Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa
File: 8DBBytEPCJCY3NooUxW3HLU69_4.roa (raw, json)
Hash identifier: UsX2uEGCeYP8wwRg47zt2oxFrJNIZelBjNU9bo0WJLI=
Subject key identifier: F0:30:41:CA:D1:0F:08:90:98:DC:DA:28:53:15:B7:1C:B5:3A:F7:FE
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018C82CD5E049FCCFDDA9032B4F7D5B6C22D
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa
Signing time: Tue 19 Dec 2023 15:59:06 +0000
ROA not before: Tue 19 Dec 2023 15:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50263
IP address blocks: 193.57.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:cd:5e:04:9f:cc:fd:da:90:32:b4:f7:d5:b6:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Dec 19 15:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f03041cad10f089098dcda285315b71cb53af7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:7b:60:d0:02:87:71:88:66:d9:09:0a:0c:
22:f2:a9:1f:97:eb:b4:2b:ea:81:ca:e6:63:fc:f8:
72:23:ee:c6:c9:e7:3a:59:8d:d7:ec:c6:dc:62:81:
e2:24:9e:8e:06:d4:eb:c8:5e:cb:88:e5:63:03:57:
04:e7:59:d0:97:f8:b7:eb:6c:52:09:b4:48:89:d8:
a3:62:c0:ef:e5:ef:fb:06:c2:22:7c:f2:0e:83:cf:
1d:1e:f6:09:38:40:30:c3:c5:a5:02:ab:7d:ef:55:
53:44:db:43:58:d6:f7:dd:3f:fe:20:18:76:5f:2b:
8c:74:c5:6e:bf:8f:25:35:5f:ca:62:b6:ab:f6:9b:
65:34:72:3e:99:4f:5e:41:5c:da:f2:38:a5:e9:35:
80:90:b9:79:e4:3f:f4:0e:f9:aa:3b:3e:d2:3c:85:
6d:fe:3a:c2:18:0e:f0:44:9b:e1:88:de:d0:3b:b0:
05:42:ef:92:10:c7:67:60:cc:fc:81:b7:fe:f9:0c:
ca:33:3e:2a:04:e9:15:70:f5:c9:44:64:7a:0e:27:
18:a9:2b:d1:d5:dd:40:bf:f4:e3:fc:e2:df:54:c7:
76:ee:93:f9:8b:3c:a5:15:1b:14:3e:fb:19:4f:19:
a5:4b:aa:a0:45:cf:9e:3b:e8:41:f1:cc:87:5a:49:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:30:41:CA:D1:0F:08:90:98:DC:DA:28:53:15:B7:1C:B5:3A:F7:FE
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.46.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:e6:de:f2:98:4e:71:11:53:82:9e:3c:89:e3:55:6f:7c:
1d:54:1b:8b:2b:23:a1:a1:e8:7a:5a:0b:bc:1b:92:84:5b:1f:
5c:b9:b8:c0:f3:3a:57:f9:19:c8:2a:ba:f9:ab:16:fc:7a:ff:
02:0b:4b:e9:ff:fb:b3:5c:6b:0f:e0:3a:2b:7f:fb:dd:3c:ef:
60:1a:e4:b8:32:cd:2b:fb:5e:9f:98:ad:e2:8e:ef:cf:7f:2d:
0c:a3:24:37:55:ca:dd:55:37:ca:59:98:63:2c:e2:10:c5:6c:
0b:50:e3:32:e1:3d:01:58:2b:cf:8f:f8:55:fd:64:74:98:dc:
4e:40:72:29:04:15:58:c2:db:60:07:c1:d6:67:09:d1:91:9c:
ca:73:2c:0c:cf:5c:e6:e3:45:dc:4e:33:77:56:fc:fb:23:a3:
01:6c:7d:da:18:37:bd:98:0f:75:2c:d2:46:9c:10:bb:42:60:
2b:1b:32:35:a3:ca:03:1a:19:ca:c3:02:c0:3e:02:9f:53:5c:
31:1a:91:4e:bf:7c:92:33:5e:35:96:61:c4:cc:b9:a9:2d:c9:
83:21:5a:13:45:98:f0:d3:68:15:01:d6:b8:fc:72:1f:17:f5:
01:4f:b9:28:c3:76:23:f9:d5:ae:52:53:84:da:f6:5a:03:27:
90:29:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:44 2025 by rpki-client