Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/DAl18rKUUyeDghmog1fsnwJB_yA.roa
File: DAl18rKUUyeDghmog1fsnwJB_yA.roa (raw, json)
Hash identifier: tM4y9iqp6w1bMhsBCqn+0LbdEXTXm5mLe2S1rnpruns=
Subject key identifier: 0C:09:75:F2:B2:94:53:27:83:82:19:A8:83:57:EC:9F:02:41:FF:20
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 09ED1DDA
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/DAl18rKUUyeDghmog1fsnwJB_yA.roa
Signing time: Sat 01 Jan 2022 08:01:06 +0000
ROA not before: Sat 01 Jan 2022 08:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 194.5.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166534618 (0x9ed1dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 1 08:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c0975f2b2945327838219a88357ec9f0241ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:d8:e1:85:b9:71:ef:c9:e5:79:b8:24:f8:
52:78:4c:9a:62:07:02:cb:28:c7:a0:df:a1:8a:f1:
b2:44:be:ce:c8:fa:fd:e4:b1:04:f0:68:9a:9f:e6:
44:af:e5:81:d6:d9:eb:80:56:09:9a:e5:5c:9d:34:
4f:68:d5:e1:53:b6:7a:a9:f2:dc:63:56:e8:08:9c:
66:8d:cc:25:60:64:f9:7b:61:39:d4:e7:bf:b2:bb:
9f:4b:fc:e8:31:a4:bc:b9:57:88:e3:bd:18:d6:4e:
19:22:33:a6:5c:c5:f8:7e:3a:1d:c4:f9:29:f8:56:
ea:7d:78:a1:5e:74:e0:7c:e5:71:a3:43:38:94:a0:
8e:8a:6d:8d:88:3f:5f:85:d5:46:da:dc:ea:5c:4e:
11:6d:c3:5f:74:db:81:8c:2d:74:22:5f:01:75:df:
a4:eb:8b:a4:64:2a:18:c4:28:e1:d4:f3:71:6d:0d:
15:6f:12:3e:b9:fc:23:1b:55:08:86:b8:9b:c6:69:
a1:bc:1e:a1:2d:0d:15:d5:fc:ef:68:0e:c1:d5:6d:
0b:02:55:80:5b:31:96:1d:d1:44:4b:d3:60:03:9d:
7f:dc:0c:57:44:48:6a:b3:15:24:40:3e:ba:6e:b7:
5e:4c:06:16:30:dc:b9:1a:db:91:9b:8a:06:2e:b3:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:75:F2:B2:94:53:27:83:82:19:A8:83:57:EC:9F:02:41:FF:20
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/DAl18rKUUyeDghmog1fsnwJB_yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1d:b3:9d:ae:cf:6c:7d:de:02:dc:97:4f:cb:20:9a:57:dc:
cc:64:9a:76:8b:90:e3:59:68:b7:da:5f:fc:fb:59:92:e0:51:
87:64:2b:a4:d3:b5:8d:ac:85:8e:05:8f:3e:8b:ad:32:cb:1e:
e4:27:f6:14:57:8c:8a:6e:b2:61:96:78:a4:35:1c:d8:aa:53:
ec:3f:d8:f6:9c:f0:bb:7b:71:80:39:18:62:03:55:c5:d5:c9:
e2:32:34:09:be:51:72:ba:52:f8:d4:86:2d:63:8c:ea:25:ab:
e5:84:bb:20:2c:39:93:d4:de:69:6a:6e:14:07:7a:17:20:18:
55:2e:a3:65:56:60:d0:ff:e0:ae:49:8a:ad:cd:21:c0:7a:1d:
0d:6d:65:70:1c:14:75:6c:71:9d:1e:ea:6b:3d:a6:74:1c:86:
cf:93:79:6c:97:b2:6a:c7:bb:f7:3e:43:2f:5b:12:0e:cc:ef:
fb:42:38:00:de:cf:78:ed:45:14:7d:1e:7e:69:e5:65:9e:34:
95:74:8a:84:63:9c:19:47:d5:47:18:86:45:03:57:73:cd:fd:
57:55:71:1c:4c:1b:d5:b5:58:55:c4:6c:7f:85:02:23:05:ef:
db:7b:c8:27:0e:6b:cf:c2:c1:c0:76:a2:f1:0d:1b:14:b6:f6:
60:74:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:57 2025 by rpki-client