Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/D3AYHbH0zV8tBtL5vpmyvEKZlX8.roa
File: D3AYHbH0zV8tBtL5vpmyvEKZlX8.roa (raw, json)
Hash identifier: hsDcM1iLFCNsUYSPeryzC9Sr6CDnqnTLx0Q/KBMi10c=
Subject key identifier: 0F:70:18:1D:B1:F4:CD:5F:2D:06:D2:F9:BE:99:B2:BC:42:99:95:7F
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 4050EBB8
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/D3AYHbH0zV8tBtL5vpmyvEKZlX8.roa
Signing time: Sat 01 Jan 2022 03:56:03 +0000
ROA not before: Sat 01 Jan 2022 03:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5516
IP address blocks: 194.117.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079045048 (0x4050ebb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 03:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f70181db1f4cd5f2d06d2f9be99b2bc4299957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:83:ce:57:cc:f5:a9:73:91:a1:e3:82:fa:
18:04:5f:c7:c1:05:0a:83:d0:1f:03:ef:21:b9:82:
28:ba:9b:97:8a:fe:76:91:74:da:af:d8:c2:d1:4f:
fd:05:57:0d:10:d5:07:fc:9d:20:8e:f3:85:9d:62:
40:73:65:6e:a4:1a:fe:21:5c:03:a8:52:08:0f:d7:
a0:8e:ad:c5:2e:55:cb:c8:a2:40:1f:50:a9:f9:2f:
63:0e:13:d5:fc:8e:61:ce:87:72:28:f0:df:54:2a:
84:48:a4:f9:52:f9:b5:89:3f:d6:ef:01:85:f8:3f:
97:0d:db:75:3c:b1:0d:77:ad:f6:17:a0:f8:6c:4a:
2e:88:10:78:fd:99:65:36:20:7c:37:83:5b:97:9b:
59:ab:46:2d:9a:4c:d9:d3:69:e4:20:dd:16:75:a7:
c2:3d:7c:73:fa:d1:72:01:09:7d:74:f4:9c:3b:1c:
dd:43:0f:c5:16:e9:66:71:94:19:ee:91:62:9c:a2:
c5:12:0d:7c:1b:6e:f4:81:a9:15:52:e3:67:d6:93:
00:dd:f5:6d:71:43:b4:9b:ba:c1:8c:e7:c0:b0:40:
d8:72:1a:3f:fa:bc:08:fc:0d:c3:52:27:51:2c:ac:
70:64:f9:7e:29:af:0a:ef:07:1a:6a:0d:39:f3:28:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:18:1D:B1:F4:CD:5F:2D:06:D2:F9:BE:99:B2:BC:42:99:95:7F
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/D3AYHbH0zV8tBtL5vpmyvEKZlX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f2:ed:72:12:a7:fe:05:71:72:3d:3f:22:24:e7:85:91:98:
f9:0b:49:a9:29:03:c8:a8:ab:87:cb:a9:63:23:7e:96:ae:d5:
4c:4c:0f:75:5b:48:9a:3c:bb:da:97:69:ef:07:77:d9:99:85:
ce:76:6c:09:2e:6f:77:f8:46:5d:0c:b5:0f:51:69:7b:bd:07:
fd:d9:d7:1b:0a:0b:60:96:1f:cb:19:f0:b7:70:e8:54:b1:96:
35:09:45:50:e1:d1:94:70:a0:48:86:08:74:c7:5e:09:52:a5:
23:57:89:e5:65:ba:d2:b2:b0:ec:4c:f5:78:db:40:b1:b6:90:
77:34:ad:e6:de:c0:6b:3f:c2:c0:54:71:ca:50:b3:ab:29:b8:
8c:84:13:1a:7e:24:5f:eb:b0:f3:57:e9:ea:f9:5f:75:77:b8:
a8:75:24:2b:31:1e:59:fd:b5:41:85:85:ba:bc:f3:df:41:27:
c1:c8:ce:66:aa:e7:ca:ad:50:9c:bd:0c:eb:bc:09:7b:f2:c3:
7e:91:d5:de:b7:f8:28:d8:42:de:c6:29:b0:c1:4e:3f:60:0b:
ef:fa:41:ea:07:16:cc:19:bb:cf:fc:6f:c4:54:a7:bd:c4:86:
43:87:14:2b:30:d5:9c:d2:07:80:e6:b6:80:af:c5:63:48:fd:
9b:8d:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:02 2025 by rpki-client