Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PUozbJtQjl2R8cWtKAUweJ70Czs.roa
File: PUozbJtQjl2R8cWtKAUweJ70Czs.roa (raw, json)
Hash identifier: RYSFIQYGL3EGx22VdstiPgYCtUxQ2B4dlZZc3zqcje8=
Subject key identifier: 3D:4A:33:6C:9B:50:8E:5D:91:F1:C5:AD:28:05:30:78:9E:F4:0B:3B
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01852B8E574C842507B3AB7E651813F87F45
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PUozbJtQjl2R8cWtKAUweJ70Czs.roa
Signing time: Mon 19 Dec 2022 18:03:46 +0000
ROA not before: Mon 19 Dec 2022 18:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:8e:57:4c:84:25:07:b3:ab:7e:65:18:13:f8:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Dec 19 18:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d4a336c9b508e5d91f1c5ad280530789ef40b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:fb:3d:94:ce:8b:ac:c7:7d:ae:95:da:05:
fd:5d:e3:91:87:71:5a:f7:be:9c:90:4e:9d:61:c7:
00:74:b0:1f:ab:75:30:25:d2:b4:f3:63:d5:65:75:
33:68:85:e1:d5:0a:8b:a5:af:c6:bc:87:8c:0f:42:
bd:b3:30:0d:84:82:d3:d9:73:64:9a:dc:04:90:c9:
ae:ff:45:e1:08:09:76:05:ff:fc:03:61:91:c8:6d:
db:9e:74:96:8d:37:ee:6d:e9:c2:e8:30:8f:9c:79:
d6:69:27:c6:a8:c0:98:23:51:c1:e0:5f:12:c5:ca:
03:04:63:42:af:97:f5:9c:47:d8:67:34:6c:71:22:
54:d5:3f:66:de:58:b4:38:92:a8:7c:83:ce:dd:61:
50:19:ee:1d:40:6b:ec:ae:f3:4f:19:d6:31:a7:a3:
b9:4d:c3:dd:5a:fd:5c:e6:4a:2d:19:be:7b:93:4a:
16:30:21:80:45:6c:11:f5:3c:e4:54:68:93:f8:dd:
33:f7:80:3f:3f:84:fe:82:40:5a:0f:9a:7b:93:1b:
6b:7f:c5:bf:06:13:35:29:ef:39:59:5e:64:57:73:
bd:e2:a5:78:2d:e2:51:9f:c9:71:5a:e6:b4:41:d9:
94:e3:84:dd:f3:b0:b1:e3:6d:25:81:24:40:f1:34:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:33:6C:9B:50:8E:5D:91:F1:C5:AD:28:05:30:78:9E:F4:0B:3B
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PUozbJtQjl2R8cWtKAUweJ70Czs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2a:3c:3f:33:52:dd:46:53:1a:91:0c:4a:63:77:3d:4d:f9:
25:b8:dd:d3:fb:24:69:e7:74:fd:46:bc:da:03:2a:b7:07:c6:
f7:20:f7:f6:84:ad:a0:73:08:36:3a:9d:7c:79:2d:30:cc:4c:
9d:4c:75:25:82:dd:52:a1:6e:92:d8:12:a8:af:f1:90:4a:e8:
97:c6:89:9e:f4:10:e3:a4:dc:2f:5b:d8:cd:09:e9:84:f7:e5:
70:97:e8:5f:10:a8:aa:ff:80:73:c9:14:c8:58:ab:c5:96:10:
c6:ae:c3:3b:1c:ad:97:8c:bf:40:4f:0c:eb:3e:8a:c1:cd:39:
a2:dc:30:81:ce:2d:92:04:15:43:66:fc:a7:54:bf:0e:67:22:
75:87:ee:88:47:b7:ad:f3:90:78:9e:ff:51:ae:29:ac:ab:4c:
fa:a0:de:f6:d8:2f:b9:fe:b8:3b:50:d5:42:c4:fb:22:34:47:
49:b3:5f:6a:12:a5:8d:80:38:fb:f9:21:33:a9:34:03:90:08:
b7:6e:2a:6b:67:b1:6e:2f:59:62:b6:f4:31:df:87:a6:1b:06:
54:13:46:4b:32:fd:71:d7:98:08:36:ab:ab:f9:5b:81:d0:02:
13:32:db:3f:55:58:f5:d4:56:8c:78:51:e7:61:b6:88:49:21:
00:f0:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:25:01 2025 by rpki-client