Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7VEzRAIwi4kTmzLxkboA7Bc6Bk.roa
File: 1-7VEzRAIwi4kTmzLxkboA7Bc6Bk.roa (raw, json)
Hash identifier: uX7x9L8+I487hOEs6Eu8irwjuQKrqBCxzYIq/DQPs+4=
Subject key identifier: FB:B5:44:CD:10:08:C2:2E:24:4E:6C:CB:C6:46:E8:03:B0:5C:E8:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01890183BB98CCC6431467579F3E5846942B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7VEzRAIwi4kTmzLxkboA7Bc6Bk.roa
Signing time: Wed 28 Jun 2023 10:19:17 +0000
ROA not before: Wed 28 Jun 2023 10:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.41.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:83:bb:98:cc:c6:43:14:67:57:9f:3e:58:46:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 28 10:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbb544cd1008c22e244e6ccbc646e803b05ce819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:92:7c:35:85:d4:ec:d4:a9:c5:fa:a4:12:
48:45:f9:82:2b:48:06:dc:4d:02:74:78:76:b5:3e:
85:7c:58:d1:fb:9b:0b:67:7a:ac:fa:61:9c:a2:05:
d0:d0:66:21:7c:77:b8:70:82:2d:ae:7c:16:73:70:
c7:6a:53:83:7d:4b:14:ed:4f:a2:35:5f:9a:7e:c3:
b5:77:bd:12:e7:22:00:8c:94:b2:ec:54:ab:8e:96:
c5:c2:84:72:70:51:86:de:d6:ea:d8:91:f6:f1:e8:
ea:4e:54:ea:53:97:37:d4:54:8f:92:29:7e:23:19:
34:6f:d2:d9:cb:e0:90:02:74:9d:a1:fc:1f:b3:9a:
64:58:64:91:34:ce:8e:d7:f3:07:25:44:dc:eb:a5:
86:68:87:4a:3e:2b:89:6f:ca:59:e7:e3:45:f3:31:
09:84:ce:98:85:61:00:bd:cc:33:cb:5a:5b:0b:c3:
2f:98:0b:6b:dd:6f:49:b2:27:3a:7d:19:86:8d:68:
0d:59:29:d9:cd:e1:c5:c1:10:60:c6:03:b9:10:cd:
6b:92:06:ee:81:95:c3:55:97:86:41:d0:c3:cb:12:
32:7c:6b:aa:26:24:72:b9:96:71:9a:8c:8e:e7:96:
0e:77:d1:f3:05:2e:1e:e4:44:78:6c:86:0e:c3:e2:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:44:CD:10:08:C2:2E:24:4E:6C:CB:C6:46:E8:03:B0:5C:E8:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-7VEzRAIwi4kTmzLxkboA7Bc6Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.69.0/24
Signature Algorithm: sha256WithRSAEncryption
60:de:f9:c8:c1:d7:43:a3:b5:a2:46:96:6b:d2:af:09:f8:ec:
f5:ba:eb:89:26:e7:b4:ad:9f:cf:e4:c4:26:54:ce:d4:8d:62:
5a:25:ff:4a:88:37:aa:b9:88:14:77:5a:e1:c0:99:55:ea:d0:
dd:2b:53:e3:e8:db:3a:44:39:39:3e:3f:5f:da:9d:7a:1b:c9:
da:c3:c6:e1:7c:41:7b:15:23:7b:67:05:40:40:33:82:e2:9b:
49:bf:71:7d:d6:af:50:b5:11:63:3f:c1:fe:c8:45:84:5b:76:
23:a7:4c:d5:3a:f0:94:e3:ea:88:cc:e1:c7:10:8c:31:53:0f:
85:f6:5e:d5:ce:f9:aa:14:ab:74:03:d7:fc:e6:29:95:49:21:
e7:6d:7b:c4:66:92:68:23:ca:5e:86:68:29:66:5a:db:9f:db:
1b:b8:b9:88:e3:e5:7f:67:e5:2b:fb:0f:e7:10:fc:3e:ed:d9:
e8:6a:7a:a6:3d:60:7b:b7:1f:b2:22:bc:10:9d:4f:d0:19:bb:
4d:11:29:e9:43:67:ac:87:fe:ba:94:68:8a:d0:67:f1:5b:cd:
f7:0c:dc:be:7f:b9:12:97:35:6e:e7:21:43:68:c9:87:7d:5a:
f3:60:cd:fb:f5:9b:b5:02:13:50:31:d8:74:7a:98:b8:73:73:
b3:fc:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:54:18 2025 by rpki-client