Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xGaMOU_KjVICYN4rcugyVcmeydI.roa
File: xGaMOU_KjVICYN4rcugyVcmeydI.roa (raw, json)
Hash identifier: sZjQMqU2OdJt4Uw8rmgc2jWp+0I2uSNPxcHKQ5LcMmg=
Subject key identifier: C4:66:8C:39:4F:CA:8D:52:02:60:DE:2B:72:E8:32:55:C9:9E:C9:D2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0EEB4752030F2E2B17CFE0916131
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xGaMOU_KjVICYN4rcugyVcmeydI.roa
Signing time: Sun 01 Jan 2023 13:35:07 +0000
ROA not before: Sun 01 Jan 2023 13:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199802
IP address blocks: 194.209.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:0e:eb:47:52:03:0f:2e:2b:17:cf:e0:91:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4668c394fca8d520260de2b72e83255c99ec9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:eb:ad:7f:3b:8a:83:99:d5:85:a8:84:da:
52:38:fa:5f:e2:cd:4a:0e:4b:eb:e4:49:f1:61:d7:
cd:85:55:44:4b:34:08:af:7a:b7:64:a0:0d:3c:ca:
a7:aa:ba:d1:a5:60:0f:4d:02:95:8f:22:38:cd:4e:
53:a5:3c:fe:12:2c:c1:4f:47:2b:07:fc:98:fd:e0:
60:90:2c:eb:7a:e0:25:f0:db:35:55:0c:8a:0a:d5:
3c:8a:95:46:66:88:31:3a:29:9f:a6:e4:a1:62:92:
b2:71:1c:b4:41:d3:ef:45:50:2c:5f:f0:fb:23:69:
7d:2b:df:f3:dd:79:72:68:88:2d:67:9b:dc:76:13:
8c:da:21:b9:0e:b3:3c:64:47:32:f8:87:ef:d9:30:
bf:ad:c7:27:68:cb:c4:37:2d:1a:f0:6b:96:0a:19:
5a:68:ed:41:8f:0c:72:21:6f:52:16:4f:c0:96:2a:
40:35:05:1f:5f:16:cb:e8:76:2a:b0:16:c7:f1:67:
81:9d:c5:16:6a:82:64:53:fc:10:0a:a4:b2:c3:c1:
00:61:3b:6b:d4:44:df:99:ec:fd:1c:a5:13:d1:28:
30:ba:ad:7b:6b:fc:75:3c:d3:9b:c3:05:4d:40:85:
99:26:c0:f0:b5:04:b5:4d:fa:e8:18:28:ef:43:37:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:8C:39:4F:CA:8D:52:02:60:DE:2B:72:E8:32:55:C9:9E:C9:D2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xGaMOU_KjVICYN4rcugyVcmeydI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e2:d8:09:4e:2e:70:fd:1c:d2:3a:9d:fa:d8:ba:21:c1:6e:
d0:70:cb:1a:68:88:28:d2:ae:c7:23:b2:19:cc:95:94:56:09:
6c:68:f2:ac:30:be:3a:84:13:42:0c:a9:be:20:6b:00:23:c3:
28:a3:10:b7:14:27:35:f1:86:bd:da:98:6a:00:e2:01:c3:e3:
df:b8:85:08:99:bf:f5:bc:04:d7:0d:a7:c7:43:01:9e:0d:5f:
9f:42:3b:ec:57:b5:f0:0e:01:b7:1b:92:33:1a:99:52:b4:c3:
3d:8c:bc:08:74:52:7b:11:4d:e0:d3:78:a6:d0:37:f6:ba:9c:
c3:18:01:a2:46:4d:3c:ee:56:23:6b:62:73:81:ad:eb:21:cc:
d3:c7:32:09:da:32:28:26:a8:2b:15:c7:e0:74:ec:8f:ff:e8:
f7:7b:3f:4f:50:1c:22:f8:e3:1a:f2:18:0a:05:0d:a8:29:c6:
80:a0:e7:6d:f1:88:2b:c7:54:e7:e4:30:72:65:ae:23:0a:af:
ce:dc:df:24:99:bf:0f:4a:d6:3e:84:8d:25:0e:93:00:53:3d:
c5:cd:fd:5c:30:55:7b:e3:7b:0f:6a:18:b0:82:d0:67:82:1f:
e3:08:ba:58:1e:f2:d8:34:0e:b3:c0:5e:ed:3c:80:da:a7:03:
bd:41:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:53 2025 by rpki-client