Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/cpP6Y7LTWwIvJg_sV7xx8Ayc7X8.roa
File: cpP6Y7LTWwIvJg_sV7xx8Ayc7X8.roa (raw, json)
Hash identifier: JSi5CY4hF3D1WxdtjdWWMhs14jaqB1IeIrrPtkD3s18=
Subject key identifier: 72:93:FA:63:B2:D3:5B:02:2F:26:0F:EC:57:BC:71:F0:0C:9C:ED:7F
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 10D8DC03
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/cpP6Y7LTWwIvJg_sV7xx8Ayc7X8.roa
Signing time: Sat 01 Jan 2022 05:00:00 +0000
ROA not before: Sat 01 Jan 2022 05:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207035
IP address blocks: 193.161.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282647555 (0x10d8dc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 05:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7293fa63b2d35b022f260fec57bc71f00c9ced7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:8b:ab:60:64:ee:f4:8d:b7:23:01:3f:dd:
cc:29:ba:44:9a:14:07:40:28:a6:9d:02:eb:99:71:
c5:20:02:6b:60:18:37:7e:f0:ca:51:44:17:6f:81:
7f:b7:d5:5d:be:75:13:6e:44:0c:7d:07:dc:41:dc:
a6:ee:85:dd:30:b7:e0:58:88:e3:56:bf:db:7c:0a:
7d:9f:9c:56:21:ea:3d:e9:b7:b3:97:3c:fb:30:19:
76:b2:7c:60:55:5d:04:55:d0:4a:29:77:15:3e:40:
c5:ba:26:73:e9:e2:f0:59:7a:e6:5c:f5:97:27:98:
98:34:71:cf:48:30:11:98:4c:13:07:30:01:61:0d:
75:05:ea:ff:89:4d:f7:85:dc:1c:db:57:89:37:66:
04:5e:93:d5:f7:de:d6:d9:91:d7:74:61:d3:af:19:
b3:86:ca:d2:58:aa:05:9d:9e:ca:49:ef:3d:1e:5c:
28:cb:5e:fc:c6:43:f9:e3:bc:78:28:e6:bb:71:9f:
87:ef:d7:4d:ec:39:0c:40:ce:e6:ad:97:22:38:ec:
34:23:c7:89:7e:73:2f:f4:79:c1:96:fc:41:7f:9d:
23:0e:36:41:b6:6d:c5:54:10:29:be:82:3e:07:c9:
75:70:d8:f5:a6:4f:bd:8a:98:6d:78:8f:7f:39:1a:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:FA:63:B2:D3:5B:02:2F:26:0F:EC:57:BC:71:F0:0C:9C:ED:7F
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/cpP6Y7LTWwIvJg_sV7xx8Ayc7X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.30.0/23
Signature Algorithm: sha256WithRSAEncryption
40:6c:42:c5:30:12:f6:5b:b6:22:24:01:1c:f4:7b:2c:65:24:
47:b1:82:ac:f2:ab:4e:96:44:2c:6a:fa:2e:1d:15:9b:9a:1f:
94:43:85:f9:ba:42:79:08:6d:af:5c:b1:a4:8d:9e:4b:66:53:
b2:5f:7a:3d:60:06:09:09:58:99:d6:ce:4b:9d:c8:cb:e3:a0:
b7:2b:c7:e2:43:d1:04:86:44:0e:ac:7d:e4:ac:b5:83:7c:88:
a2:92:6b:2a:a3:9e:ad:61:72:51:a2:ad:ac:06:83:3a:ba:46:
b4:16:e1:74:bf:d1:c6:aa:2f:a5:0d:a5:8b:eb:92:92:57:55:
9f:80:92:35:96:01:0c:b6:ca:e1:19:50:15:ad:bd:8a:a8:2b:
0b:36:2a:39:87:f3:03:9e:76:90:d2:26:e2:77:6a:63:f4:91:
2e:a0:15:ba:78:23:23:4a:6f:8f:0a:49:97:80:57:18:14:46:
b3:c1:06:c8:d9:20:48:5b:8c:ac:39:f9:9b:5f:19:d8:28:c9:
34:91:47:82:8a:b7:a4:f7:0a:5d:53:72:0f:60:b6:65:ef:5c:
ed:26:cb:a9:a7:71:5f:97:37:0b:9e:95:59:2a:12:46:8c:ef:
3c:3e:ae:69:0c:86:0d:31:1d:29:53:28:5b:b3:b6:82:97:c6:
3f:b1:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:18 2025 by rpki-client