Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa
File: kO_lse2A0_U1B1CiU_flfC1to1w.roa (raw, json)
Hash identifier: x8UTSEGCqcqZVToQlwVkbGVPA6KPPvTySvxlgi3Hen4=
Subject key identifier: 90:EF:E5:B1:ED:80:D3:F5:35:07:50:A2:53:F7:E5:7C:2D:6D:A3:5C
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 0930D94E
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa
Signing time: Sat 01 Jan 2022 12:03:12 +0000
ROA not before: Sat 01 Jan 2022 12:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41294
IP address blocks: 194.176.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154196302 (0x930d94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Jan 1 12:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90efe5b1ed80d3f5350750a253f7e57c2d6da35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:4b:70:36:05:1e:e5:55:4a:4c:0f:e2:1d:
e1:25:2d:ed:10:31:cc:a4:58:37:48:38:87:28:bf:
07:b7:c7:93:36:19:3b:86:24:2d:03:be:84:b7:83:
b9:85:56:19:34:fc:92:33:e1:b3:03:a9:45:a6:63:
69:e3:74:d9:5e:19:a6:1e:cf:4b:08:dc:55:df:56:
00:71:28:9a:0c:91:1a:5a:1b:4b:e2:13:54:9f:7f:
38:0a:4e:87:a2:4d:df:38:09:d5:6f:1e:ad:ec:9d:
fc:b9:ea:37:67:c9:11:ab:54:ae:48:61:0b:dc:af:
65:35:b0:74:b0:61:b3:9b:66:e6:cf:76:e5:36:73:
ab:43:d5:8b:90:bd:a4:ce:5b:78:a2:df:8a:68:e5:
ea:56:85:c0:c7:cf:fa:db:40:2d:cd:29:8f:c8:5d:
c1:fd:f3:55:bd:9b:4b:c2:91:60:37:e1:31:38:a6:
ea:5c:43:6e:0b:86:dc:35:e0:de:93:b3:80:0a:f1:
cd:c5:57:74:30:d6:aa:e7:e3:94:ab:52:dd:79:cd:
2e:81:87:a2:e9:4b:49:51:d7:23:e2:db:fc:2f:75:
f9:d1:e8:f3:5e:02:2a:6e:dd:57:1c:b5:40:62:1f:
65:cc:24:b7:3b:06:67:c3:b3:88:b0:35:f2:b2:f5:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:E5:B1:ED:80:D3:F5:35:07:50:A2:53:F7:E5:7C:2D:6D:A3:5C
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/kO_lse2A0_U1B1CiU_flfC1to1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.104.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f0:1e:59:a1:8c:ac:f8:ad:b1:53:bb:39:0d:af:00:b8:e8:
62:77:ca:3b:2f:85:64:2d:ce:3c:e4:1b:34:13:65:98:53:27:
3e:ab:a1:2a:a2:40:15:eb:85:49:23:88:ff:09:17:18:31:98:
81:0f:f7:5e:19:e7:23:c2:2f:4b:0f:69:38:1a:b9:9d:34:32:
ef:83:42:6d:a6:5b:4d:17:e8:d3:eb:39:9e:5a:d9:5d:02:d9:
df:16:8c:9f:3d:38:01:cc:74:f5:fb:cc:c1:e2:08:20:45:51:
00:72:f3:8b:a6:95:44:fc:cc:21:07:e4:1c:0c:01:2b:7d:11:
23:ab:5d:0c:a2:30:3c:67:55:ec:9a:b5:09:a7:fb:56:df:1f:
07:38:5c:6e:25:e8:f6:8c:f5:f8:45:b9:d4:69:b3:f4:04:3f:
51:65:3d:28:10:ab:ee:ca:2a:c5:92:42:8e:46:58:78:16:16:
26:e8:f7:2a:19:05:22:82:a3:69:0b:17:4f:d6:f1:77:f0:21:
d5:64:79:12:57:a1:ea:07:96:64:df:5f:04:89:cb:a6:e3:8e:
d7:a7:30:33:9f:22:54:ca:cb:a8:95:95:b8:f0:11:af:ff:e7:
0c:cf:55:15:e9:87:44:4b:71:68:f3:3b:e4:0a:c5:ee:2d:43:
f4:7f:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:49 2025 by rpki-client