Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SR8LP40Vt3L8cJBjEOp4i01JJ0s.roa
File: SR8LP40Vt3L8cJBjEOp4i01JJ0s.roa (raw, json)
Hash identifier: ORgaC8TGHIdOMPxPBcl1xN3SC5BdqnNKI8Q+d3eTYz8=
Subject key identifier: 49:1F:0B:3F:8D:15:B7:72:FC:70:90:63:10:EA:78:8B:4D:49:27:4B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E626ED
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SR8LP40Vt3L8cJBjEOp4i01JJ0s.roa
Signing time: Sat 01 Jan 2022 16:01:58 +0000
ROA not before: Sat 01 Jan 2022 16:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204970
IP address blocks: 194.209.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357260525 (0x50e626ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=491f0b3f8d15b772fc70906310ea788b4d49274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:b0:11:2c:a0:6f:d5:48:94:93:7d:3c:ea:
01:fb:56:c3:8e:ff:77:fb:35:32:50:93:2c:95:47:
d4:8c:6d:73:4d:70:f9:1d:16:05:21:6c:f0:23:44:
cd:20:21:1d:a0:56:b7:34:b8:26:a9:e5:20:2f:ee:
d3:e7:6a:e6:23:6c:f4:9e:67:e8:80:48:4a:04:bb:
28:cf:c7:88:e7:7d:ed:12:78:c1:0c:e5:3d:19:ce:
5f:44:7c:4a:84:ed:15:cd:7e:1e:23:03:28:78:11:
45:d4:27:7f:ba:38:a6:bf:db:bf:2d:e1:02:58:e7:
a2:c2:1f:77:59:6f:4b:30:5e:f7:0c:29:42:98:04:
ab:de:30:9e:9b:3d:1c:fa:80:2f:40:33:7e:bb:3e:
21:24:24:fc:50:94:3c:bd:43:53:cc:70:31:48:5a:
2b:03:b7:9c:2f:86:17:da:ed:78:3b:03:07:a8:fa:
53:c5:ea:88:0d:90:15:ab:93:ca:2f:7c:de:85:d0:
02:bd:20:bb:16:f2:af:a0:13:d3:9b:81:7a:b9:c0:
c2:f1:75:e5:cf:03:1c:e6:27:92:61:1e:d9:6b:47:
fb:39:63:ac:d1:a3:f8:c6:a5:07:a4:ac:a7:fe:e7:
c8:60:e3:6f:47:b0:63:2d:d3:b7:a9:57:09:13:f2:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:0B:3F:8D:15:B7:72:FC:70:90:63:10:EA:78:8B:4D:49:27:4B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/SR8LP40Vt3L8cJBjEOp4i01JJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8a:2f:59:56:56:39:f5:1c:db:68:cf:85:54:d4:6f:0f:b9:
88:0b:d8:23:ec:1b:56:8b:83:7f:84:a4:38:42:53:f4:6f:9d:
d7:67:15:24:cd:f5:de:40:b3:c2:00:8e:01:1e:a1:55:c1:c3:
e2:50:35:ac:fe:1e:76:f8:d0:4b:c8:1a:a5:ee:21:16:a7:29:
39:ec:3b:a8:86:56:59:f3:03:8e:9f:3f:eb:fd:66:70:58:28:
44:53:5c:23:25:9e:f3:d9:f5:b6:7e:13:5e:9a:bd:98:51:7d:
68:72:0f:3b:4a:45:9a:1b:11:f9:fb:5a:f1:64:78:fa:bf:7c:
fc:6b:0c:a7:59:ac:bb:04:bc:86:7a:55:4f:5b:e5:b9:8e:02:
49:b9:54:d2:03:45:e0:88:2b:e7:e2:50:f3:b2:1d:36:ca:19:
cf:39:10:e8:7c:26:93:bf:1a:32:b4:c4:30:79:91:f2:35:0b:
98:d5:6f:b6:9c:1c:e0:2e:4d:24:88:2c:59:33:db:d7:6b:cc:
f8:39:41:f7:9a:46:2b:7e:2d:46:2c:05:6e:4c:21:ce:58:6f:
70:5f:0f:80:29:c9:18:72:92:36:a2:1e:62:be:97:ea:a1:58:
35:17:97:ce:79:fd:34:bb:7f:d3:c6:b6:e7:5e:e1:ec:12:b1:
85:78:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:27:07 2025 by rpki-client