Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/oTeGnf556o6asg16m2VFOEq8V_M.roa
File: oTeGnf556o6asg16m2VFOEq8V_M.roa (raw, json)
Hash identifier: NFUYkoxhJspxpCr9ZCFCcXT65BsUZ3kJiZixB761AV4=
Subject key identifier: A1:37:86:9D:FE:79:EA:8E:9A:B2:0D:7A:9B:65:45:38:4A:BC:57:F3
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 05639500
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/oTeGnf556o6asg16m2VFOEq8V_M.roa
Signing time: Sat 01 Jan 2022 16:07:41 +0000
ROA not before: Sat 01 Jan 2022 16:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29353
IP address blocks: 194.13.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90412288 (0x5639500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Jan 1 16:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a137869dfe79ea8e9ab20d7a9b6545384abc57f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:b4:b1:8e:e9:e2:0c:23:b4:5e:b6:37:0f:
38:29:16:23:e8:6c:9d:0c:50:3d:89:a9:c4:a8:91:
07:01:ed:ee:17:5b:24:63:dc:04:18:75:f4:aa:2f:
9f:9d:cb:66:4d:7e:d4:82:a3:bd:4e:5c:37:2e:a9:
13:5c:c1:f2:b8:3f:b0:40:07:ad:7f:ed:59:3d:81:
6f:8f:ba:7e:e1:ec:cd:4c:c1:27:8a:7c:f8:b1:95:
83:32:b2:88:35:1b:9d:f3:a2:91:ae:d2:f9:fb:50:
e8:f4:c9:86:f2:4b:9f:d2:94:28:aa:5f:0f:c1:11:
1c:bd:b4:d0:10:56:db:fb:ef:56:d8:b5:fd:10:83:
a9:86:b1:b9:92:56:a6:3a:3d:a7:82:26:c2:7b:f3:
52:0e:ad:28:b9:0c:a9:9b:ec:64:9d:04:d3:d5:a9:
20:83:bc:54:98:a4:ed:ad:5c:86:e6:2b:45:b0:04:
a0:6a:78:dc:1d:6d:b3:9a:66:51:08:38:71:c9:3d:
fb:58:7a:8a:80:f6:4c:9a:36:35:70:ba:fa:d5:3e:
ac:97:cb:96:80:01:15:e5:a6:3b:9f:42:f2:f3:c0:
ab:a5:12:80:0f:76:3e:8d:b9:83:5a:35:43:43:9c:
1c:21:bd:0c:e3:7d:3a:7c:e4:8c:4f:30:df:59:fd:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:86:9D:FE:79:EA:8E:9A:B2:0D:7A:9B:65:45:38:4A:BC:57:F3
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/oTeGnf556o6asg16m2VFOEq8V_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.111.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6a:ab:a7:7e:9b:84:05:35:73:82:30:9a:df:ea:17:d5:82:
40:c7:d2:c6:11:cc:14:5f:13:01:20:60:28:0e:3b:6c:06:3e:
65:5d:5d:d9:a5:3d:4d:ba:8e:fa:68:a8:e4:85:9e:44:63:46:
38:cf:ef:a8:cb:67:c4:de:6a:8f:9f:f7:35:dc:0a:d9:23:e2:
21:83:7f:1f:51:8c:da:80:44:39:36:e1:c4:6b:6e:7a:c3:d7:
54:a2:74:e5:53:53:5f:6b:3a:f6:e0:fa:cf:86:e5:aa:d6:fa:
2e:d6:31:36:ed:8a:fa:a7:f3:4a:f4:7f:21:7f:a1:6b:8c:a0:
7b:51:ac:5b:ea:3c:05:24:67:c1:32:1a:b5:18:fd:91:63:84:
6a:91:bf:20:41:6b:2f:30:b8:a4:56:98:5c:2f:bf:9d:24:1d:
2d:d3:b6:98:46:93:ab:fd:9e:2f:f1:65:4c:92:47:b2:1b:84:
ae:aa:58:df:2b:a3:49:62:e0:46:f2:13:3a:cd:36:83:37:0d:
8f:e4:f6:ec:f3:99:d2:5d:f3:22:fd:93:db:07:64:a9:4f:f5:
7d:58:e9:e8:5f:c3:50:a2:65:a4:aa:a9:e1:54:f3:6c:94:47:
aa:c6:ff:bc:45:5b:c2:97:f6:a9:1d:6f:84:ff:67:df:3a:39:
d3:88:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:13:08 2025 by rpki-client