Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IOvlNUfZO74SGcjn_VKCLn7bV6U.roa
File: IOvlNUfZO74SGcjn_VKCLn7bV6U.roa (raw, json)
Hash identifier: VAkzrVftX0BBbw8h2kD+V75jj70NWK37IkVQgArV200=
Subject key identifier: 20:EB:E5:35:47:D9:3B:BE:12:19:C8:E7:FD:52:82:2E:7E:DB:57:A5
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018A83334F402F112A376BFCEC41617C7DE0
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IOvlNUfZO74SGcjn_VKCLn7bV6U.roa
Signing time: Mon 11 Sep 2023 07:44:52 +0000
ROA not before: Mon 11 Sep 2023 07:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 193.42.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:33:4f:40:2f:11:2a:37:6b:fc:ec:41:61:7c:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Sep 11 07:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ebe53547d93bbe1219c8e7fd52822e7edb57a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:e2:5d:a3:3e:32:03:8c:14:bc:38:d4:be:
7f:f3:18:1f:8e:4a:cc:0d:05:94:7d:a1:10:d3:b5:
4e:37:e1:d9:38:45:b9:3b:53:8f:02:16:51:33:6c:
44:9e:d1:3c:a3:8a:f5:6a:cf:67:3f:0e:7e:3c:2b:
8f:f0:eb:00:e5:de:dd:a7:a5:4a:6c:60:c8:d2:23:
39:7a:fb:df:5d:63:75:37:35:d5:99:36:7d:d3:bf:
7f:13:4e:a3:59:17:88:99:b2:70:aa:64:08:96:16:
4c:e9:b6:45:df:3e:25:1d:6e:9e:74:52:df:da:70:
ec:90:5b:22:ea:f7:bb:14:fd:59:46:72:f5:5c:f8:
cc:5e:d7:78:a2:c7:7d:c1:4e:fa:c1:49:44:6d:64:
55:b4:ad:db:19:17:ae:fd:c9:27:a9:d2:89:d1:07:
bd:ee:e6:53:7c:da:94:5d:52:90:6e:dc:08:d0:ec:
84:fd:e6:00:02:ba:93:d6:55:67:51:e2:57:8e:19:
ee:52:1c:a3:e0:89:5c:af:64:70:e7:47:76:79:0c:
cd:96:5f:96:c4:64:05:87:14:ec:81:34:99:a4:40:
27:01:0e:d0:af:5d:5d:17:82:c3:4b:91:ca:16:85:
c7:95:04:79:5d:81:66:34:f4:17:a2:22:d4:48:7f:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:E5:35:47:D9:3B:BE:12:19:C8:E7:FD:52:82:2E:7E:DB:57:A5
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IOvlNUfZO74SGcjn_VKCLn7bV6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f7:5f:81:2e:2f:f5:84:15:f6:d4:4d:55:c3:c4:b7:c0:64:
85:18:fb:0a:7a:1f:ad:87:20:f5:e6:31:bb:ba:42:11:79:57:
e3:36:1e:4d:20:b5:63:75:65:99:03:a2:48:0a:a8:a2:69:8a:
84:ca:47:27:4c:a5:5f:71:41:77:8e:76:ff:b5:6f:a4:6d:22:
e1:45:88:de:1d:23:20:77:f1:28:95:59:f0:f0:82:f0:58:3e:
29:67:f4:b3:93:e6:1b:48:88:53:da:65:14:89:9a:33:57:35:
96:18:7b:64:ca:be:f0:14:77:17:55:ea:fc:b8:07:17:ea:53:
86:2b:ae:7e:f1:b5:00:8b:a4:4a:ab:29:b7:1d:5e:fd:02:b3:
6b:67:3d:a7:45:8b:b4:00:8a:8c:b8:f8:3d:8d:c0:ae:aa:3d:
74:0b:eb:1e:40:26:76:50:2a:ef:e0:87:d6:d7:7f:31:32:7e:
1a:54:f6:8d:b9:fb:bb:45:e5:74:7e:8e:c1:56:25:28:8a:ac:
a9:1c:6f:48:5a:d0:60:9b:2b:15:7f:08:bf:a0:da:2a:7d:be:
cf:f9:18:04:0f:a3:d2:03:1a:5d:2e:ed:97:e5:f7:cb:78:a4:
e2:5a:e6:c5:55:8d:74:9f:0d:c8:10:38:88:fb:ee:66:2f:cd:
bc:59:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:41 2025 by rpki-client