Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ktXQocUgruZXBTw1dREza_wV_CQ.roa
File: ktXQocUgruZXBTw1dREza_wV_CQ.roa (raw, json)
Hash identifier: FPkTkw7FnX5Jw2z7o1eME/wnWhsFM9FH0/1U7/jY7pU=
Subject key identifier: 92:D5:D0:A1:C5:20:AE:E6:57:05:3C:35:75:11:33:6B:FC:15:FC:24
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50DF2F89
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ktXQocUgruZXBTw1dREza_wV_CQ.roa
Signing time: Sat 01 Jan 2022 16:01:54 +0000
ROA not before: Sat 01 Jan 2022 16:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61042
IP address blocks: 194.209.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356803977 (0x50df2f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92d5d0a1c520aee657053c357511336bfc15fc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:1d:20:91:d0:9e:1f:27:d4:0c:68:3f:7a:
a8:84:aa:79:23:55:07:3a:d7:60:26:52:60:7b:fb:
89:36:fb:ca:cd:64:c9:02:8e:cc:d9:75:77:91:c7:
7a:5c:ce:18:14:19:c9:41:55:1d:48:b1:ba:a9:f4:
69:69:b6:26:95:d7:75:4a:c6:57:e9:4c:01:21:1d:
4f:4b:39:1b:28:1e:fb:0b:aa:18:d0:c1:d8:99:54:
22:8b:cd:2c:4a:0c:e8:61:0b:eb:51:47:03:c3:f9:
d2:f5:f2:d7:ca:22:bb:cc:48:c0:36:77:e3:a2:79:
87:f6:69:03:ce:84:7f:27:05:dc:b6:b0:90:ab:d7:
91:3b:84:5c:f5:a6:7c:df:2a:79:e8:28:c6:db:7d:
53:e4:c7:72:51:96:d9:e8:0a:7b:48:a9:0f:29:b9:
bc:b2:83:32:a4:1e:e8:da:20:b1:98:4c:6f:4b:d7:
8a:78:72:d8:ff:33:9f:0c:ee:ac:75:d9:79:2d:5c:
29:81:f7:8e:c4:c7:be:73:08:6f:77:35:ed:b8:fd:
1b:76:63:26:47:25:48:0a:10:76:07:6a:29:34:a7:
f4:a6:5b:47:17:7f:71:6c:d3:35:a6:77:a8:c9:8c:
a6:fa:5e:b1:94:c2:dc:d5:87:fb:be:d3:4c:37:6c:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D5:D0:A1:C5:20:AE:E6:57:05:3C:35:75:11:33:6B:FC:15:FC:24
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ktXQocUgruZXBTw1dREza_wV_CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7a:03:df:8f:e9:7e:80:f7:49:8f:84:e8:45:6a:75:e8:e9:
98:b0:db:8e:df:3c:5a:f0:b2:13:a9:ca:89:d1:63:43:9d:1f:
ae:22:ae:aa:80:74:b5:33:1f:e2:31:41:6c:51:f5:e2:bb:cc:
2d:9a:91:19:8e:3d:da:53:e0:61:d1:c7:04:90:d7:c2:c2:4e:
f6:30:3a:57:52:62:af:ac:b0:57:bb:a5:5e:1d:51:cf:d4:22:
35:ec:2e:46:6c:a4:2e:1a:e8:b2:92:fb:7d:ac:5d:60:74:48:
2e:4a:88:0f:8f:f0:0f:88:ec:56:7e:bc:e1:a0:fd:67:60:d4:
53:97:91:52:7a:29:7d:ef:4b:5e:97:e4:c2:9c:3d:35:16:70:
e5:6c:b6:c3:29:ed:ee:c7:5f:fd:01:d1:c5:eb:e4:63:16:94:
8d:f7:c6:0c:82:22:79:60:c1:0c:4a:a7:0a:2d:95:b3:f8:af:
52:19:d3:c5:cc:cd:e2:27:3d:e6:5f:b0:be:6b:b4:ae:68:b8:
f6:49:88:bf:fb:1a:2a:16:50:94:2d:ce:12:6d:16:f2:1d:17:
af:ea:57:ff:d4:0b:2e:cf:3c:7a:80:9b:e5:10:59:2a:c4:91:
5e:7b:bf:e6:ef:1c:8a:ed:5e:7a:84:bb:e0:c1:17:8a:1a:86:
7d:12:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:30 2025 by rpki-client