Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/kDgEnQzxHNxg7RyvqUa2tIxrbWY.roa
File: kDgEnQzxHNxg7RyvqUa2tIxrbWY.roa (raw, json)
Hash identifier: c9wouqInOlnVXbFe9lGuA+8/6VOUW/FoYPVi0//7gQ0=
Subject key identifier: 90:38:04:9D:0C:F1:1C:DC:60:ED:1C:AF:A9:46:B6:B4:8C:6B:6D:66
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 0A995616
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/kDgEnQzxHNxg7RyvqUa2tIxrbWY.roa
Signing time: Sat 01 Jan 2022 01:58:44 +0000
ROA not before: Sat 01 Jan 2022 01:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 194.13.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177821206 (0xa995616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jan 1 01:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9038049d0cf11cdc60ed1cafa946b6b48c6b6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:14:b6:cd:bd:3d:44:a9:cb:69:93:6e:e7:
9c:6f:be:44:a1:6a:0a:48:19:e1:98:38:71:0d:0a:
d7:16:e8:30:6e:5a:da:b8:74:af:b6:e4:a9:af:00:
c4:d8:1c:6d:b0:a0:60:e7:da:95:f5:d0:66:25:43:
5e:4b:54:51:a7:ac:a3:61:77:ac:78:79:96:db:d3:
c4:be:6a:f0:38:75:ce:72:4f:5a:a7:3b:52:e6:8b:
1f:ec:22:36:38:20:6b:43:78:59:13:47:5c:1c:b9:
05:bc:48:17:57:c0:6b:36:3c:76:80:da:47:b1:71:
bb:4c:f9:2b:53:b7:d4:93:4f:49:9d:e3:d3:0c:44:
27:00:9b:39:ca:c2:41:f7:fb:01:4b:82:44:53:5c:
8b:d6:c0:bc:9c:1d:fa:73:43:b3:a9:e2:47:72:28:
f6:fd:4d:d7:57:b2:59:ac:dc:3d:5c:31:83:97:44:
1f:63:1f:e5:49:d2:b7:3d:b9:d7:1d:12:23:97:5f:
8a:bd:d4:41:0c:b1:c5:56:d1:de:9f:ea:33:43:49:
3c:1c:e0:78:dc:ae:3d:3a:2f:a5:c5:04:30:59:76:
d3:62:5e:fe:ca:e4:d2:ea:f3:e7:6d:3f:3b:28:71:
57:2e:65:c6:95:39:aa:e4:bc:84:c7:b6:57:6b:ec:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:04:9D:0C:F1:1C:DC:60:ED:1C:AF:A9:46:B6:B4:8C:6B:6D:66
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/kDgEnQzxHNxg7RyvqUa2tIxrbWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.16.0/20
Signature Algorithm: sha256WithRSAEncryption
44:b8:10:3b:b5:7e:04:ce:65:2f:e6:01:6f:a1:0d:55:73:32:
2a:11:fc:17:c8:2c:75:6d:d4:76:72:a2:f2:fe:a8:0b:21:cb:
35:38:59:f9:3e:b7:7f:89:09:d6:c4:38:d1:b1:5e:a2:2b:ed:
f6:56:1f:47:45:51:9a:37:81:14:24:05:04:0c:ba:f7:c7:6a:
d5:5d:14:c6:57:d9:5a:fc:86:f3:e1:19:27:f9:be:46:4c:b7:
4c:c4:48:9b:1b:83:95:83:26:db:8f:6b:ca:55:3c:74:9c:7f:
1a:42:e8:b3:26:2e:f7:9f:93:16:fc:46:63:3f:40:07:9b:73:
bd:f9:32:02:3a:30:08:96:a4:9a:47:64:90:87:0b:fb:63:9b:
86:36:24:db:2f:20:51:80:1b:6e:1f:2e:72:5e:8a:f7:fb:fe:
25:ff:7a:55:52:60:f8:e6:d7:d0:29:15:a9:72:2a:57:b6:a8:
9c:f3:bf:2d:08:e7:eb:af:d4:21:88:8b:70:b6:06:ba:26:7e:
22:90:90:f9:95:f6:2b:b1:61:5f:04:de:37:bc:04:02:fd:7a:
e8:78:62:a8:89:3a:fe:7e:fb:cb:54:e5:62:ed:42:90:d1:3d:
19:79:9a:de:d3:1c:7a:26:f0:72:82:5d:70:33:7a:b0:8b:54:
ca:7d:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:44 2025 by rpki-client