Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fT155_yNDZtfqKuOyHlS3BTecB0.roa
File: fT155_yNDZtfqKuOyHlS3BTecB0.roa (raw, json)
Hash identifier: C8eOBbt6BBThQsWVuXXjlQol3CLmoDiYWk7ed35DDQ8=
Subject key identifier: 7D:3D:79:E7:FC:8D:0D:9B:5F:A8:AB:8E:C8:79:52:DC:14:DE:70:1D
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0188ED952BFFC0649AAFFC9AC4E648B95BE0
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fT155_yNDZtfqKuOyHlS3BTecB0.roa
Signing time: Sat 24 Jun 2023 13:25:56 +0000
ROA not before: Sat 24 Jun 2023 13:25:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198767
IP address blocks: 217.113.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:95:2b:ff:c0:64:9a:af:fc:9a:c4:e6:48:b9:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 24 13:25:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3d79e7fc8d0d9b5fa8ab8ec87952dc14de701d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:59:11:e0:b4:a5:e8:85:bf:87:1e:43:15:
b9:af:a6:b0:ba:7f:67:97:a2:08:b6:23:6d:a1:fc:
37:2f:a0:d5:40:ed:98:e8:59:9d:f4:df:2f:8e:18:
db:e6:63:83:ab:6d:b7:55:b1:eb:8f:67:70:f4:5f:
73:d2:ca:83:2c:70:72:29:f8:55:ac:c6:16:3d:df:
5b:9b:33:b8:e5:75:dc:d8:9d:5e:be:9b:54:50:82:
18:63:4a:05:0d:a3:3b:bb:d0:30:2f:8d:79:c6:54:
8d:7a:0e:73:04:f2:43:fa:42:5d:71:3d:ca:04:17:
a6:cf:c0:e5:3a:1f:3b:f2:e7:80:09:c4:17:23:d6:
86:82:92:25:3f:9e:bf:ea:f8:d5:60:2d:55:36:96:
f7:43:61:3a:76:04:5b:ed:91:d0:0a:6a:55:94:97:
62:52:e4:fa:02:6a:54:da:91:55:74:1f:fd:a8:da:
09:07:46:aa:9d:ab:7c:a7:8b:b5:81:4e:b5:95:b8:
5d:36:0e:dd:a8:1d:bd:c3:e4:37:56:05:0c:ee:24:
5a:bd:0c:0c:6a:eb:9f:4f:c5:e8:1a:06:6e:cc:52:
80:39:68:84:52:72:ba:87:0e:9f:51:23:28:62:9b:
d6:b6:89:80:ac:46:80:62:b2:73:7b:0e:fe:8a:04:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:79:E7:FC:8D:0D:9B:5F:A8:AB:8E:C8:79:52:DC:14:DE:70:1D
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fT155_yNDZtfqKuOyHlS3BTecB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:b7:26:da:98:7e:77:29:1a:d9:a0:00:01:9c:b8:09:2b:85:
9c:b2:14:f9:59:84:bd:1c:36:50:f9:e3:40:b0:1e:69:91:50:
21:09:3e:34:78:0c:9b:87:70:21:a7:96:d1:cc:50:be:b2:2b:
6c:fc:ae:e9:c3:14:c3:86:c6:71:0e:8c:6c:c0:4c:01:6b:3f:
25:84:e5:30:4e:40:4a:a6:d4:c5:c2:dc:81:4c:58:74:e2:6e:
60:8e:e0:7c:97:cc:22:05:ab:38:40:04:ee:5c:49:8d:4b:1a:
47:7f:e5:6f:7c:f9:e5:f0:e1:fc:f9:d0:a7:37:02:ad:72:ed:
40:b4:31:54:50:67:c2:15:ab:3b:ad:29:44:27:aa:12:a8:93:
b1:b9:13:ba:97:ff:ad:50:95:22:d7:fe:87:54:3c:61:fb:00:
6a:8d:56:73:f1:33:c6:cb:6a:3d:8a:2c:d9:3e:0a:83:72:8f:
48:28:1d:31:2f:30:7f:9c:2a:f0:dd:33:dd:c1:4d:f8:0c:b8:
c7:38:17:72:94:08:7f:97:b8:83:75:23:83:06:d9:b9:ec:9a:
6e:4e:64:cb:d5:70:a6:92:8d:4a:27:9c:67:6c:33:e6:0b:08:
06:91:b8:a8:35:ea:16:db:ab:9d:d2:11:20:01:98:89:54:e8:
dc:23:5b:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjtlSv/wGSar/yaxOZIuVvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNjI0MTMyNTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDNkNzllN2ZjOGQwZDliNWZhOGFiOGVjODc5NTJkYzE0ZGU3MDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8FZEeC0peiFv4ceQxW5r6awun9n
l6IItiNtofw3L6DVQO2Y6Fmd9N8vjhjb5mODq223VbHrj2dw9F9z0sqDLHByKfhV
rMYWPd9bmzO45XXc2J1evptUUIIYY0oFDaM7u9AwL415xlSNeg5zBPJD+kJdcT3K
BBemz8DlOh878ueACcQXI9aGgpIlP56/6vjVYC1VNpb3Q2E6dgRb7ZHQCmpVlJdi
UuT6AmpU2pFVdB/9qNoJB0aqnat8p4u1gU61lbhdNg7dqB29w+Q3VgUM7iRavQwM
auufT8XoGgZuzFKAOWiEUnK6hw6fUSMoYpvWtomArEaAYrJzew7+igTzawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH09eef8jQ2bX6irjsh5UtwU3nAdMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvZlQxNTVfeU5EWnRmcUt1T3lIbFMzQlRlY0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEaMA0G
CSqGSIb3DQEBCwUAA4IBAQC3tybamH53KRrZoAABnLgJK4WcshT5WYS9HDZQ+eNA
sB5pkVAhCT40eAybh3Ahp5bRzFC+sits/K7pwxTDhsZxDoxswEwBaz8lhOUwTkBK
ptTFwtyBTFh04m5gjuB8l8wiBas4QATuXEmNSxpHf+VvfPnl8OH8+dCnNwKtcu1A
tDFUUGfCFas7rSlEJ6oSqJOxuRO6l/+tUJUi1/6HVDxh+wBqjVZz8TPGy2o9iizZ
PgqDco9IKB0xLzB/nCrw3TPdwU34DLjHOBdylAh/l7iDdSODBtm57JpuTmTL1XCm
ko1KJ5xnbDPmCwgGkbioNeoW26ud0hEgAZiJVOjcI1vl
-----END CERTIFICATE-----
Generated at Sun May 11 23:54:36 2025 by rpki-client