Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/S3o-6RmoWusr4eGICvFF8AYkTdM.roa
File: S3o-6RmoWusr4eGICvFF8AYkTdM.roa (raw, json)
Hash identifier: 5dkRzJ+Dk2NaaItwUwRCvAlZIYpxu1+Zfog7+1NKMjY=
Subject key identifier: 4B:7A:3E:E9:19:A8:5A:EB:2B:E1:E1:88:0A:F1:45:F0:06:24:4D:D3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 01856D41984DA63C305611E3B90CE2151E73
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/S3o-6RmoWusr4eGICvFF8AYkTdM.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206195
IP address blocks: 185.193.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:98:4d:a6:3c:30:56:11:e3:b9:0c:e2:15:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b7a3ee919a85aeb2be1e1880af145f006244dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:bd:82:4e:2e:65:83:d6:0f:53:2e:7e:ec:
ce:58:6b:36:24:d8:3d:bd:1e:53:ca:8d:d3:81:4c:
9e:79:66:62:4e:13:db:ba:0f:c4:a8:67:b0:36:1b:
e0:3d:fd:38:14:94:03:94:0f:8a:00:6d:0a:14:ef:
54:6b:cf:26:90:83:08:e4:8b:27:69:7b:25:21:a4:
56:85:2e:11:db:15:62:52:c5:3b:aa:8c:ca:58:b0:
97:8e:50:2e:0e:bc:5f:66:7f:4b:82:42:15:c8:d1:
51:79:53:5f:88:ae:21:14:ed:97:40:31:ea:c9:f0:
c5:58:7a:95:4d:52:ef:75:7d:ee:d0:3c:1e:0b:29:
bc:a2:38:3e:d1:53:4a:e0:7d:d9:54:40:84:59:dc:
29:e6:47:2f:03:a0:5b:88:36:30:36:86:a6:25:10:
94:b4:79:fc:94:f4:99:11:bf:82:fd:e5:2c:f8:bf:
bf:4b:cb:87:88:86:98:1b:3c:ac:0c:bb:db:89:67:
5a:17:08:ac:a7:86:04:82:6e:4e:30:ff:3e:8a:c9:
51:9e:6b:2d:0e:5c:f2:18:e9:44:23:e0:cb:6d:7d:
cc:ba:52:e8:04:18:6c:31:0c:5c:25:02:ca:b5:d3:
97:35:9b:d2:53:0b:1a:1f:76:d5:a3:89:bd:86:1f:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7A:3E:E9:19:A8:5A:EB:2B:E1:E1:88:0A:F1:45:F0:06:24:4D:D3
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/S3o-6RmoWusr4eGICvFF8AYkTdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.200.0/22
Signature Algorithm: sha256WithRSAEncryption
41:81:e0:14:f9:b5:9d:dc:df:09:f1:9a:e2:f3:cc:07:c1:7d:
83:7d:93:56:a9:f0:c9:98:c1:5d:dd:86:45:03:5d:9e:b7:04:
76:17:cc:59:37:6e:5c:ca:83:d3:88:2f:27:15:7f:73:34:af:
be:8e:95:59:f1:40:1a:66:57:ed:b5:87:7a:71:64:bb:44:6b:
e3:35:50:e6:01:de:ac:c8:ac:ab:c0:7e:9e:2d:23:a1:17:1f:
05:74:f3:97:2d:31:7a:75:14:e5:9f:25:f0:58:09:de:81:c2:
05:b5:51:e1:22:59:3b:4e:5f:61:50:b0:f0:f7:a0:1e:96:57:
56:19:75:83:fb:6c:44:cf:17:c8:28:21:91:ea:0d:51:78:31:
98:00:52:8c:44:11:72:ee:41:fb:82:7e:5a:b7:df:4f:08:4a:
6e:44:60:09:e8:e2:be:c3:d8:86:40:43:89:bd:c2:44:aa:4d:
79:aa:ee:14:be:e5:25:9b:5a:5e:b0:d7:0c:5e:48:0b:c4:ce:
63:94:2e:a7:c5:e9:8d:d8:03:c7:c1:de:fb:35:d9:f7:f5:8d:
c4:6b:dc:1d:17:05:e4:25:aa:b5:cf:cd:d4:0e:1d:e5:f8:79:
b3:c7:ff:11:13:8f:2e:ba:9e:b2:12:0c:78:07:73:46:21:3b:
7a:08:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:30 2025 by rpki-client