Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/c9pO92bNIXZUkJ4OufkvztiEfJs.roa
File: c9pO92bNIXZUkJ4OufkvztiEfJs.roa (raw, json)
Hash identifier: J9BVWbhDjyjPySdGk0XgcE5Y1A9Rv8Pmxu7h4d3gRmE=
Subject key identifier: 73:DA:4E:F7:66:CD:21:76:54:90:9E:0E:B9:F9:2F:CE:D8:84:7C:9B
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 01350ACA
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/c9pO92bNIXZUkJ4OufkvztiEfJs.roa
Signing time: Sat 01 Jan 2022 11:59:44 +0000
ROA not before: Sat 01 Jan 2022 11:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202367
IP address blocks: 194.107.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20253386 (0x1350aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jan 1 11:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73da4ef766cd217654909e0eb9f92fced8847c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:3e:79:7c:cf:a1:18:3e:75:c1:f7:c8:92:
2f:0c:18:65:ff:90:c7:2c:ea:7b:9a:07:8f:56:72:
af:b2:ad:9e:06:f7:0f:a6:32:95:9d:d6:94:2b:2e:
05:43:8b:9b:d4:40:35:ab:60:e9:37:a9:43:d2:15:
a7:1a:9e:89:af:3a:fd:a8:2f:a5:d7:3e:b7:7f:0a:
84:e0:77:77:2b:e2:b5:b6:bc:44:34:f8:7c:b0:9e:
71:60:65:47:c4:88:9e:32:ad:4e:8f:cc:fc:77:1f:
54:c2:c0:85:48:b8:90:cb:1f:53:e8:87:d8:b3:67:
34:3a:ff:da:c5:00:07:88:48:00:9c:99:20:28:31:
f6:89:9e:3c:4f:96:f3:20:9a:41:da:ab:f3:cb:24:
54:ea:b2:52:e9:90:57:15:e8:19:0f:d4:36:d7:5a:
16:a9:b4:59:58:c7:98:15:ba:6e:f7:07:7e:ea:20:
d7:85:df:ab:a8:8c:3f:1e:49:ba:96:58:d9:55:de:
ec:50:f0:8c:83:64:70:37:9f:71:68:f7:05:03:a4:
57:cf:7d:a4:9f:92:ba:7c:fe:4a:5d:00:19:75:fe:
30:1e:6f:ef:0a:e2:9a:62:fb:8c:f5:ed:0a:d7:29:
fd:0a:b1:a0:34:ed:62:2c:42:aa:61:96:b8:68:46:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:4E:F7:66:CD:21:76:54:90:9E:0E:B9:F9:2F:CE:D8:84:7C:9B
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/c9pO92bNIXZUkJ4OufkvztiEfJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:8c:88:f6:16:57:17:a7:57:85:9e:1a:67:8c:ba:23:15:a4:
e9:28:4b:5f:b1:ee:95:96:4d:1c:d7:be:81:02:b3:3a:33:22:
34:3a:cb:05:91:ae:51:df:d1:40:2a:5f:b6:c3:bf:29:88:b3:
0a:1a:0c:78:8c:c2:0e:b6:22:6e:ff:db:4a:66:3d:02:a9:aa:
a5:f5:e6:d4:ce:78:8c:cd:7b:c8:89:b1:7f:9f:70:2f:59:a8:
76:7c:9d:fc:7a:fc:b1:a5:a2:a9:7e:fe:8b:95:3c:96:26:72:
9f:ff:56:83:84:75:55:01:69:97:e9:d5:c2:1d:c0:f8:f4:c7:
92:4e:47:d4:ae:7b:d8:40:7c:40:4c:93:6b:37:f8:81:f9:04:
01:18:da:62:e1:ea:29:c8:39:2f:ba:c1:4c:1f:39:53:9f:d4:
b5:87:8a:3e:be:f0:49:3c:53:cd:07:17:10:28:0d:f5:2c:6e:
50:8f:f2:72:cd:8d:45:34:80:5b:0f:90:5f:18:b0:f7:57:d5:
71:4f:bf:0a:c0:e1:3d:e2:86:48:bc:ba:0d:d0:c5:51:30:47:
1d:06:77:a6:94:31:44:32:0a:90:ab:a4:c8:cf:78:50:8c:55:
50:d5:a0:7b:32:04:4b:d4:bc:4e:ef:c9:bd:9b:37:5e:ca:32:
e0:9f:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:12 2025 by rpki-client