Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/a_oDnXWUAIG_h6a_DfwuF9pva3w.roa
File: a_oDnXWUAIG_h6a_DfwuF9pva3w.roa (raw, json)
Hash identifier: u6PJ8z1ul8PulhrSs+4M7v+msf1+N8Cso5JSq8jTCEI=
Subject key identifier: 6B:FA:03:9D:75:94:00:81:BF:87:A6:BF:0D:FC:2E:17:DA:6F:6B:7C
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0189F39187AB8660675D8352AF42C6328F38
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/a_oDnXWUAIG_h6a_DfwuF9pva3w.roa
Signing time: Mon 14 Aug 2023 10:22:28 +0000
ROA not before: Mon 14 Aug 2023 10:22:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:91:87:ab:86:60:67:5d:83:52:af:42:c6:32:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Aug 14 10:22:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bfa039d75940081bf87a6bf0dfc2e17da6f6b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:b6:74:29:a1:9e:51:77:d4:e3:47:51:2f:
6f:e0:d5:9d:11:9f:50:ad:fb:78:e9:f7:19:18:21:
35:c1:e9:c6:54:a0:9e:8f:06:b7:e2:d7:80:4a:9f:
5a:2d:d6:9b:54:ec:df:52:56:63:41:d7:70:b7:02:
22:0d:a8:7e:5f:92:2c:6a:99:23:0b:83:81:3a:33:
3a:c3:08:a1:02:04:83:c4:ee:2f:47:65:8b:9d:fc:
18:9c:42:d8:71:2f:e3:86:8b:11:73:7b:c5:b7:05:
a7:72:0f:96:8f:1e:e8:a9:a8:08:17:dd:12:51:c1:
68:c1:48:ae:f9:ff:01:73:ee:e7:e6:8c:80:c0:33:
7a:08:ba:47:c3:3b:0b:50:67:04:0f:56:8e:9f:ec:
b4:81:c8:fe:ad:6a:a1:2f:8b:63:7c:b8:60:f6:d1:
a8:27:58:0d:93:09:db:cd:12:dd:63:be:5e:2a:3b:
15:31:86:93:7f:a9:38:79:4c:7b:f9:48:2b:29:5b:
43:05:05:e7:aa:d4:8f:97:bc:bb:36:79:42:e8:a9:
8f:06:1e:b5:f5:37:52:c2:54:4b:13:3e:e6:4b:7c:
fb:2f:6a:db:15:b4:cd:15:cd:9a:bc:5e:dc:1e:9d:
98:76:bb:0e:bd:84:72:a8:a8:f7:82:6f:88:68:58:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:03:9D:75:94:00:81:BF:87:A6:BF:0D:FC:2E:17:DA:6F:6B:7C
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/a_oDnXWUAIG_h6a_DfwuF9pva3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:77:b2:58:50:69:1f:23:4b:5a:de:e3:13:18:64:25:c3:af:
68:3a:87:d1:b6:7d:7c:24:c7:98:ea:45:b5:53:54:0b:f0:1b:
f1:f7:72:91:0b:a6:30:d9:06:a0:11:3d:89:af:e4:39:9c:6f:
68:a7:c0:b1:16:b6:c7:6f:2f:f7:59:cb:a2:e2:64:01:89:07:
82:14:18:e6:0e:96:64:63:16:34:c4:ef:1e:6e:d7:7f:62:c0:
30:66:6d:5a:47:30:f3:8a:fb:c4:07:34:b9:05:07:63:d0:60:
b9:d7:e7:2a:a5:ef:b0:99:c3:52:d3:03:71:09:67:2f:6d:da:
35:84:da:5b:b8:ce:c4:52:2a:6e:84:41:b3:4c:ec:b6:a9:58:
4c:27:05:c5:ea:9a:75:57:82:ee:f9:4f:a7:fb:7a:f0:d8:96:
ab:3b:23:46:38:fc:2e:19:83:00:91:4c:dc:91:2b:42:5b:6f:
bf:83:9b:05:a1:03:20:a4:8d:5f:d9:c1:2a:65:9a:3c:5a:1a:
2b:e3:49:aa:65:b3:98:3a:26:0a:76:93:7b:d5:bb:29:c1:79:
ff:fd:76:f7:d0:af:12:40:f2:08:ef:2a:6b:37:3d:47:62:68:
e7:d2:17:59:03:9f:4c:3f:7b:2a:18:a2:0e:17:18:8f:02:63:
81:fc:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:44:44 2025 by rpki-client