Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/tTdPbnivK3yK-4aPyEsOAVuUYR4.roa
File: tTdPbnivK3yK-4aPyEsOAVuUYR4.roa (raw, json)
Hash identifier: DSAMhN10PytEtWIlAwNaNrynQSuqFZDD8PykbyWwgaU=
Subject key identifier: B5:37:4F:6E:78:AF:2B:7C:8A:FB:86:8F:C8:4B:0E:01:5B:94:61:1E
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 3FE21A4E
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/tTdPbnivK3yK-4aPyEsOAVuUYR4.roa
Signing time: Sat 01 Jan 2022 04:56:36 +0000
ROA not before: Sat 01 Jan 2022 04:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42
IP address blocks: 194.0.17.0/24 maxlen: 24
2001:678:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071782478 (0x3fe21a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Jan 1 04:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5374f6e78af2b7c8afb868fc84b0e015b94611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:f4:b9:91:ad:a0:2d:65:ca:6d:7c:17:6f:
11:63:cf:de:f0:d1:a0:cd:c3:9a:80:3c:05:ce:20:
e2:d9:4d:c2:ec:6b:5c:db:39:6a:6c:a9:cf:91:c5:
ed:2e:61:69:d2:fe:a9:9c:d6:9d:8b:14:4d:c0:58:
72:c7:c5:ce:00:8d:6c:af:0e:b1:46:d2:b5:53:42:
bb:48:dc:9c:d4:09:8c:6b:ef:20:db:4b:59:12:2f:
19:61:57:52:ac:1e:f9:ae:70:94:68:be:19:2e:f3:
49:13:62:75:4c:a4:d5:61:d7:7c:fa:4b:60:bc:97:
db:82:73:90:93:56:be:d3:8e:3f:39:79:fe:8e:28:
4f:ab:22:ad:c4:a6:6b:65:90:40:39:09:55:8b:d8:
5a:04:a0:9d:3b:50:51:c4:4d:20:36:6f:d6:17:83:
90:3e:9c:e4:b8:df:83:9f:6f:35:31:74:de:72:4d:
3f:b6:eb:39:e0:f3:bb:ae:6a:9e:97:3b:21:79:9f:
10:fa:d8:45:04:ce:fa:f8:aa:1b:55:58:43:25:44:
8b:8d:13:e4:f7:b8:ac:b9:f8:66:52:42:62:ba:41:
31:f8:3b:0e:39:e4:32:b0:51:be:ea:c9:84:c7:37:
71:33:7f:fc:d6:40:46:b5:73:8a:ad:27:52:35:cb:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:4F:6E:78:AF:2B:7C:8A:FB:86:8F:C8:4B:0E:01:5B:94:61:1E
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/tTdPbnivK3yK-4aPyEsOAVuUYR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.17.0/24
IPv6:
2001:678:3::/48
Signature Algorithm: sha256WithRSAEncryption
97:df:53:a2:ac:2b:00:64:77:33:3e:81:6a:a4:95:e8:33:18:
7d:7e:36:b6:99:e2:2f:4c:ea:e1:e4:da:e7:52:c2:8f:8e:ce:
c7:11:10:98:d0:15:3a:e5:77:02:57:25:7c:0d:74:cf:ab:2a:
b6:5a:68:43:ee:47:cf:3a:75:15:e6:64:3d:ba:50:32:03:e5:
24:86:01:f2:42:d8:1f:21:f7:af:26:a8:7b:db:33:33:8e:69:
29:1d:16:af:76:8c:40:7e:fb:19:7e:c9:de:54:08:dd:af:27:
1c:92:55:c7:60:70:2f:26:92:43:87:34:c8:81:a4:b7:38:16:
6b:a6:d9:21:e5:a5:69:ac:fc:8a:2c:09:34:b2:50:44:5f:3a:
d8:ae:6a:9e:63:dc:d5:59:f9:69:f9:64:cb:db:de:15:6c:86:
9d:10:7d:53:59:ba:a3:49:6b:6b:ce:90:26:7c:60:f6:5b:d6:
50:0e:23:a0:c3:d7:a8:e8:57:b8:6c:26:7d:dc:19:04:8d:4d:
b1:25:a7:97:0d:47:6f:a5:9f:b7:61:9a:94:10:20:c9:88:34:
b9:11:ef:59:6c:84:43:62:a0:2e:eb:47:3b:08:3b:86:7b:72:
72:58:20:06:f9:8c:53:8d:67:70:db:b5:76:96:df:03:3f:f0:
9b:4c:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:03 2025 by rpki-client