Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/lunDQtSC4iMjtI0pNgl9nr4duY8.roa
File: lunDQtSC4iMjtI0pNgl9nr4duY8.roa (raw, json)
Hash identifier: 7MrI0k1m52ioWLUlc+p8UlQO8vJ6hpJ+LcPAFoWv6Rw=
Subject key identifier: 96:E9:C3:42:D4:82:E2:23:23:B4:8D:29:36:09:7D:9E:BE:1D:B9:8F
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 018626897BF6D52D132196AA3BD4F410C44F
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/lunDQtSC4iMjtI0pNgl9nr4duY8.roa
Signing time: Mon 06 Feb 2023 11:43:09 +0000
ROA not before: Mon 06 Feb 2023 11:43:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62119
IP address blocks: 194.6.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:89:7b:f6:d5:2d:13:21:96:aa:3b:d4:f4:10:c4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Feb 6 11:43:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96e9c342d482e22323b48d2936097d9ebe1db98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:11:a9:db:fe:b2:a9:63:04:6b:45:d3:54:
f5:5b:ab:b5:d8:c8:16:17:55:a3:36:ef:e2:1d:74:
ed:64:ee:c0:85:2d:e3:61:74:e1:40:37:ed:39:f1:
8f:00:98:31:fc:8a:33:ba:55:8f:75:7c:8e:52:7a:
cd:a5:39:81:54:56:16:5b:56:fe:47:2c:01:cd:1a:
9b:d4:15:4c:01:02:c2:54:c3:94:d1:a9:5f:b4:db:
38:10:f4:41:e7:07:19:a9:26:bb:e3:5f:6b:ea:56:
cc:00:17:6f:57:24:c9:e6:da:61:2d:8e:92:ad:9a:
e0:62:e6:9b:56:f1:e7:45:a6:5b:b3:1b:46:6b:30:
c7:97:35:6b:0a:c1:74:02:e5:5f:a8:09:ba:98:ad:
09:0e:43:7b:4d:2c:dd:35:be:50:5b:19:2f:6e:5e:
b3:82:80:3c:75:47:6b:57:67:b0:36:7b:36:31:46:
e8:ad:29:26:c9:66:e2:b6:34:cd:37:b9:e6:60:02:
ce:2a:33:2f:5a:2b:73:1f:d6:f1:e4:0c:c2:2e:97:
6b:fa:aa:5d:eb:d8:06:e6:bf:31:37:49:79:c6:4c:
d2:ec:09:68:b5:ea:5e:ec:e5:76:cf:54:b8:a5:5d:
de:97:d3:e5:3c:83:63:27:d5:a9:cc:37:e2:a1:d6:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:C3:42:D4:82:E2:23:23:B4:8D:29:36:09:7D:9E:BE:1D:B9:8F
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/lunDQtSC4iMjtI0pNgl9nr4duY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:5e:e9:b3:c7:ec:98:b7:98:b4:79:e5:5d:36:ce:a2:cd:
3d:6f:01:53:2c:e1:4b:09:12:62:1e:22:13:dc:23:b8:2b:28:
6f:16:98:89:33:79:fb:49:1e:12:74:21:37:ef:7d:32:c0:bc:
cf:c9:f8:65:e5:b7:b6:da:39:b4:32:25:db:6f:61:17:c2:4e:
94:8c:df:08:e0:d1:02:6c:d6:a3:ba:f9:07:43:81:5d:21:96:
1a:48:ab:73:83:1f:cb:43:b4:f7:e3:b5:c0:ce:b7:17:dc:dd:
a3:f9:3d:ed:13:fb:4b:dd:e2:65:24:c1:25:78:94:31:93:06:
48:ca:09:91:d7:6d:a7:4e:64:09:68:81:1e:d1:71:33:06:27:
75:65:65:49:52:b0:a3:32:e4:7c:ac:3e:e7:75:12:72:ba:5b:
01:b4:b4:32:e1:ea:96:7e:fc:3f:9a:a3:a1:b5:cf:e8:4f:5c:
bf:0a:9c:e9:24:00:59:94:9d:b9:fd:b0:49:ea:96:79:22:ec:
87:a1:67:a4:2b:d2:43:f5:b2:4b:1a:f5:d0:46:e2:e0:90:2f:
d5:35:63:ee:2e:4a:31:38:c2:c8:80:de:5f:6e:c5:c8:33:ae:
3c:1d:c0:c9:3e:27:14:4e:45:8d:04:89:2b:c1:a5:c4:a0:6f:
5c:e6:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:43 2025 by rpki-client