Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/Tez0gVukDQuIbRGmJNq9alnoa7o.roa
File: Tez0gVukDQuIbRGmJNq9alnoa7o.roa (raw, json)
Hash identifier: 2kdabgjGhCDpOFn732QqXVu2sm0AY8sbwFONJ/R8zmc=
Subject key identifier: 4D:EC:F4:81:5B:A4:0D:0B:88:6D:11:A6:24:DA:BD:6A:59:E8:6B:BA
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 05DED5C9
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/Tez0gVukDQuIbRGmJNq9alnoa7o.roa
Signing time: Sat 01 Jan 2022 10:54:40 +0000
ROA not before: Sat 01 Jan 2022 10:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39702
IP address blocks: 194.127.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98489801 (0x5ded5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Jan 1 10:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4decf4815ba40d0b886d11a624dabd6a59e86bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:ff:3a:a2:86:58:bf:78:93:35:82:42:22:
6a:99:b0:7c:89:d2:6e:e2:a5:03:e4:2b:51:e4:cb:
b3:03:85:63:e3:ae:54:18:1e:e6:72:ba:44:df:b1:
df:c7:d6:88:97:f9:9b:d1:a7:2a:01:06:72:7e:ff:
38:b9:e0:6e:52:a3:2e:80:c1:e9:ae:f5:be:d0:e4:
25:a7:05:ac:7a:3d:ef:f2:6b:ab:7a:db:b8:1b:3c:
a5:ab:a8:12:64:68:3f:9a:24:97:b6:f3:b5:e7:0e:
63:9a:ef:db:a6:26:34:dd:e2:82:ce:6c:4d:89:09:
3b:9b:09:d0:7c:04:e0:6f:68:2c:08:53:13:d8:cd:
98:5b:c5:ef:75:c6:33:84:db:cd:3a:51:30:96:4d:
80:e0:17:2f:a6:14:f5:b1:69:2d:be:c2:8d:e4:d6:
47:f3:24:fc:c9:a6:a3:76:3f:60:8d:2a:ef:3e:38:
56:ee:5b:6f:09:8d:cf:81:4e:d0:a9:b6:a8:6d:39:
9a:de:b2:57:2c:83:c6:58:14:f3:a0:11:6f:7e:0c:
6e:df:7c:ca:2d:f3:58:3c:42:0c:79:5a:f2:dd:77:
72:e4:30:ae:30:3e:69:7d:59:6d:b5:7b:d6:e6:c1:
e8:6c:48:e9:d2:1e:32:bd:91:ef:c7:e3:72:f3:99:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:F4:81:5B:A4:0D:0B:88:6D:11:A6:24:DA:BD:6A:59:E8:6B:BA
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/Tez0gVukDQuIbRGmJNq9alnoa7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.208.0/22
Signature Algorithm: sha256WithRSAEncryption
31:65:d7:b2:9f:f3:7f:e5:89:d5:90:2a:9c:f1:bd:8f:cf:fc:
25:8c:2c:bf:24:5e:0e:1c:84:4a:58:d0:1f:97:78:68:b2:b5:
83:c0:53:1f:92:ba:71:e1:96:3e:af:27:18:3e:c2:69:33:c4:
b1:df:86:ae:29:52:66:6a:b2:61:f3:c5:33:fa:5d:37:65:e9:
72:dc:b4:39:7a:bb:04:e8:71:22:c4:c0:11:94:e2:5c:e4:61:
c5:98:ba:f3:5e:f4:eb:5c:7c:a7:64:2f:c4:42:90:5f:a3:bb:
85:27:76:50:02:d4:5f:d5:8f:4d:0f:24:01:51:79:1f:1e:1a:
5f:dc:38:ff:72:87:1f:65:93:77:04:f2:da:5f:a2:68:2b:2c:
98:5e:e8:7d:ec:0d:d6:64:2a:61:42:82:0e:b6:b1:ef:56:18:
f2:ea:41:61:95:b3:ef:18:c8:be:02:b6:e8:46:c2:1f:c6:2d:
1c:08:e8:e3:6e:22:1e:09:cf:19:88:d4:0d:de:e0:40:e5:c8:
11:52:c1:2f:3f:73:2c:6b:bd:45:8e:79:15:56:b4:9d:ba:b3:
8b:46:d5:73:03:2a:e8:dc:70:2b:24:15:1b:b9:eb:5b:0d:84:
7c:b5:5d:bc:07:4d:e9:57:5c:6c:b4:c8:43:23:3f:a8:0c:03:
da:a5:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:25 2025 by rpki-client