aa:0a:fb:c7:
8c:fe:21:7f:57:47:fd:c4:33:c9:6c:3b:db:c0:35:85:4a:58:
a1:52:63:77:4d:a9:73:ff:19:eb:7e:14:82:cf:c4:55:91:34:
51:68:7c:96:2f:aa:f6:fa:42:c5:81:1e:cf:b5:44:06:c7:67:
f9:b7:8a:5d:1a:02:f1:51:d1:0b:5e:d7:1a:91:b7:a3:e2:61:
88:3c:3b:f8:9c:09:48:10:3c:fb:7a:75:65:cd:6b:50:fe:e5:
a8:c5:1d:19:06:98:ce:96:fd:20:70:11:4e:f4:76:b6:bd:25:
fe:ca:38:d6:37:00:f4:a6:77:76:bd:f4:cd:8d:6d:a8:91:ce:
10:07:f5:15:0d:87:c5:52:b9:02:41:6d:55:f5:ac:ec:c4:f0:
fb:a3:5a:6e:54:60:b3:3c:6c:84:3e:dc:2f:67:c0:62:44:60:
77:56:6c:0d:40:a8:dc:52:74:2f:67:3c:76:d2:2d:e2:a9:0f:
0d:27:a6:f9:54:11:20:65:ac:a0:4d:d3:a3:19:ca:20:da:0c:
90:58:d5:7d:12:ca:df:4d:a0:4c:84:f6:4e:e2:28:87:1a:8c:
ea:29:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:10 2025 by rpki-client