Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/e1W-kcf-irxecVeiitHso0aO7CI.roa
File: e1W-kcf-irxecVeiitHso0aO7CI.roa (raw, json)
Hash identifier: oGxpMxCzbQSu/TK8mEM8LbAb+aXjsuA5pBhNlrLYuzc=
Subject key identifier: 7B:55:BE:91:C7:FE:8A:BC:5E:71:57:A2:8A:D1:EC:A3:46:8E:EC:22
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D2C821
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/e1W-kcf-irxecVeiitHso0aO7CI.roa
Signing time: Sat 01 Jan 2022 16:01:47 +0000
ROA not before: Sat 01 Jan 2022 16:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35276
IP address blocks: 194.6.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355991073 (0x50d2c821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b55be91c7fe8abc5e7157a28ad1eca3468eec22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:3d:a3:44:95:37:02:76:9c:c7:d4:eb:4a:
6e:d8:97:51:4c:ac:54:52:76:a1:34:37:c9:10:02:
62:c4:95:42:bb:91:82:2f:3d:c9:9c:d6:f6:fa:f7:
96:00:b8:2f:18:e9:15:61:e3:c6:19:38:29:7d:8a:
b3:36:8c:32:77:0c:86:01:f2:68:b8:26:de:c2:65:
2e:0c:ab:9f:86:b9:d9:dd:d9:a6:7a:ca:59:52:eb:
6f:f9:9d:84:58:cc:0d:56:15:89:e4:01:9d:4c:1c:
23:ff:fb:4a:88:2e:85:06:a6:c0:da:2b:83:ab:77:
4b:53:35:b6:b1:0a:ef:57:91:fb:dc:ac:82:5a:7c:
fb:24:2d:5c:fd:e2:8c:c9:ac:67:0e:65:97:24:5a:
ad:49:33:1a:38:3b:7c:52:a2:d2:42:d0:1f:8d:b4:
3a:93:6e:dd:bf:77:23:bb:06:ba:c9:b7:57:ea:cd:
79:8b:43:f0:f8:8a:90:73:a5:86:98:28:45:41:cb:
cd:db:72:ff:56:6a:4b:dc:91:94:f4:7c:4b:8f:2f:
12:d4:a5:b8:93:b8:96:ac:fe:d0:31:f3:50:9c:b1:
5c:5e:12:06:82:d8:ec:a7:fd:56:a5:39:2c:b6:ea:
8a:38:bb:5b:c6:36:1a:e1:a0:fb:9c:02:ca:34:2e:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:BE:91:C7:FE:8A:BC:5E:71:57:A2:8A:D1:EC:A3:46:8E:EC:22
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/e1W-kcf-irxecVeiitHso0aO7CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.179.0/24
Signature Algorithm: sha256WithRSAEncryption
47:13:b4:c8:06:09:d0:f9:c5:17:58:97:8d:cf:bb:46:9d:8d:
ee:83:00:07:c0:f6:fc:ff:6c:c0:0c:1e:c6:29:dc:f8:2c:65:
2b:c3:c7:f6:70:06:7a:51:d8:2e:4d:f9:a2:ca:37:49:1a:0d:
40:0e:76:6f:0e:ce:43:4a:1c:b1:7a:3e:e3:98:1f:87:8d:5c:
0a:c6:09:b6:43:03:59:b1:4d:16:39:87:db:08:2a:71:b9:53:
c0:e8:1a:7d:c4:1f:29:82:c7:83:45:57:46:1f:ac:62:e1:cc:
60:31:f5:2b:53:c0:75:0b:6b:ce:65:ae:f4:f2:a1:5d:10:3b:
9e:90:93:bc:5b:16:f6:df:d2:5a:b6:6d:81:b6:fa:86:21:32:
f3:fb:9b:d7:e1:0d:0b:f7:57:da:0a:60:50:e9:8e:dc:b6:1e:
ba:7b:21:91:59:57:6c:9b:9e:2b:7a:a2:ad:dd:ba:f8:ba:e5:
2b:dd:3e:3c:b3:87:4b:2e:5b:7f:4e:86:09:d5:2e:56:81:d9:
d8:05:8e:26:6e:f5:f2:01:08:55:10:4a:01:8c:8c:ff:ab:cc:
80:ef:11:ef:02:f1:4e:2f:e5:69:34:d3:ca:1d:71:4a:1a:a0:
7b:48:5e:e5:f9:f2:3c:e2:ee:50:73:df:88:f5:b5:f5:eb:97:
c5:d9:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:26:51 2025 by rpki-client