Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/fJQ1Ksj6mi1ikMnHfkenmRCRcto.roa
File: fJQ1Ksj6mi1ikMnHfkenmRCRcto.roa (raw, json)
Hash identifier: CHP8gc0lMP0j9SkOwr3SghXl0tylEpyQARDWquJ1BYY=
Subject key identifier: 7C:94:35:2A:C8:FA:9A:2D:62:90:C9:C7:7E:47:A7:99:10:91:72:DA
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018A26FBA35161C1819B1C87F28ED7B1CC29
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/fJQ1Ksj6mi1ikMnHfkenmRCRcto.roa
Signing time: Thu 24 Aug 2023 09:59:00 +0000
ROA not before: Thu 24 Aug 2023 09:59:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209880
IP address blocks: 193.220.160.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:fb:a3:51:61:c1:81:9b:1c:87:f2:8e:d7:b1:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Aug 24 09:59:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c94352ac8fa9a2d6290c9c77e47a799109172da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:da:63:11:21:55:8d:30:0f:00:a8:9d:ad:
ff:c1:d3:92:61:62:35:e6:eb:01:e1:cd:62:de:3a:
a5:9e:f8:6f:ca:d6:7b:58:f8:31:98:fe:e8:88:e9:
e6:33:1a:ae:d4:4a:ec:19:69:c5:83:56:d4:28:65:
42:3a:17:bf:03:8b:eb:7c:cf:50:4c:6f:7a:ee:ac:
74:4a:93:b9:a4:e4:50:f3:aa:7d:05:a3:a6:e3:58:
f2:2a:da:f9:f3:4c:8b:ef:fe:c1:0a:cf:11:5f:ec:
f8:50:c7:e4:9b:f1:82:08:a5:77:ba:89:14:cd:69:
c5:2e:6d:2b:90:12:d9:aa:eb:c9:fe:5c:b5:18:5c:
94:a9:82:16:71:de:42:09:0a:d9:85:47:65:69:e1:
06:2e:d2:76:5f:8b:3a:91:c8:b0:e3:f6:56:c7:dc:
ed:e2:79:34:e3:1e:47:f0:39:57:01:55:d0:a5:df:
5a:a1:8b:f5:de:0b:15:24:cb:fd:d8:85:04:15:45:
c9:da:48:a9:dc:eb:15:13:f5:b7:41:50:bf:0a:82:
94:ca:1e:b6:bb:64:60:6a:8b:3c:63:28:09:e6:cc:
b9:77:13:f1:b5:d3:2e:65:41:c0:39:66:04:1b:d2:
12:d6:19:99:df:e4:10:a5:58:70:55:fb:19:68:b9:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:35:2A:C8:FA:9A:2D:62:90:C9:C7:7E:47:A7:99:10:91:72:DA
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/fJQ1Ksj6mi1ikMnHfkenmRCRcto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.160.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:e1:3b:34:a7:9e:c9:b5:d7:76:03:ea:c3:d2:e8:bc:31:04:
b1:14:5f:33:50:82:19:48:22:70:30:15:19:c2:95:9b:ef:c1:
c2:f2:4d:c5:9a:b5:4c:0f:8e:64:c2:47:19:e8:eb:80:db:9d:
9d:b9:e4:9f:e9:10:46:81:b7:e4:4a:bb:31:a6:f3:78:23:82:
3e:ff:3f:6b:d5:08:41:b3:c1:2b:5c:ea:0a:e0:35:de:10:07:
21:f5:dd:9d:eb:0d:2b:54:53:62:9e:84:63:9b:a3:b9:0a:0a:
a3:22:1e:61:8d:40:57:da:49:1a:3c:4f:9b:a0:7e:b2:a4:7e:
8d:b9:73:72:bc:46:63:50:7c:9b:d2:1a:fa:91:1f:31:ea:68:
7b:44:b2:c6:50:f7:9b:26:5a:ad:88:f0:7f:01:ad:57:2b:d6:
ff:d4:82:08:d3:86:a5:e8:fa:32:f5:eb:43:6b:92:8b:ba:9c:
17:71:d0:35:80:fe:f7:90:6c:dd:74:91:e5:bd:81:7e:4c:7e:
7b:fb:37:0b:47:0b:a6:a5:cc:d2:d3:68:a9:71:70:5b:e8:1e:
d8:ff:d4:b4:d6:bf:5a:7d:83:99:69:c4:47:2e:dd:2f:98:73:
38:8e:90:b9:5a:c7:cf:0b:af:28:7a:21:80:3e:30:39:e8:61:
70:db:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:37 2025 by rpki-client