Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/5C4AerS9VXBfrGatlKg_oQ5MKIg.roa
File: 5C4AerS9VXBfrGatlKg_oQ5MKIg.roa (raw, json)
Hash identifier: 4t5zqzTgx9IXPW5aRcbrT39ybQtniZtb3TV13O2JoYg=
Subject key identifier: E4:2E:00:7A:B4:BD:55:70:5F:AC:66:AD:94:A8:3F:A1:0E:4C:28:88
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 024837
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/5C4AerS9VXBfrGatlKg_oQ5MKIg.roa
Signing time: Mon 30 May 2022 08:17:13 +0000
ROA not before: Mon 30 May 2022 08:17:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149559 (0x24837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: May 30 08:17:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e42e007ab4bd55705fac66ad94a83fa10e4c2888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:9b:06:6d:50:8e:3e:fc:ec:1e:3a:f5:8b:
5c:cd:fb:b8:7a:44:dc:c7:99:1d:56:eb:05:cf:02:
47:9e:61:17:d5:72:e4:fc:2e:eb:fb:0e:b5:4e:6a:
df:2f:d5:fe:74:52:12:55:31:38:ef:ef:31:d9:da:
5b:48:62:13:d1:39:a5:ad:4c:ba:5b:24:4b:25:51:
2c:04:38:b8:d1:45:63:0d:0d:91:01:2b:d5:67:5c:
3e:c2:2a:4a:1b:91:59:58:32:87:14:bb:12:36:7d:
4e:ac:06:63:c4:ff:3c:0a:47:98:19:02:93:8d:fa:
9d:f3:6f:58:e6:f2:01:f4:d7:ad:cf:77:fc:63:bb:
45:10:49:c7:e0:2c:cd:87:7c:25:df:f7:f0:fb:d5:
b1:9a:a7:0d:fb:34:ec:9f:a3:8f:53:b0:95:03:8a:
a5:37:a7:ef:b0:d8:02:38:fb:46:51:04:98:1d:a1:
25:ca:46:7a:45:c7:48:32:87:ac:89:16:30:cd:48:
ad:c6:5a:a0:76:db:67:4f:08:eb:6d:7e:77:af:cf:
7d:68:ee:45:74:ab:3d:b7:33:0e:e7:a8:e4:ad:de:
28:06:50:39:97:b1:1b:ca:1d:5e:21:34:58:56:1e:
2d:a7:de:4a:84:33:94:33:ff:3c:78:49:f3:d1:7b:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:00:7A:B4:BD:55:70:5F:AC:66:AD:94:A8:3F:A1:0E:4C:28:88
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/5C4AerS9VXBfrGatlKg_oQ5MKIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c9:e7:a8:cb:04:b6:32:54:8c:00:7b:43:f1:14:ed:09:92:
a5:69:87:f7:29:af:e2:10:35:f9:db:d7:55:a3:04:84:6d:3b:
c2:96:0b:15:15:33:b3:83:d0:40:e0:95:a5:55:29:04:05:ca:
dc:3f:ab:ed:90:b7:da:20:8d:e1:f6:81:40:fe:55:28:4e:0c:
f5:76:52:ca:af:ce:05:19:b3:89:14:57:87:2f:2a:ff:56:31:
b1:f4:46:1d:65:6a:32:98:12:04:5d:c4:88:1a:a6:96:75:11:
ab:5a:76:c3:b3:2b:0b:a5:c1:75:c6:86:9e:55:5b:50:88:e4:
1d:13:00:2d:b0:17:57:cc:97:f5:72:8b:8e:90:c4:bf:ef:a1:
1d:0b:ff:07:a6:0f:c6:cb:da:8f:0b:6d:b6:77:7d:d6:b1:ac:
83:f4:18:c0:cb:9f:2c:80:65:1d:d5:96:49:51:b3:e5:d6:3c:
ee:64:37:ef:1b:51:2c:6d:b4:be:bc:e8:7f:54:f3:98:ca:85:
8a:5f:f7:65:89:c3:a3:37:d5:d6:ce:ca:88:c3:dc:da:22:1c:
89:18:45:d4:7b:ea:a9:c1:96:99:99:37:fa:dd:17:d5:15:d6:
ff:67:95:e3:56:98:25:69:49:0c:f8:df:5b:92:0c:86:05:18:
4d:15:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:33 2025 by rpki-client