Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/47nOSDAsJhBOpIUtYHTsSnxPaDw.roa
File: 47nOSDAsJhBOpIUtYHTsSnxPaDw.roa (raw, json)
Hash identifier: SarJ+d5F8+cWeQIX7JPCbVwm/EXY18+iF6YBh9xAz38=
Subject key identifier: E3:B9:CE:48:30:2C:26:10:4E:A4:85:2D:60:74:EC:4A:7C:4F:68:3C
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0875625D
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/47nOSDAsJhBOpIUtYHTsSnxPaDw.roa
Signing time: Sat 01 Jan 2022 04:51:34 +0000
ROA not before: Sat 01 Jan 2022 04:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50939
IP address blocks: 194.36.140.0/24 maxlen: 24
194.36.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141910621 (0x875625d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 1 04:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3b9ce48302c26104ea4852d6074ec4a7c4f683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:b5:8c:28:33:a6:98:c8:4d:b6:37:ed:26:
23:30:71:c7:e7:1a:46:3e:3e:24:cd:90:8f:0d:b6:
eb:6d:3a:e8:61:7c:07:71:2e:9a:95:42:fd:20:7a:
3c:38:a5:27:8c:8d:28:ee:91:2d:95:a3:a8:77:25:
30:65:48:29:86:9b:17:4f:31:4f:3a:c5:89:34:e1:
3a:16:e6:cc:01:51:99:06:6d:15:06:fb:cd:45:1c:
9d:b5:68:d2:be:48:2e:e7:a9:70:1b:77:5c:92:f8:
aa:26:85:48:0d:1f:2b:a0:d3:63:c8:4f:f4:f9:34:
69:91:0e:a1:22:ec:ce:7f:da:c5:ba:9f:0c:8b:4b:
ec:bc:ca:ee:be:71:8a:b5:95:47:88:75:22:49:1f:
80:d9:87:99:5a:f5:34:3f:ca:4b:54:9d:e8:7d:13:
04:09:18:87:fb:af:3f:a8:19:76:0b:9c:0f:2e:f0:
7d:0c:ad:b8:ed:12:5a:ac:95:39:40:7f:90:cf:c8:
a4:17:1b:5e:95:c1:55:c0:a2:a0:86:7d:0f:da:c3:
b5:a4:fc:de:05:c6:4e:64:88:6b:60:79:a6:4d:c4:
1f:05:f6:f8:4b:fb:24:4a:93:f2:1e:1c:4f:8f:d5:
b1:81:f6:a2:08:f8:61:61:ba:29:ac:9a:22:2c:64:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:CE:48:30:2C:26:10:4E:A4:85:2D:60:74:EC:4A:7C:4F:68:3C
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/47nOSDAsJhBOpIUtYHTsSnxPaDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.140.0/23
Signature Algorithm: sha256WithRSAEncryption
41:5b:da:e7:f7:19:0b:fb:58:b4:72:29:6d:53:2d:ff:31:7b:
2e:b4:66:07:54:8d:6e:10:67:02:0c:38:3a:df:a5:94:f9:38:
2f:0d:7e:91:e3:a4:4b:bf:84:54:0c:19:ee:20:b5:3b:3a:29:
5a:1c:53:a7:66:95:ec:a1:85:69:64:5e:87:36:ef:d3:d7:3a:
21:9c:c6:e0:c4:45:6a:79:2b:5d:0d:ca:61:cd:e6:07:dd:2f:
9f:ce:72:d9:13:c2:61:c4:23:95:d9:75:44:5d:58:5f:7f:c8:
13:cd:4e:57:02:b9:f6:58:5c:1a:a7:b8:d7:a0:6f:50:60:60:
2e:f7:7e:93:bf:46:3c:7d:51:53:10:4b:34:53:7f:17:d0:2d:
e2:37:72:13:56:f5:d5:21:a9:13:e6:07:bf:c2:78:65:f9:d1:
22:2a:b4:73:d8:fc:21:80:ff:53:1f:55:9e:f6:cc:60:0d:f5:
70:4c:f7:f2:0e:14:1d:da:12:e8:20:42:c9:72:85:c7:5e:e3:
5a:19:00:ef:31:87:de:ca:8f:1c:bd:72:8e:47:9b:e3:68:83:
49:d7:13:d9:b1:65:1f:fe:94:37:55:df:e3:d0:fa:3e:a8:f7:
56:3e:8a:75:93:b6:5a:2a:4d:72:fd:60:b0:aa:24:19:ce:99:
6a:f0:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:11:40 2025 by rpki-client