Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa
File: tceyzKS-nlxsHHy9q_O46ykO_rU.roa (raw, json)
Hash identifier: tBjIiFqPmDHFNzPeKSU/Lu6FYH9ISk5xN1iYmiUcisM=
Subject key identifier: B5:C7:B2:CC:A4:BE:9E:5C:6C:1C:7C:BD:AB:F3:B8:EB:29:0E:FE:B5
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 01856DD3F19F64686B82859B077821B4BF74
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9136
IP address blocks: 194.39.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f1:9f:64:68:6b:82:85:9b:07:78:21:b4:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c7b2cca4be9e5c6c1c7cbdabf3b8eb290efeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:10:28:37:fb:41:f1:d1:0e:0d:9d:21:49:
f3:32:95:ad:f2:8e:65:52:2c:8b:2c:7f:63:26:f1:
8a:4b:ed:b1:c7:88:34:53:eb:09:70:14:e2:e8:1f:
87:00:12:f3:cd:43:f7:e0:f5:3a:60:28:62:fa:f7:
d9:09:01:8e:48:2f:dd:c8:af:63:52:78:8c:82:bf:
df:7d:b6:45:4f:44:16:a0:53:52:9c:38:82:e9:a8:
2f:16:91:f1:60:83:3c:cc:3b:55:79:ec:c9:e2:90:
fa:47:48:bf:dc:62:7c:cf:bf:1d:31:21:b4:9e:2a:
d5:d7:a0:d4:c9:07:41:3c:af:c7:5a:7f:a3:d5:d7:
47:27:80:39:03:c0:e7:81:da:ae:29:34:38:23:f2:
59:ca:9f:00:86:3e:36:67:0d:9c:e0:34:7e:87:f9:
b6:f0:0a:5c:61:97:1c:06:db:1a:2d:a8:37:c5:15:
f6:fa:16:64:e5:7a:53:74:01:e9:26:36:c0:28:35:
bf:3c:c3:d6:75:82:1f:ad:8d:de:4e:0e:0e:6a:60:
8e:e1:d6:1b:ff:8b:d8:88:45:86:28:81:a6:d1:b2:
cc:24:19:91:1a:5a:83:c6:65:7b:df:3c:cc:b3:99:
43:3e:e8:75:79:7c:f6:7a:c4:86:20:7e:0a:bf:78:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:B2:CC:A4:BE:9E:5C:6C:1C:7C:BD:AB:F3:B8:EB:29:0E:FE:B5
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.104.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:bf:c5:f1:94:cb:a5:28:b1:f6:ba:4c:04:28:11:88:ce:50:
34:f4:4d:90:fe:e8:a6:16:87:bc:75:2f:5d:83:9b:11:56:74:
f8:d2:c1:5a:26:6b:4f:b8:71:88:33:19:19:25:cf:00:f4:1b:
c3:07:5d:50:91:be:d0:68:1b:93:89:86:25:79:f9:85:dd:e5:
ce:91:7e:5a:d8:b4:78:db:94:24:00:96:09:3a:13:1f:ea:9c:
a5:20:67:01:e4:3d:05:bf:30:98:c0:3a:ee:5a:73:96:15:0b:
21:41:d6:39:f7:78:3e:8d:a1:b4:95:f4:99:d8:68:8c:c9:f3:
ec:2e:8d:1a:b6:5c:06:36:45:26:75:7f:4c:79:04:91:f8:e5:
88:99:d3:06:c9:e0:88:db:d8:93:8a:a9:78:aa:62:28:41:91:
8c:ca:be:9a:d5:a7:1a:00:e6:b5:43:92:13:c0:11:b9:75:a0:
79:42:76:12:7f:dd:5f:a5:b1:7c:36:26:a8:55:58:11:09:23:
38:4f:dd:9c:0f:e4:9c:c1:aa:6b:0e:e4:36:8c:2f:f2:f4:28:
6e:3b:91:38:6d:f5:07:dd:72:1f:e3:34:3b:6e:bc:19:ed:45:
b2:9e:5e:08:5d:5b:f9:de:a7:0e:92:58:14:93:8d:f5:fe:cf:
53:b6:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:45 2025 by rpki-client