Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/k0KwvFqvAjhVH2rbJFHUfhLUDMY.roa
File: k0KwvFqvAjhVH2rbJFHUfhLUDMY.roa (raw, json)
Hash identifier: Vo9DgpUHxZWw6i2m50FUte2LANwbk1sIR5h9vQ5L8yc=
Subject key identifier: 93:42:B0:BC:5A:AF:02:38:55:1F:6A:DB:24:51:D4:7E:12:D4:0C:C6
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01888649527E2D6871F1CBDA825BEB97BB73
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/k0KwvFqvAjhVH2rbJFHUfhLUDMY.roa
Signing time: Sun 04 Jun 2023 12:02:12 +0000
ROA not before: Sun 04 Jun 2023 12:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201575
IP address blocks: 193.228.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:49:52:7e:2d:68:71:f1:cb:da:82:5b:eb:97:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jun 4 12:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9342b0bc5aaf0238551f6adb2451d47e12d40cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:d4:ec:3d:32:b0:3b:e4:d4:10:0b:ba:6a:
6d:4f:81:43:60:92:7d:d8:ce:80:5b:4a:be:11:d7:
45:61:b9:c7:1e:f8:1c:6b:1c:21:95:32:25:0c:fa:
40:97:5c:16:eb:1d:93:40:19:ce:33:8f:74:1b:dc:
e2:51:f5:fb:eb:99:87:da:05:87:c2:70:cd:f1:4e:
ef:8d:a1:90:9f:f5:da:93:ab:03:b1:8c:e2:c9:0e:
29:50:81:bd:f7:3a:34:28:ce:3d:4f:03:a3:8f:de:
54:fe:2d:b2:bb:5e:a6:27:d6:80:9a:1f:dd:0d:fb:
e6:88:3e:02:d4:3e:97:6f:62:99:29:8b:e4:3a:0f:
b2:f9:61:ed:ec:25:c1:41:81:81:5a:44:5d:82:c3:
c5:7c:be:ac:c0:06:42:59:f3:f9:d1:4d:ea:e3:21:
9c:61:5d:11:56:55:d2:15:80:8f:d9:82:d7:20:5c:
20:ac:13:3b:e0:03:06:27:57:9f:d3:3f:9c:01:79:
cf:06:d4:2c:6b:4e:9b:6d:db:bf:03:c8:b1:7a:2b:
a7:d9:f5:2a:f0:5e:a7:e9:88:1d:74:c9:2f:9b:9d:
6b:a2:ea:32:84:d4:13:3d:37:9a:39:2e:21:b8:41:
c2:7f:c6:f2:08:56:fc:d8:d2:06:23:83:a9:66:df:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:B0:BC:5A:AF:02:38:55:1F:6A:DB:24:51:D4:7E:12:D4:0C:C6
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/k0KwvFqvAjhVH2rbJFHUfhLUDMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
93:57:a6:16:66:3b:0e:4c:c5:94:85:e9:5e:d0:0d:ee:b4:a8:
d6:6b:42:3e:7f:70:80:71:40:1e:05:54:c3:27:03:d4:f0:87:
64:a3:e8:4d:29:dc:40:17:07:fc:79:c7:9b:7b:b0:fe:17:30:
25:8b:6f:ea:0c:97:d8:30:09:ba:35:7d:af:92:f7:28:be:c1:
fd:f7:d9:f0:ca:a1:13:37:8e:cf:5b:c8:94:f4:a5:00:e7:9c:
88:a2:da:d3:23:a5:cf:00:75:f6:1f:f3:da:62:05:64:82:5e:
9c:ab:2b:f5:f8:d5:7b:80:0e:91:c7:75:02:9d:46:35:13:bf:
ec:ee:72:34:77:65:4a:90:42:4d:ce:25:69:19:f9:ab:73:1e:
ec:12:89:70:72:70:21:f9:34:1b:f9:0d:ed:ef:54:f8:76:6e:
9d:da:83:1a:a7:f1:08:11:c1:9c:7b:0d:f8:9f:59:c3:e7:65:
26:27:d3:21:36:de:e7:b0:a0:27:1e:92:aa:a0:fd:b5:6e:a4:
5f:74:e1:08:2a:0d:26:53:42:e7:e3:8d:05:ca:62:33:97:05:
d0:ef:0c:09:53:f7:fd:81:10:0a:bb:00:54:b4:6f:57:16:0b:
8a:1c:48:37:68:7d:ea:0d:f8:e6:56:aa:ef:72:ed:fb:7b:1c:
09:5e:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:16:38 2025 by rpki-client