Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/M5vv3BPKENO5zG7x-d3VxYCINJ8.roa
File: M5vv3BPKENO5zG7x-d3VxYCINJ8.roa (raw, json)
Hash identifier: /pAN4sF/GXT/e9r1GYSnjOvmeTtm0odmQ7Q7Tg/v00E=
Subject key identifier: 33:9B:EF:DC:13:CA:10:D3:B9:CC:6E:F1:F9:DD:D5:C5:80:88:34:9F
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 01856B6EB3791D1047042B53C51E76048E49
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/M5vv3BPKENO5zG7x-d3VxYCINJ8.roa
Signing time: Sun 01 Jan 2023 03:44:55 +0000
ROA not before: Sun 01 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 194.13.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:b3:79:1d:10:47:04:2b:53:c5:1e:76:04:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jan 1 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339befdc13ca10d3b9cc6ef1f9ddd5c58088349f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:d5:0f:bf:0f:e4:41:4b:cf:8d:5b:80:01:
de:9b:c5:4c:5b:e2:b6:cb:a8:9e:c4:4c:e1:72:e9:
12:8d:b9:4a:cc:06:8d:0c:13:7d:69:e8:df:4e:e4:
40:d6:d2:02:2f:5d:74:6c:6a:fa:aa:69:cf:dd:4d:
08:57:3e:24:f4:e9:f4:73:5d:34:79:4a:dd:9b:1f:
c9:b0:e3:51:14:45:b5:aa:43:1c:13:1f:41:f0:a3:
4f:eb:33:f9:00:aa:d0:ef:a2:f3:ce:6e:e2:80:bb:
14:56:4f:db:56:76:0c:01:08:8f:dd:b1:8e:54:3f:
75:a4:ee:ff:a1:12:fe:ee:11:e9:ca:fd:ec:df:07:
d0:9f:52:11:c4:45:f6:61:be:72:68:0f:5b:9e:45:
4e:88:59:c7:e8:7c:1f:b8:6b:bc:85:2e:83:a9:46:
96:70:19:e9:ee:81:be:b1:70:7f:c2:a0:3d:51:b1:
8e:82:59:99:48:6c:1e:12:60:f9:cd:b2:1a:09:4c:
20:a4:c6:05:4e:b7:bc:af:a2:b3:85:b8:67:d3:20:
e4:df:06:8f:e5:77:be:53:56:21:4a:e4:a1:79:9b:
6d:1a:d2:1b:f7:7d:68:95:20:05:92:4f:af:57:c7:
63:df:9c:f0:f7:21:c5:14:54:fe:03:e8:e5:7e:1f:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:EF:DC:13:CA:10:D3:B9:CC:6E:F1:F9:DD:D5:C5:80:88:34:9F
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/M5vv3BPKENO5zG7x-d3VxYCINJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:4d:11:1e:26:30:fb:70:8d:9e:a1:d1:71:1f:d5:16:0b:e5:
86:cb:e9:e2:53:f1:7a:a5:5a:f6:be:31:8b:81:86:48:e5:d2:
a6:6a:96:53:23:0a:24:41:55:92:ff:c3:67:6c:a6:43:77:f9:
67:dc:82:9c:a8:d6:3e:af:e5:0c:1d:c3:77:86:b6:ab:8f:c9:
6a:b4:b0:be:fc:1d:8d:65:22:f1:3f:93:25:e6:c5:f5:9e:c7:
87:53:ad:85:7d:b4:50:d3:bf:23:40:10:0a:13:b7:5a:21:a9:
26:4c:66:d1:69:04:b9:22:47:b4:99:eb:d1:ed:95:bf:af:51:
d7:07:9a:ac:63:92:d6:d4:35:23:27:d4:c1:ed:13:5f:b5:d6:
70:4c:24:92:33:26:88:c1:3b:df:91:bd:69:b6:75:08:ec:c0:
da:ca:4c:be:c9:b8:11:31:de:cc:ae:82:38:3f:89:76:53:bb:
dd:88:00:bc:a7:7e:75:b3:88:bd:c9:36:fb:25:66:24:91:07:
75:79:17:37:95:d1:fe:3c:98:57:9f:a1:0d:f2:35:19:c2:6c:
58:3a:55:7a:99:52:a3:84:a0:ee:4a:60:f6:59:22:44:da:0e:
e5:fe:c0:6b:9f:e3:22:ca:7f:ea:d6:f5:5e:2b:5e:f7:c4:e7:
a0:55:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:17 2025 by rpki-client