Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/g9O-ZgOUWrxuZLTQBUw2RrOrSNo.roa
File: g9O-ZgOUWrxuZLTQBUw2RrOrSNo.roa (raw, json)
Hash identifier: VGOm065jf0e5Czf+sdavHHzc9ks+2A28yfzwsAkp2vk=
Subject key identifier: 83:D3:BE:66:03:94:5A:BC:6E:64:B4:D0:05:4C:36:46:B3:AB:48:DA
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01856D5D135855AB86522E7E99886A6C3BCE
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/g9O-ZgOUWrxuZLTQBUw2RrOrSNo.roa
Signing time: Sun 01 Jan 2023 12:44:54 +0000
ROA not before: Sun 01 Jan 2023 12:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 193.17.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:13:58:55:ab:86:52:2e:7e:99:88:6a:6c:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jan 1 12:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d3be6603945abc6e64b4d0054c3646b3ab48da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:f4:30:f0:a4:76:6d:31:d8:ef:a8:07:fa:
d1:0c:13:46:1d:79:15:fc:78:eb:66:b5:b4:b7:8c:
ca:47:d5:3a:9a:c4:e6:37:13:5b:54:15:1b:75:ac:
87:61:b9:03:d8:7b:db:b3:0d:ba:e4:a4:31:68:e6:
a7:e4:13:8e:26:30:0c:bf:ab:04:3a:7a:7a:dd:8f:
27:43:66:9c:56:3c:52:57:85:b8:2b:11:54:18:3b:
f6:78:f7:cc:53:ec:3f:38:9d:97:91:50:d4:25:22:
1a:db:96:72:29:41:06:d3:80:35:2d:d6:14:48:92:
64:23:01:34:57:26:04:1b:0a:90:5a:de:1c:0d:50:
a8:c6:1e:48:59:e6:7b:f3:fb:a6:5c:15:79:36:aa:
88:52:59:ce:53:f7:c5:12:b9:62:ee:ae:38:53:c9:
c9:31:ef:29:71:6a:0f:04:26:5f:5b:12:4c:63:cf:
d5:54:07:e5:14:cc:ae:38:64:48:df:16:9e:13:57:
33:e3:40:36:bc:fc:97:73:e0:f2:5b:d0:ab:f9:8a:
a2:1c:ea:18:cc:37:81:9a:bb:b6:ac:94:af:8c:78:
ef:6e:54:92:5a:e7:bc:10:1a:e4:70:41:70:e7:35:
6b:29:e3:eb:65:36:c2:db:d6:c7:8a:de:27:6f:ee:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D3:BE:66:03:94:5A:BC:6E:64:B4:D0:05:4C:36:46:B3:AB:48:DA
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/g9O-ZgOUWrxuZLTQBUw2RrOrSNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.76.0/24
Signature Algorithm: sha256WithRSAEncryption
16:48:d7:9f:e0:c8:e7:5b:53:75:3c:f8:cc:8c:12:c2:5a:50:
c6:9c:08:db:ff:5a:fd:3c:c5:10:62:82:b9:e1:60:e7:c4:7d:
11:a6:c9:6d:3c:ee:7e:c8:26:1e:61:61:7a:6b:f6:e2:b6:94:
1d:22:31:4b:f6:1e:55:06:e3:bf:75:d1:c7:ae:3f:f1:f5:57:
1b:ee:b8:3f:d2:9a:42:55:d5:80:15:af:43:a4:6b:3b:73:58:
4f:cc:76:02:73:35:da:a3:ba:13:56:d2:7d:f3:dc:bd:a0:cd:
82:7a:10:6b:5e:99:a7:85:28:69:83:9a:69:01:47:a0:c9:82:
28:30:b4:a3:9d:df:ae:63:47:44:34:31:45:90:1c:14:72:46:
6e:30:03:1f:8d:cc:74:ef:45:7d:d3:a6:5b:c5:a9:34:68:78:
e6:bf:cd:75:43:9b:d4:5d:85:62:31:f3:80:bd:a2:ac:37:f5:
ed:84:d0:be:dd:c9:25:c4:91:55:c6:90:ab:68:9a:bd:4d:64:
b6:83:38:97:33:c8:64:4c:2f:38:ca:5d:2c:11:6e:5c:43:89:
ee:0f:30:79:99:a8:a5:e2:3e:c7:dc:10:26:16:11:f6:25:f8:
54:92:1d:24:a5:aa:b8:a8:26:d4:4f:07:1f:c6:b2:5c:cb:e2:
94:cd:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:29 2025 by rpki-client