Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/9t04GsySM5pjbVC1fjwhnmtvzrE.roa
File: 9t04GsySM5pjbVC1fjwhnmtvzrE.roa (raw, json)
Hash identifier: tAA47H9o5CzcHbWtODRfv0tn5yYwPU+HTkGBHww8G60=
Subject key identifier: F6:DD:38:1A:CC:92:33:9A:63:6D:50:B5:7E:3C:21:9E:6B:6F:CE:B1
Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial: 04443D44
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/9t04GsySM5pjbVC1fjwhnmtvzrE.roa
Signing time: Sat 01 Jan 2022 08:55:23 +0000
ROA not before: Sat 01 Jan 2022 08:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61023
IP address blocks: 193.162.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71580996 (0x4443d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Validity
Not Before: Jan 1 08:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6dd381acc92339a636d50b57e3c219e6b6fceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:80:c8:7d:63:34:3e:1d:04:ce:02:a0:bb:8b:
93:51:39:ef:f3:1a:8d:50:18:91:14:6c:82:df:4f:
6e:63:6f:24:28:8e:ac:bd:f0:53:b3:61:ec:0c:6b:
37:f3:b7:92:e8:60:9d:9a:b0:e7:ad:14:79:53:cb:
6d:eb:9f:04:ce:d0:a4:0a:4e:9b:1f:75:54:e9:43:
05:c7:96:50:a8:6c:3f:86:b1:42:da:50:dd:b3:fb:
96:90:30:e6:41:90:da:5e:98:d7:72:cd:31:d8:ab:
40:50:41:b9:9b:77:90:a3:f0:cb:1a:a7:f5:e3:30:
9e:ae:ca:52:fe:f4:5e:1d:07:23:c9:84:c7:1e:fd:
ca:ab:03:4b:4a:65:cc:7b:7e:da:cf:c0:ed:ef:79:
81:e7:da:77:1b:19:ae:b0:cf:17:cc:ce:e0:98:25:
9c:cd:a6:fa:1a:e9:91:13:98:d1:b6:99:d2:62:9a:
34:93:3d:82:61:d7:ec:c5:1d:74:ca:81:93:a1:9e:
5a:2e:06:a5:65:11:8c:0c:67:b4:7f:56:02:3f:bc:
6b:5e:63:04:74:f5:a0:a2:5d:6a:2a:8e:1c:60:ae:
2a:de:f5:6a:a0:e1:a0:46:cc:bc:84:f1:f0:ed:94:
cf:ca:f3:e0:a5:83:2d:15:46:fa:8e:15:d9:72:44:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:38:1A:CC:92:33:9A:63:6D:50:B5:7E:3C:21:9E:6B:6F:CE:B1
X509v3 Authority Key Identifier:
keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/9t04GsySM5pjbVC1fjwhnmtvzrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e2:cb:90:a6:7e:c3:3e:a1:08:d3:32:04:d7:d5:7c:2c:cd:
51:72:5f:ae:cf:f7:fa:15:e3:03:8b:51:bb:68:d6:b9:c0:6c:
7b:5c:ec:56:5b:b8:90:1b:b6:92:1b:9c:f0:6d:cf:7d:53:5b:
20:80:67:70:f8:25:7b:39:03:8e:cb:2a:b8:71:98:8a:f5:56:
81:12:45:d9:ea:51:29:06:07:b1:a6:11:08:7c:c0:e2:6e:48:
17:bb:13:4f:62:d1:53:c7:a8:f5:56:1a:35:57:c7:8d:8d:f8:
81:96:09:c4:f3:f8:a4:56:70:d2:32:fd:a6:fe:06:ad:3c:58:
17:a1:95:e3:f4:ce:32:15:8c:4a:eb:ae:a1:c6:82:21:53:ca:
e5:bf:96:ba:f2:c7:6e:00:fd:7b:3f:ac:d8:c9:4e:9a:bf:62:
6e:12:75:2a:c7:7a:d6:29:5f:d1:f8:81:b1:fa:92:c7:33:ac:
78:6c:6e:eb:dd:3b:07:a3:dc:63:14:80:88:20:9b:32:c5:b5:
44:89:5e:76:ff:40:c3:69:3f:eb:30:d5:47:e2:a1:af:b3:fe:
9d:56:10:1c:8a:88:80:e2:0e:cf:14:01:91:5e:a7:50:c6:51:
73:1f:3b:69:57:2d:45:39:0a:05:a3:5a:78:f6:2f:de:af:47:
b6:13:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:13 2025 by rpki-client