Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/br0ttyZ5WwjPjMOvErgscrdrcGo.roa
File: br0ttyZ5WwjPjMOvErgscrdrcGo.roa (raw, json)
Hash identifier: DZSWLCQzuVmaheHT90yrLZc+RrkHGQ2b8SKwZUID9Qc=
Subject key identifier: 6E:BD:2D:B7:26:79:5B:08:CF:8C:C3:AF:12:B8:2C:72:B7:6B:70:6A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018432508E5ED8A2F976239A0954A7BEE60F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/br0ttyZ5WwjPjMOvErgscrdrcGo.roa
Signing time: Tue 01 Nov 2022 08:30:50 +0000
ROA not before: Tue 01 Nov 2022 08:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.235.45.0/24 maxlen: 24
193.183.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:50:8e:5e:d8:a2:f9:76:23:9a:09:54:a7:be:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 1 08:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ebd2db726795b08cf8cc3af12b82c72b76b706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:df:c7:b2:0b:06:ee:54:a5:8a:a0:f6:f0:
3e:74:b0:6a:9b:62:0d:1f:77:29:fd:71:5e:f9:2d:
77:2e:96:26:36:1e:22:5e:49:21:f0:87:4a:58:31:
be:67:9d:52:35:c8:df:e4:30:31:a1:c1:33:74:d1:
59:df:83:9f:68:57:79:d2:87:9f:60:54:ce:de:4f:
46:31:61:f0:dd:cf:0a:7f:f0:5f:4b:4a:b2:8d:b1:
f0:e6:24:7e:cc:e1:63:95:a6:5c:75:e8:a5:8a:89:
68:46:5a:1f:d4:99:27:5b:59:15:9d:de:f8:52:fb:
07:6c:40:7f:e3:c0:56:33:88:b8:dc:13:39:86:0d:
25:72:8e:7e:dd:4c:ba:08:b7:12:0f:24:fb:15:4c:
2b:67:ca:b4:77:bb:58:3c:dc:71:0d:01:8d:51:7d:
f9:b5:64:5b:2b:27:db:f1:41:eb:54:cd:b9:18:6b:
48:7a:16:91:e4:bd:ac:c1:55:a4:98:e8:ec:0d:93:
29:6d:c8:82:48:cc:b3:0d:e8:02:39:b9:33:e0:d6:
38:39:bd:e4:e3:e9:07:54:30:2d:af:2a:4d:d4:74:
3c:38:7e:76:c7:f5:3c:9a:08:d6:41:46:ec:17:27:
e7:ab:49:f5:b1:8e:5e:6f:9c:4c:9b:94:47:5c:7c:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:2D:B7:26:79:5B:08:CF:8C:C3:AF:12:B8:2C:72:B7:6B:70:6A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/br0ttyZ5WwjPjMOvErgscrdrcGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.185.0/24
193.235.45.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:28:e8:dd:89:98:a2:26:b0:88:c2:b2:07:96:89:73:07:
b6:63:23:25:04:fe:d9:48:38:e2:05:67:2d:d0:68:b8:bb:26:
8f:91:c2:5f:44:fa:0e:a2:66:f8:74:58:f5:3f:37:6b:51:1f:
d4:34:58:8f:02:aa:c4:a1:c8:33:d8:a3:a0:b0:4b:99:21:08:
e9:7c:1a:20:50:51:54:f9:69:eb:56:27:a4:74:36:7a:3a:e3:
d1:11:ef:55:67:09:f6:05:56:56:78:d4:d4:f6:59:f1:c3:c8:
f6:22:ee:a7:4d:cd:2b:fc:2c:92:85:96:9d:d0:ef:b5:3e:bd:
93:ae:d8:22:89:b7:73:c8:58:ce:c9:d6:7f:7c:e6:23:20:4a:
bd:8c:1d:98:e2:f7:88:b4:e4:85:f2:a3:b0:22:35:a7:a5:f8:
cb:e1:4f:cf:0e:78:ad:1d:01:4d:b9:74:d5:ac:4d:b3:97:27:
7f:3c:0a:40:10:b2:51:77:db:5c:81:1e:d9:79:b2:7f:16:29:
cd:da:db:9d:f9:1e:70:ee:6e:55:0a:4f:df:b1:dd:57:cc:9a:
ae:fb:36:42:04:55:3a:6e:74:35:c3:77:99:26:8c:4e:1b:c5:
87:40:10:84:9e:13:d2:72:de:97:60:55:fb:53:f3:94:38:1b:
42:b2:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:37:39 2025 by rpki-client