Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7ka56YnJj2NGeR9VaFG5wwsGuqA.roa
File: 7ka56YnJj2NGeR9VaFG5wwsGuqA.roa (raw, json)
Hash identifier: itNSYcg2+g/T+FTFUpRS+XJF9HBdXo8URoA5VsL96Wk=
Subject key identifier: EE:46:B9:E9:89:C9:8F:63:46:79:1F:55:68:51:B9:C3:0B:06:BA:A0
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0185384AE75AC44B38F5B1138BE9AD31B94D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7ka56YnJj2NGeR9VaFG5wwsGuqA.roa
Signing time: Thu 22 Dec 2022 05:25:11 +0000
ROA not before: Thu 22 Dec 2022 05:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:4a:e7:5a:c4:4b:38:f5:b1:13:8b:e9:ad:31:b9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Dec 22 05:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee46b9e989c98f6346791f556851b9c30b06baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:d0:96:6c:57:b5:5b:6b:18:e5:12:4e:e1:
ee:7d:b6:38:af:f8:d5:02:b1:ad:7e:52:1d:54:63:
93:1d:b7:58:24:b0:c9:59:eb:22:f8:68:85:d2:72:
aa:47:23:6c:ed:ad:4d:fa:4b:21:9f:1e:6a:47:0b:
cb:79:e6:6a:03:ab:e5:36:79:28:87:64:ac:85:3f:
42:49:3f:1b:5e:90:e2:21:a9:69:7c:7e:46:be:f2:
c0:c0:ac:d8:fd:c9:2e:98:a8:42:7a:67:61:82:7d:
6e:bd:00:a4:20:f4:a0:e3:20:35:66:dc:e3:0d:7b:
df:c5:a8:57:0b:80:7c:dd:76:0a:8c:31:74:f6:5d:
e7:45:ee:27:db:82:b1:26:77:df:7d:67:7e:ed:16:
5f:44:17:f1:11:37:f8:2e:23:d9:93:87:6f:87:96:
96:5f:35:c2:46:cf:cd:85:78:b1:b3:08:33:9d:a3:
40:76:e2:df:93:d0:16:0d:c8:fd:b0:04:34:1d:e8:
d6:69:5f:6d:7a:f3:68:c6:97:7c:b5:24:d0:e2:5f:
6a:83:fd:e8:6f:91:08:33:9a:d0:77:a3:91:48:a2:
93:11:f7:82:d4:41:cd:c7:3b:62:35:0d:dc:4d:91:
07:69:cd:e7:84:60:a2:51:b9:ef:8e:07:7b:0e:72:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:46:B9:E9:89:C9:8F:63:46:79:1F:55:68:51:B9:C3:0B:06:BA:A0
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/7ka56YnJj2NGeR9VaFG5wwsGuqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:61:d2:76:c1:fe:84:76:a6:85:2d:c4:43:a9:c6:0c:22:
c7:c1:76:1d:09:65:33:b9:b4:a3:43:9f:30:4e:4b:99:4c:fd:
45:95:ba:42:dc:39:a6:47:89:73:52:7c:0e:3f:d4:5a:61:0b:
08:4e:cb:f2:c3:cf:53:43:18:00:3f:30:f1:72:29:93:37:d0:
c0:2c:f4:3c:d9:58:6b:ce:af:6b:5f:c6:36:ab:95:ee:ee:eb:
a3:d8:99:e8:0c:4e:fe:87:c4:5f:1b:fc:8d:c8:d1:dd:4d:5e:
3e:5a:43:60:d3:3f:ef:de:44:0b:69:9b:93:74:d8:c1:d4:c5:
72:29:74:97:a6:73:59:84:9d:1a:39:8e:2f:aa:c9:cd:2d:c3:
32:8a:61:36:3e:d5:c2:57:75:4c:32:a9:56:6e:22:4d:90:02:
a6:ed:48:17:31:e9:23:fc:43:3b:0e:a4:64:04:8b:e3:a0:18:
ba:ef:20:d3:04:58:e2:89:90:7c:1f:c6:38:1d:f9:0f:17:36:
d0:50:52:0d:85:b8:d2:fd:c2:11:42:af:82:ee:3b:3b:c4:c6:
95:03:c4:bc:d0:85:89:4a:68:95:11:76:f7:51:29:2e:74:97:
ab:87:0b:16:c4:6c:b7:80:1a:28:a1:1b:73:5c:fc:3d:77:02:
e6:f7:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:36 2025 by rpki-client