Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bo9s4Us7QSWdK3CeLfCr4cAztFY.roa
File: Bo9s4Us7QSWdK3CeLfCr4cAztFY.roa (raw, json)
Hash identifier: LpRiilI5JiAWEshmYV8JTqhp33dDlcL9xK4K/SNid58=
Subject key identifier: 06:8F:6C:E1:4B:3B:41:25:9D:2B:70:9E:2D:F0:AB:E1:C0:33:B4:56
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01883F60A8D6F66437A9BD2E8DD643A171CB
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bo9s4Us7QSWdK3CeLfCr4cAztFY.roa
Signing time: Sun 21 May 2023 17:34:39 +0000
ROA not before: Sun 21 May 2023 17:34:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198926
IP address blocks: 185.243.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:60:a8:d6:f6:64:37:a9:bd:2e:8d:d6:43:a1:71:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 21 17:34:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=068f6ce14b3b41259d2b709e2df0abe1c033b456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:b0:92:80:68:72:21:36:5e:bd:20:bd:23:
a0:77:ea:b7:f9:a0:42:30:23:e0:d5:6c:26:bf:dd:
2c:b2:bb:30:24:d7:cf:fb:d9:cc:d4:f0:78:80:08:
8d:4a:82:15:48:20:f3:8a:5f:de:71:df:cf:6f:b5:
7a:20:32:29:da:ef:c5:4f:e4:9c:af:3f:ee:c4:e9:
16:49:d9:a9:63:2c:ea:de:4c:37:73:f7:47:ab:e4:
ba:36:62:a0:74:31:18:5c:ee:13:20:eb:16:44:b4:
bd:fc:ee:29:07:5e:1d:e2:57:a3:65:a1:06:8d:29:
14:1f:5b:e8:3c:c2:8a:77:6c:af:91:77:d4:1c:fb:
e1:2b:c0:41:00:0e:eb:29:cf:97:26:80:dd:c7:51:
a3:3e:64:b4:d8:db:8a:f7:58:26:b5:b3:3f:eb:f5:
cb:c7:ff:77:1f:9f:da:2b:ff:70:15:01:82:f3:24:
79:2d:57:08:1b:bf:aa:88:20:77:a3:5d:ce:e6:74:
93:cd:a6:80:a6:71:68:f6:69:c8:df:16:b8:c0:0b:
c7:39:88:15:8f:2d:d1:4c:15:01:61:1c:97:5c:cc:
e6:f5:e4:b0:53:3d:90:2b:cb:23:32:9a:25:36:22:
46:40:94:d7:ef:51:3e:38:45:d9:ae:f1:70:85:e6:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:6C:E1:4B:3B:41:25:9D:2B:70:9E:2D:F0:AB:E1:C0:33:B4:56
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bo9s4Us7QSWdK3CeLfCr4cAztFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.48.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:8e:31:10:1e:eb:ce:d2:0d:0c:74:83:e8:a2:0b:d6:9a:
76:e3:84:8b:23:7c:ef:54:aa:1b:9c:72:d2:5b:9c:8b:72:5f:
79:48:00:2a:2f:6d:3b:f2:2f:45:a9:c4:62:fe:5d:54:ab:20:
d1:f4:e7:34:16:36:af:4c:89:4a:33:29:23:d3:52:d1:ea:fc:
ee:0e:6b:b2:8b:32:9b:45:0a:30:03:17:b8:f8:d6:36:d4:4f:
c6:9a:4e:58:da:cf:ff:53:d5:2a:be:c7:4d:88:e3:75:40:57:
1a:a7:4d:1d:00:8d:64:3f:a3:60:4e:11:f6:3a:f6:6b:57:61:
b7:d9:88:d7:2e:f0:13:ab:f9:12:3e:fc:c1:3e:a4:3a:46:4c:
27:98:4d:bb:e0:2b:51:23:10:fc:aa:ba:ee:0e:91:35:19:3d:
cc:2b:f6:6b:b7:a5:11:bd:a4:33:18:9a:98:34:b7:97:a4:a1:
56:68:67:59:52:08:37:20:05:4f:74:90:43:e8:0d:f4:4c:d9:
d7:51:2a:8b:d3:80:75:93:6f:bd:74:88:92:74:51:38:9b:c8:
2b:1c:9e:4b:e6:36:d7:77:86:ba:54:13:7a:fa:f3:1f:e1:ec:
38:60:fb:83:85:93:ea:a5:5e:a1:5d:f5:e3:46:f6:c6:36:e8:
5d:ca:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:37:30 2025 by rpki-client