Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/SjdNcxumdRDl7QZuR_zLsIX7Oj0.roa
File: SjdNcxumdRDl7QZuR_zLsIX7Oj0.roa (raw, json)
Hash identifier: MYNMo01WU4bx5jZkfWHGijr4txH/gttDt/zrvYyS7cQ=
Subject key identifier: 4A:37:4D:73:1B:A6:75:10:E5:ED:06:6E:47:FC:CB:B0:85:FB:3A:3D
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 186192AC
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/SjdNcxumdRDl7QZuR_zLsIX7Oj0.roa
Signing time: Sat 01 Jan 2022 06:56:57 +0000
ROA not before: Sat 01 Jan 2022 06:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 192.124.243.0/24 maxlen: 24
141.48.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409047724 (0x186192ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jan 1 06:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a374d731ba67510e5ed066e47fccbb085fb3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:33:77:ae:fe:8d:c8:6a:78:2b:fc:02:f7:1b:
ed:f4:80:2d:37:bf:da:6d:e6:19:32:d6:03:bf:34:
1d:93:e6:8d:1d:27:6b:9e:92:d1:1a:e6:fd:30:3f:
e9:3d:d1:9f:80:f6:e5:29:9b:1c:53:10:a5:61:3c:
fe:f2:47:d8:66:03:b2:a7:fd:e9:59:84:d3:ca:db:
a4:b0:32:9b:df:6b:67:cd:2c:b0:9c:20:99:70:72:
07:8e:a4:fd:04:e2:70:7a:b7:92:e4:69:2d:e4:ea:
9f:72:1d:fd:1b:10:a7:64:f2:1c:b0:5f:2c:08:57:
91:4b:81:3a:e9:d4:d4:05:9f:07:94:42:85:80:49:
e0:ef:7a:16:aa:af:32:d7:15:be:50:0d:c3:0e:26:
ea:c8:e1:f9:f2:0c:c5:9f:54:54:4a:6b:69:2b:dd:
d0:88:a1:3f:ad:e5:eb:3b:48:94:c3:fc:8b:5c:85:
29:1f:fa:43:69:31:e8:e2:8d:35:48:94:0b:cc:b8:
4b:1e:00:08:31:53:ed:c1:aa:ac:91:a9:15:4e:5c:
b7:c4:f5:20:65:a7:2e:c8:32:81:37:b0:a1:0d:e6:
29:ff:c4:38:36:fb:1b:e7:e7:a6:8e:f4:26:8b:96:
63:0c:8c:16:54:ca:5a:31:ab:a1:d0:13:cd:f6:0f:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:4D:73:1B:A6:75:10:E5:ED:06:6E:47:FC:CB:B0:85:FB:3A:3D
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/SjdNcxumdRDl7QZuR_zLsIX7Oj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.48.0.0/16
192.124.243.0/24
Signature Algorithm: sha256WithRSAEncryption
67:41:6d:65:e4:c5:45:62:0c:20:15:33:e7:4e:25:f9:6b:fd:
f5:d1:53:7c:55:5d:8e:0b:73:09:71:ea:47:c2:51:00:8b:3b:
9a:7d:80:0e:b3:7b:77:fc:f6:0e:60:57:4c:e0:a9:50:c2:88:
78:7e:1a:77:be:10:99:3f:1d:ef:e9:5d:85:f7:86:5d:c6:b2:
7f:eb:42:12:cd:6b:d0:67:29:53:08:3c:f5:4b:de:3b:bf:d1:
57:0a:61:00:29:ce:ed:60:c3:e5:62:ab:b2:98:f0:0b:ca:21:
65:14:c6:98:e5:4a:13:6c:9a:77:65:56:a7:d4:00:56:3b:c5:
ee:0f:70:34:b9:20:84:94:31:50:8f:4d:fd:ff:df:28:04:7f:
91:71:2b:89:98:16:77:c6:ef:97:27:7d:43:36:f9:7b:03:90:
02:72:d7:6d:5f:9e:40:9e:6f:6e:78:5a:2f:ff:57:7e:41:2c:
df:2d:6c:94:f3:9d:77:d3:c2:78:d5:51:14:1e:1a:c4:e3:42:
9c:cd:44:41:38:59:05:e0:1b:f6:7c:7c:5f:ae:dd:a9:99:8a:
73:f5:a3:b7:2a:ae:3a:03:d6:db:cf:2b:74:1f:f3:cf:42:ad:
cd:58:88:aa:c7:7b:7d:62:cf:b3:be:8c:05:6e:23:ec:4d:7f:
e0:05:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:19 2025 by rpki-client