Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/s7vx19YvJo3PBoxUcdcGP5cFA88.roa
File: s7vx19YvJo3PBoxUcdcGP5cFA88.roa (raw, json)
Hash identifier: lbYC4J9Uyjk21T91EEbVk3F4UmZc2Es2gx+dOdeGC/o=
Subject key identifier: B3:BB:F1:D7:D6:2F:26:8D:CF:06:8C:54:71:D7:06:3F:97:05:03:CF
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0183DC570E4DC1076AC4B0CED3E0C0A39718
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/s7vx19YvJo3PBoxUcdcGP5cFA88.roa
Signing time: Sat 15 Oct 2022 15:50:36 +0000
ROA not before: Sat 15 Oct 2022 15:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205065
IP address blocks: 130.193.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dc:57:0e:4d:c1:07:6a:c4:b0:ce:d3:e0:c0:a3:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Oct 15 15:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3bbf1d7d62f268dcf068c5471d7063f970503cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:d2:63:78:22:1a:51:c3:61:8b:d9:5d:ca:
d3:61:97:d9:bd:8c:d1:bf:90:6f:7c:2b:94:66:6b:
9b:f9:a7:bc:a8:f7:58:05:4a:01:31:56:e3:71:ba:
c0:12:4c:f1:8d:c8:8d:14:ac:57:dc:9d:47:08:02:
8c:dc:4e:1f:ec:c6:a4:17:d4:2a:9f:49:b1:6e:9f:
10:0f:cf:4e:ad:c6:9d:5a:22:52:45:1d:d5:61:d9:
c9:2a:6a:96:3e:ca:43:c5:2a:b3:8a:94:c0:46:98:
94:7a:3d:61:d0:6b:d0:34:da:4a:e0:b1:6e:04:e5:
00:5b:6e:d2:8a:75:4c:e5:4c:21:d1:0e:f7:19:f6:
5d:60:20:32:43:19:16:7f:b5:d9:35:05:76:f7:82:
05:e1:89:65:e9:75:44:b3:4a:12:0d:6b:ad:86:96:
7f:cd:4a:5a:84:a7:2b:10:ff:2b:bc:af:85:72:f7:
f3:44:24:32:d8:0a:c4:08:18:25:3a:c7:ef:4c:0b:
d8:7d:02:f1:4a:7f:0e:d9:57:09:ca:b6:38:48:0f:
93:58:2f:13:02:1f:e6:9d:00:2d:5e:ac:76:fe:99:
1b:47:88:b9:40:34:4f:bf:2c:05:e3:c6:9b:12:cd:
03:f4:da:b4:ca:ad:54:0d:03:d4:ef:a8:be:6a:86:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:F1:D7:D6:2F:26:8D:CF:06:8C:54:71:D7:06:3F:97:05:03:CF
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/s7vx19YvJo3PBoxUcdcGP5cFA88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:df:c2:93:9d:ad:21:51:7d:28:b2:63:5e:de:5b:e8:44:
db:ef:36:ed:09:fb:d7:c2:8e:16:0e:1e:9e:25:b6:31:42:39:
62:da:82:f3:b5:47:7c:5a:45:a5:17:ee:f8:1c:0e:2e:8f:ef:
40:7e:0c:87:4e:b7:43:b9:9d:3e:ab:8e:be:f7:18:46:6a:a3:
4c:46:6e:25:d6:38:7a:b6:64:fc:72:95:72:64:90:00:b9:eb:
8f:89:41:65:c3:ac:df:2a:8e:1e:03:81:f5:ed:73:80:77:fa:
9d:4a:0d:50:e2:ae:ab:ee:eb:a2:b9:30:a9:df:cb:bd:c3:2c:
ef:e3:dd:e1:0c:b9:e6:5e:0e:32:c4:28:ad:82:e4:1d:19:88:
ab:33:a6:b7:0a:c5:e3:93:c5:5e:3b:7b:46:65:9f:df:b9:85:
17:21:5a:09:95:dd:0c:fb:6f:40:8d:78:84:b8:56:c7:f9:6c:
73:fe:fb:a4:7e:d8:a0:8a:8f:ed:bc:ac:15:dc:ea:3f:cc:05:
e5:1c:bb:b7:64:26:30:0e:6d:bd:ff:35:b8:c2:5c:c5:37:1c:
33:99:c6:97:04:b8:24:8e:76:e3:32:4e:91:b8:13:65:56:c9:
c2:35:0a:48:39:eb:01:06:c0:1e:20:4b:f3:33:96:8d:6d:8c:
56:41:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:24 2025 by rpki-client