Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sht0AaupwJGxcbHcn4Ut3vLfapA.roa
File: sht0AaupwJGxcbHcn4Ut3vLfapA.roa (raw, json)
Hash identifier: OfDzVKrNxiimUX1pTfhwBLCSP9dlZ4ar8REYUI8e5nE=
Subject key identifier: B2:1B:74:01:AB:A9:C0:91:B1:71:B1:DC:9F:85:2D:DE:F2:DF:6A:90
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D44A52
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sht0AaupwJGxcbHcn4Ut3vLfapA.roa
Signing time: Sat 01 Jan 2022 16:01:47 +0000
ROA not before: Sat 01 Jan 2022 16:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35610
IP address blocks: 194.209.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356089938 (0x50d44a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b21b7401aba9c091b171b1dc9f852ddef2df6a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:09:bf:df:8d:b5:14:19:d3:0e:76:11:85:
3d:28:77:60:b1:a1:fc:d9:fa:f6:7c:b4:90:41:2d:
84:32:86:91:41:94:38:6e:c9:a7:52:a2:a6:e5:1c:
c8:5c:1e:ab:88:fd:49:e6:8a:c8:8c:3a:78:66:3d:
58:1f:fb:ec:0a:ab:7e:19:03:be:82:de:b9:0a:37:
d1:57:de:0e:0f:35:69:ca:30:28:ce:76:f1:37:21:
8f:7d:e1:d1:5c:e1:fa:a1:74:b3:f8:31:8e:35:cd:
f0:7d:9e:7c:da:64:e0:35:db:ca:2b:06:49:77:1e:
cb:81:b1:eb:dc:b9:c8:df:b3:1f:58:86:f8:67:17:
3d:38:9a:ae:20:9f:1c:85:17:c3:76:b4:49:86:f5:
d7:45:a1:6e:bd:70:9b:6d:b0:d7:56:20:6a:fe:a8:
e9:00:42:46:a8:65:a4:53:11:e4:fa:40:42:88:55:
08:0f:74:7f:3a:ea:eb:70:43:11:da:76:ae:3a:44:
b4:30:97:ba:b8:02:82:ae:1c:a4:2f:44:91:77:62:
34:87:52:3d:80:c3:56:c8:85:1c:75:00:54:36:64:
22:36:80:7b:eb:76:de:d6:68:15:31:12:35:e1:41:
b5:f6:aa:3f:07:58:91:20:72:dc:fb:80:a1:0a:84:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:74:01:AB:A9:C0:91:B1:71:B1:DC:9F:85:2D:DE:F2:DF:6A:90
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sht0AaupwJGxcbHcn4Ut3vLfapA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0a:d8:77:10:39:cc:e3:ac:c1:fe:11:02:c1:09:43:b9:c5:
57:20:96:b3:2e:fa:e4:5c:40:b7:03:d0:26:c0:0f:a5:3d:75:
b2:81:7e:e7:02:45:e4:55:fb:d5:a2:42:55:05:a1:50:60:70:
7d:8f:e4:a5:71:b2:8b:56:09:ec:b2:95:3e:0f:50:ef:8f:14:
d0:f1:21:4a:8c:28:1a:80:a1:80:b4:89:9e:16:67:fd:04:88:
40:38:8b:d4:7f:73:e5:3a:3a:cc:30:96:c3:66:49:b8:a8:da:
83:04:5e:4d:7e:ef:43:ee:f6:e1:fd:fd:93:f0:d2:c1:43:39:
06:87:0c:9a:71:db:5d:b3:b2:90:97:a8:c6:ba:66:7e:ca:e3:
3b:01:32:b8:46:3b:be:62:45:45:87:85:dd:cd:1a:a9:2f:06:
9e:32:a7:aa:59:e5:54:6b:d7:e3:db:25:5b:63:80:4e:3c:ad:
0c:ac:0f:44:f9:90:b8:40:4f:15:77:5a:a4:12:41:d6:5a:8e:
dc:4c:e0:ab:fb:5f:65:c6:57:ff:19:16:d2:62:33:1e:e1:21:
68:7a:be:f7:e9:c0:db:49:1a:2f:e9:b8:9a:ed:0b:2a:91:f7:
40:81:ed:56:7b:6a:09:8f:08:aa:28:cf:3a:8a:d3:7d:e2:24:
61:5a:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:57 2025 by rpki-client