Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8uD3VDNn6xtwn-Vcz6kgXl6iFHo.roa
File: 8uD3VDNn6xtwn-Vcz6kgXl6iFHo.roa (raw, json)
Hash identifier: YZDLY9V4thIb+vfTboNkv5LkD95SaTsXwY0X09jsVpk=
Subject key identifier: F2:E0:F7:54:33:67:EB:1B:70:9F:E5:5C:CF:A9:20:5E:5E:A2:14:7A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD0A627F4448C01D81EDDA37DF818
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8uD3VDNn6xtwn-Vcz6kgXl6iFHo.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.235.44.0/24 maxlen: 24
193.235.45.0/24 maxlen: 24
193.183.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d0:a6:27:f4:44:8c:01:d8:1e:dd:a3:7d:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e0f7543367eb1b709fe55ccfa9205e5ea2147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:a8:74:1d:b0:7e:9f:8d:21:a4:a3:ef:2b:
28:b8:21:4b:12:c8:cc:c0:67:7f:72:59:13:a1:93:
8c:05:b2:97:7e:59:1c:fd:95:57:ff:52:c9:84:14:
98:94:66:66:a2:8b:3d:f5:f7:80:65:83:ad:88:73:
8e:0a:ea:c0:48:81:72:64:19:e4:a0:d8:86:4c:30:
dd:f0:24:ae:da:57:be:8e:ac:c8:19:2c:f2:15:b4:
fc:f3:d9:c4:21:19:75:86:43:81:37:ac:7a:6f:94:
99:54:51:4a:71:da:43:a3:45:2b:9e:01:d5:11:c6:
fd:ee:c5:96:22:66:8a:a0:33:ed:c7:35:3a:cf:6a:
0f:08:b4:b2:3e:a2:be:16:93:a0:14:7b:91:92:dd:
60:79:df:25:2c:16:64:86:2b:93:75:f8:f5:40:61:
b3:39:a2:fb:95:cc:07:cc:46:2b:bb:cf:43:6a:e2:
24:b8:94:6d:6e:ca:27:06:a6:02:bb:77:95:87:3c:
40:58:3c:e3:0d:d1:e8:eb:69:9e:b8:af:e3:41:8c:
50:b7:88:59:61:78:66:77:5e:0d:6a:38:3e:65:33:
44:0d:2d:98:a0:c0:7f:4e:5f:02:87:84:f2:dd:6b:
bb:e2:12:2c:3e:8a:9e:45:5d:4d:dc:4b:83:ee:14:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:F7:54:33:67:EB:1B:70:9F:E5:5C:CF:A9:20:5E:5E:A2:14:7A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8uD3VDNn6xtwn-Vcz6kgXl6iFHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.185.0/24
193.235.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:43:ca:ef:fe:fd:40:6b:c0:29:ae:f5:a0:d9:12:57:d3:94:
93:f4:c0:2d:2d:87:89:1f:78:1d:af:67:e2:db:4b:4c:40:fa:
61:ff:9b:4d:34:85:00:d0:eb:a1:e2:39:4b:27:b7:32:d4:4c:
17:a1:4f:92:00:46:3d:a5:c0:a0:48:70:7a:02:80:d3:fc:44:
ed:9a:5a:63:91:e1:b3:62:a2:20:5a:67:b2:13:50:99:e3:08:
f5:a8:b7:6d:82:74:8c:d1:1b:84:8a:af:e7:5c:01:f1:a0:af:
3f:d7:76:c0:ed:45:53:01:f9:f8:fd:15:4a:18:1e:83:de:ab:
ba:7e:5f:32:62:ac:ae:12:19:1e:71:55:82:72:00:54:fc:67:
cf:2b:47:ad:f1:a7:a5:80:7b:fc:53:3d:94:73:42:6d:95:5d:
68:5e:54:6b:d3:9d:f5:77:4a:32:43:35:9d:e7:64:a0:35:04:
7d:0b:f2:5f:a2:70:66:d8:8c:8b:ee:4f:b8:88:06:49:28:ce:
b4:ca:41:9b:64:ce:ce:85:a0:40:75:4e:42:33:35:6a:31:b3:
01:97:7a:0f:58:5f:c8:c9:a8:64:43:99:cb:5e:5a:d5:59:12:
39:c3:91:41:10:7c:17:55:81:88:0e:10:eb:6f:bd:41:3e:3f:
78:e5:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:42:52 2025 by rpki-client