Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TZ25I7AYQg2CX8W-4_Zl8FeRhrQ.roa
File: TZ25I7AYQg2CX8W-4_Zl8FeRhrQ.roa (raw, json)
Hash identifier: 0lmE9pv9v5We4iM/aNjPA1T45wclWQ9e8uouwLTsx1c=
Subject key identifier: 4D:9D:B9:23:B0:18:42:0D:82:5F:C5:BE:E3:F6:65:F0:57:91:86:B4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018911A11B2005067BC29412BE587458D713
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TZ25I7AYQg2CX8W-4_Zl8FeRhrQ.roa
Signing time: Sat 01 Jul 2023 13:25:18 +0000
ROA not before: Sat 01 Jul 2023 13:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:a1:1b:20:05:06:7b:c2:94:12:be:58:74:58:d7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 1 13:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d9db923b018420d825fc5bee3f665f0579186b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:21:b6:f5:31:57:4f:65:70:fb:de:80:e1:
7d:60:08:e6:dd:4a:15:28:af:5a:9b:fb:8a:7b:64:
7e:ae:33:a1:76:3d:46:04:1e:4a:9b:8e:78:28:0f:
16:55:9d:cc:6c:09:01:91:77:9d:ed:65:6d:ea:e6:
2e:86:e7:4a:0c:5f:44:0f:ae:6b:18:c5:81:d9:8e:
87:49:bd:4c:87:c7:42:68:ba:3a:a6:17:86:13:c2:
cb:e6:99:a8:a0:56:ce:f7:d2:0a:8f:c7:80:5b:ee:
32:c6:10:52:77:03:1e:7f:33:4c:5c:d1:76:13:67:
fe:10:5e:52:17:34:0e:d3:b3:a7:9c:1f:3f:dd:c5:
55:cf:26:95:11:0f:b4:35:60:1b:3e:69:05:d0:98:
21:3f:e4:ff:ef:d5:b1:cd:64:35:59:33:11:0b:8e:
dd:8e:7c:f5:99:c3:5a:a7:7b:19:34:38:33:d6:91:
8f:c6:d2:68:88:59:13:21:07:48:62:55:f3:e6:73:
3f:ed:62:c2:4f:44:7a:95:0f:6d:fd:4e:41:8f:f3:
a3:eb:30:43:f6:a1:5e:be:c9:0e:de:a2:23:a4:b7:
71:83:29:7b:78:db:a2:4f:3f:a7:04:cf:80:3f:84:
e6:65:a7:36:b2:29:18:cb:13:1e:8c:c9:0f:93:f2:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:B9:23:B0:18:42:0D:82:5F:C5:BE:E3:F6:65:F0:57:91:86:B4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TZ25I7AYQg2CX8W-4_Zl8FeRhrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8b:35:20:7f:93:97:6b:c0:96:b9:89:cc:8a:1e:5e:76:e4:
98:0d:fc:17:1c:ca:de:be:e1:78:4e:b9:af:6e:82:9b:a6:a5:
e3:00:a2:0e:80:b2:b5:d1:de:ff:12:98:d1:c4:d2:b4:92:12:
be:95:b6:89:25:0a:23:74:a0:be:37:dd:70:fd:28:84:3b:fe:
d4:22:85:4e:33:fc:55:1d:26:9c:bd:4b:ba:e7:ae:fb:6a:84:
c6:42:59:40:c7:64:10:8b:e3:fe:bf:a1:8c:8e:c9:a3:f9:e8:
75:79:34:8f:14:75:a5:90:1d:9e:43:ce:c7:ee:d7:2d:09:1e:
7d:76:2c:6d:c7:7d:cf:51:89:56:89:d9:c3:c5:65:2a:56:e8:
80:41:01:9a:77:75:69:94:18:cc:2a:4a:44:f2:18:77:28:e4:
bb:9e:ee:88:91:65:6c:f0:66:c5:12:db:8e:b8:03:c5:5a:88:
e8:e1:d2:02:fd:01:fb:1f:b6:67:be:69:a2:b3:21:a0:86:f6:
88:b6:34:5d:1a:36:b0:19:e4:67:78:d7:d0:d1:1e:ad:d4:01:
8f:8f:6e:37:04:e3:e2:ce:45:25:70:16:71:6d:cc:91:c2:b5:
72:2a:31:b6:f3:ba:e4:e1:29:7a:10:54:24:92:8c:b7:00:31:
43:2c:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:12 2025 by rpki-client