Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/F091AhwC8Fqjwc7G7EVApc6O_Ao.roa
File: F091AhwC8Fqjwc7G7EVApc6O_Ao.roa (raw, json)
Hash identifier: zmDd+5qyVF1pbIFt3dvZN4jOsfItlW4XYrXTHOUvXPs=
Subject key identifier: 17:4F:75:02:1C:02:F0:5A:A3:C1:CE:C6:EC:45:40:A5:CE:8E:FC:0A
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01856C813CD68E34712C1EEAC99233DB75E4
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/F091AhwC8Fqjwc7G7EVApc6O_Ao.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15879
IP address blocks: 193.104.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3c:d6:8e:34:71:2c:1e:ea:c9:92:33:db:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174f75021c02f05aa3c1cec6ec4540a5ce8efc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:72:43:6c:63:4c:f9:c7:d7:58:c5:1d:20:
72:d2:47:c7:de:5a:86:80:24:4e:39:94:2f:16:e6:
98:33:a4:e7:ff:8e:26:31:53:78:97:ef:27:13:e5:
75:d3:7a:32:70:03:41:2f:67:a8:c1:8c:5e:e7:2d:
fd:66:22:d4:df:a0:d0:84:f7:b0:2b:bd:b2:07:d8:
3a:f6:74:a9:c8:20:fa:a7:84:34:a4:64:10:15:f7:
42:5f:ae:0c:bf:b6:fd:7c:1f:66:3c:99:d9:41:cf:
0f:42:b9:f6:d0:66:07:56:8f:49:e2:df:c8:52:52:
0b:26:cc:fe:20:26:37:c2:48:55:e9:ba:33:45:17:
b7:cd:d9:95:0c:97:25:21:21:29:85:1e:1d:8c:9e:
f7:23:47:27:32:1c:7d:7c:ea:43:26:70:8d:6f:d5:
16:5d:48:bb:31:fe:7d:a3:eb:ba:51:f7:bc:6b:5e:
84:6b:4c:3e:bc:9e:1f:d5:57:3f:7e:49:54:6b:0d:
00:99:09:d7:9a:a8:17:d3:6a:5d:93:16:af:7d:c2:
53:45:62:02:a2:ff:74:f5:b7:d9:c8:2f:55:4a:9c:
12:36:85:d2:27:fc:2a:09:0c:bc:db:d9:b3:de:6d:
c8:71:7b:a5:42:91:41:e1:0d:5c:4e:b2:4c:32:bb:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:75:02:1C:02:F0:5A:A3:C1:CE:C6:EC:45:40:A5:CE:8E:FC:0A
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/F091AhwC8Fqjwc7G7EVApc6O_Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2a:30:85:15:01:05:d2:d7:e1:13:f6:5d:36:61:19:b7:d3:
67:0e:3c:6b:c6:e2:9b:69:06:9b:19:65:37:a4:26:e5:02:ed:
3a:ce:1f:de:90:e7:5c:67:54:f4:c7:50:cc:74:da:a0:35:82:
a1:4c:b3:d0:02:85:29:88:3d:23:19:f9:0a:0b:30:6b:cf:a2:
4e:52:8a:23:cd:7d:1b:fa:3d:ee:53:84:d2:b7:dd:bc:ab:ee:
5d:b2:72:47:91:b2:14:ff:bf:71:68:b1:c6:78:c6:35:23:6a:
46:13:d5:4d:fd:76:31:98:91:df:7d:b5:1e:5d:dd:7e:38:d2:
6e:a3:a4:9b:f0:27:60:2a:46:8b:82:2f:99:58:a6:8f:a1:e5:
40:dc:36:bc:b4:84:ff:6f:ab:44:ed:f5:24:c3:1a:46:7e:52:
f7:9d:85:d5:bc:1f:56:e5:42:87:13:80:59:b0:e3:b7:23:4a:
00:bb:09:95:ec:ae:bf:03:20:59:75:63:2d:6b:ee:4c:0c:88:
f3:fc:95:08:f2:23:ab:81:05:1a:4f:ea:da:9d:d7:01:5e:f8:
5f:72:ec:c7:9f:34:17:ba:8d:b5:2a:ec:d4:20:9c:4b:d0:44:
f3:ff:bf:49:f7:91:6b:88:36:b6:64:66:54:32:4f:5e:58:7d:
3e:d4:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:45 2025 by rpki-client