Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l4_L-3fYBv5fF0dF_CZqnqoGhNM.roa
File: l4_L-3fYBv5fF0dF_CZqnqoGhNM.roa (raw, json)
Hash identifier: pm8756qGMBGcUV3IFbrKaEe4m8dLPbBWmwt5y1pRvVw=
Subject key identifier: 97:8F:CB:FB:77:D8:06:FE:5F:17:47:45:FC:26:6A:9E:AA:06:84:D3
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 018570FBB4BE0D234600AB6B6FF82A6BD864
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l4_L-3fYBv5fF0dF_CZqnqoGhNM.roa
Signing time: Mon 02 Jan 2023 05:37:02 +0000
ROA not before: Mon 02 Jan 2023 05:37:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8953
IP address blocks: 93.113.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b4:be:0d:23:46:00:ab:6b:6f:f8:2a:6b:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 2 05:37:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=978fcbfb77d806fe5f174745fc266a9eaa0684d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:11:02:3c:96:94:a9:70:dc:8a:96:c3:14:
c1:cb:41:89:9c:4c:b9:a5:69:87:f4:a3:23:2d:16:
9d:b3:e3:05:e4:4a:be:4c:bc:29:be:0f:f1:27:63:
46:94:36:12:3e:53:67:39:33:81:3b:ee:52:56:88:
ee:8b:61:79:9f:09:80:9f:e7:6a:8c:67:e8:e2:59:
c8:b4:d4:97:f5:45:db:f5:19:36:d8:b3:81:e6:2a:
1d:57:60:d4:de:d6:3b:3a:f0:f3:17:bb:26:5b:df:
cb:1e:51:1a:59:d0:67:60:0a:fe:1d:59:bf:9e:07:
80:0a:a4:1f:a0:d7:9e:21:e2:eb:7d:2f:5c:27:45:
64:1f:b1:27:d7:94:54:a1:b4:11:9a:cd:e6:d5:dd:
70:4e:50:55:7c:99:92:12:c2:ec:68:fc:83:e2:18:
7b:5c:b9:33:fe:10:7f:84:29:3f:36:41:66:12:db:
23:f1:9d:8e:01:05:39:21:cc:bf:96:60:c6:fc:52:
50:a4:2b:58:4c:26:72:04:22:57:a7:ad:d1:15:30:
72:f2:ed:ca:c8:d6:6b:6f:74:f8:6c:1b:fc:e9:31:
df:a1:cd:fb:7d:b2:8e:04:be:81:9b:8e:d0:e1:40:
0a:b4:16:5d:c7:9e:7d:52:17:57:15:e2:21:4f:0a:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:CB:FB:77:D8:06:FE:5F:17:47:45:FC:26:6A:9E:AA:06:84:D3
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l4_L-3fYBv5fF0dF_CZqnqoGhNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:65:14:87:9e:c1:66:01:9c:ff:df:9c:e4:69:f5:59:5c:5a:
c3:93:75:44:5a:de:c9:f1:95:57:9c:a8:af:87:03:27:99:e7:
db:4f:a8:0f:e3:64:05:90:3e:8f:91:b4:ed:60:c3:48:ed:21:
02:bc:0f:1f:05:0d:9e:d3:e8:ec:bd:9b:a9:cb:d9:52:55:4a:
8c:8b:0f:31:78:fd:5e:3d:82:97:51:f7:29:1e:da:ef:e9:37:
41:00:8d:88:bf:49:1f:13:f3:27:fc:e7:c3:fc:d5:85:c3:f3:
95:cb:d5:8c:c8:88:cb:ad:2a:9e:39:cb:0a:8d:da:61:f6:61:
86:cd:1e:ef:bc:b6:cb:79:e3:0e:5f:ce:5f:f2:c6:80:3d:26:
54:cf:fd:b8:c3:8a:14:cc:6a:d5:15:a5:a4:53:d1:20:00:ca:
87:2b:9c:9b:7b:d8:9a:15:74:d4:d1:31:2b:7b:cd:8b:74:ed:
90:b4:05:f8:0d:eb:67:e0:a3:ae:f7:07:b7:0f:31:70:b1:94:
0d:7a:dc:e2:2d:e5:e4:fd:87:91:92:01:b8:b6:33:ff:05:bf:
79:f9:78:56:ef:10:12:5f:83:28:55:80:62:08:51:74:53:11:
e0:f1:da:36:f3:e4:c9:d9:50:63:8c:2e:57:6d:82:b8:48:f2:
a8:b0:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:05 2025 by rpki-client