Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/1_spm8PKNZareaHo9rMVtPc7Q94.roa
File: 1_spm8PKNZareaHo9rMVtPc7Q94.roa (raw, json)
Hash identifier: Qvc0L9sMScw0Et0sFR3QNuYsvn0l40aTqZOZWeffcy0=
Subject key identifier: D7:FB:29:9B:C3:CA:35:96:AB:79:A1:E8:F6:B3:15:B4:F7:3B:43:DE
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018C87AEF08A1B9C9E50C6829CABBE697FDA
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/1_spm8PKNZareaHo9rMVtPc7Q94.roa
Signing time: Wed 20 Dec 2023 14:43:58 +0000
ROA not before: Wed 20 Dec 2023 14:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49559
IP address blocks: 193.57.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:ae:f0:8a:1b:9c:9e:50:c6:82:9c:ab:be:69:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Dec 20 14:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7fb299bc3ca3596ab79a1e8f6b315b4f73b43de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:44:f1:18:5c:17:e9:25:2e:09:76:71:21:
97:a0:be:7d:5b:3b:8b:90:78:61:ab:89:cc:1f:04:
c2:17:16:df:b9:86:6b:77:2d:f8:7e:6d:47:71:85:
af:00:e5:e0:5d:b5:3e:6e:d5:c2:67:87:00:39:a9:
e1:02:34:c1:bb:91:15:27:4a:88:d2:93:4a:56:3a:
c9:5d:bc:3e:0f:29:c4:e4:83:e6:12:04:31:10:7b:
b2:1f:ed:0a:5c:4f:e7:c9:e7:03:c8:00:af:09:73:
f2:b6:85:64:26:66:eb:00:4c:40:a4:e5:34:75:52:
18:2b:5a:8d:27:e5:d2:11:6c:59:82:bc:04:6f:d5:
7d:3c:66:3e:71:03:38:88:66:52:51:1d:17:00:60:
f2:ec:8b:ab:fb:03:7e:9c:d4:c9:2e:92:ff:6b:83:
25:1a:4d:ed:28:ea:41:99:6e:19:3d:00:97:45:e8:
47:16:2d:41:af:32:77:6a:c1:86:fc:8f:cb:14:ce:
a4:0c:40:70:9d:89:f8:e9:d1:c7:d2:6c:e4:42:70:
5f:8f:27:dc:40:c9:a9:ce:ea:d2:80:40:9b:bd:ef:
9b:03:a0:99:75:f5:a1:4c:42:c9:7c:44:94:ee:19:
b6:3f:52:2f:08:3d:97:fe:9c:bb:7f:ea:91:65:6e:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:29:9B:C3:CA:35:96:AB:79:A1:E8:F6:B3:15:B4:F7:3B:43:DE
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/1_spm8PKNZareaHo9rMVtPc7Q94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.46.0/24
Signature Algorithm: sha256WithRSAEncryption
18:39:fa:ca:c2:49:c6:24:7a:b9:26:4d:59:fc:c0:f1:19:7d:
d3:b9:a0:ab:0b:35:a7:90:c3:ea:3f:a5:ab:d1:02:19:ce:95:
a4:fa:4b:e0:fd:af:55:66:59:01:9c:ce:3d:06:fb:50:f6:a1:
28:68:a8:2f:78:2c:19:0c:35:32:0c:55:27:0a:65:65:35:b3:
d0:e0:81:55:0c:70:fe:9c:5d:96:7a:9c:7e:23:15:29:33:55:
c0:78:5f:fe:6c:b6:3d:ed:43:a8:b6:98:46:06:6c:b6:95:45:
c1:e2:3a:bb:de:f5:80:61:b9:21:df:d3:26:41:b5:79:d0:4d:
b3:83:4e:1d:e8:2d:25:18:8a:c5:9c:37:7d:c1:1f:94:6e:02:
74:e7:f5:9d:a2:0f:df:6c:3d:1c:2b:39:9e:68:43:d2:ed:de:
9f:49:5a:68:39:39:9a:20:6f:0f:81:e8:bd:a8:3c:c9:ba:d8:
df:7e:d1:ea:4e:6c:1c:f4:42:70:78:bc:c4:f6:53:7e:53:fd:
58:0a:bc:f5:51:da:0a:52:64:01:b6:27:3b:21:1a:24:af:4f:
54:a5:af:54:24:01:e6:f7:aa:ae:bb:f1:b6:fd:68:9c:41:82:
f2:46:16:a0:a8:76:e1:0c:06:3e:5c:cc:f8:12:0a:e6:fd:43:
3a:2e:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:47 2025 by rpki-client