Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/iz86F9poaD6Mt3q2PdAC83m2QZ8.roa
File: iz86F9poaD6Mt3q2PdAC83m2QZ8.roa (raw, json)
Hash identifier: x5cE7sf2FDGzgJ/0rtNvR3FOVjuVGBOtr0GkwwOIq2g=
Subject key identifier: 8B:3F:3A:17:DA:68:68:3E:8C:B7:7A:B6:3D:D0:02:F3:79:B6:41:9F
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01D76D
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/iz86F9poaD6Mt3q2PdAC83m2QZ8.roa
Signing time: Fri 11 Mar 2022 14:01:08 +0000
ROA not before: Fri 11 Mar 2022 14:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20983
IP address blocks: 193.109.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120685 (0x1d76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Mar 11 14:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b3f3a17da68683e8cb77ab63dd002f379b6419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:2e:94:1b:8b:ab:11:5f:63:9c:d7:79:84:
f5:5f:48:85:67:75:e5:2e:50:46:18:3b:30:6d:4b:
95:cc:49:17:13:a8:18:8b:d5:fc:c0:2a:cc:0f:9c:
76:d8:dd:89:2a:f0:23:bd:f6:c0:08:a6:d9:0e:1d:
da:3d:bf:a1:e3:c2:c1:6f:45:fd:84:22:29:e6:14:
55:87:80:71:f0:e6:90:88:75:5e:4e:0b:ad:92:50:
c4:79:81:e6:30:f0:e0:1e:11:31:b1:c7:b3:15:17:
0a:0c:d2:7d:ff:9f:a9:bf:31:46:d3:b4:71:70:1d:
30:15:39:25:6e:19:06:33:21:cc:4d:c4:d3:77:50:
a1:c6:9d:e5:10:82:fc:ec:f7:a7:e2:57:8e:b4:bc:
bd:d0:b5:28:30:66:4a:06:43:5a:ef:ef:3f:3c:19:
62:4b:18:e1:fd:da:33:df:f7:bb:42:42:3d:03:f3:
7a:94:c1:85:a7:70:b9:c8:f2:d4:b9:b5:e3:93:5a:
5c:31:bf:b4:30:e3:18:15:c5:cd:14:b2:7b:ed:97:
84:e4:e7:ba:0c:15:bf:dd:5f:7f:99:c2:43:63:a4:
60:cc:e7:d6:ce:a8:5c:43:56:ec:27:76:9f:54:e1:
85:61:9f:3d:88:01:e8:49:02:33:03:fd:16:77:37:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:3A:17:DA:68:68:3E:8C:B7:7A:B6:3D:D0:02:F3:79:B6:41:9F
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/iz86F9poaD6Mt3q2PdAC83m2QZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.244.0/23
Signature Algorithm: sha256WithRSAEncryption
23:9e:57:d4:e3:28:50:dd:45:c1:64:b0:85:6a:86:89:f4:87:
2c:2f:fc:26:9f:3e:7c:51:d8:1b:be:06:29:cb:e3:ea:b6:ca:
4d:22:75:92:ed:cf:f1:f5:9b:c6:03:fa:49:5d:4d:b8:15:30:
5e:83:cb:61:2f:de:1c:60:64:c1:e8:bc:d1:d2:a2:b3:06:39:
eb:b9:50:41:b5:6e:1e:40:da:97:df:61:90:af:15:54:f9:bb:
7d:31:6b:10:f0:be:4a:b7:84:7a:7c:46:0a:0d:d5:e1:f5:c7:
aa:67:89:e9:6e:3c:82:25:5e:f3:af:a9:b7:53:50:db:f4:5c:
61:c7:55:24:1f:88:a1:1f:90:77:d6:f7:f8:ac:af:e7:91:20:
34:4c:2b:95:b5:60:94:81:b3:2c:64:d4:05:f4:f3:ed:d0:c2:
c8:a5:54:5b:8d:a2:d1:e1:6f:50:31:69:07:1a:2e:6d:00:0f:
7b:e2:e6:47:2c:9c:6d:19:e5:6a:84:a7:9b:55:6b:a6:06:53:
6a:7e:77:5e:e7:33:70:d6:dd:9b:3a:70:06:1e:99:11:ff:3b:
23:83:85:52:eb:8c:41:6c:a4:56:15:18:97:37:6e:18:88:7f:
78:b0:41:d5:30:47:01:c6:ae:2e:e7:ba:60:a4:ba:df:6e:61:
6a:3e:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:23 2025 by rpki-client