Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/pm8bxfgLSjGeed32bQGxSDwLrEQ.roa
File: pm8bxfgLSjGeed32bQGxSDwLrEQ.roa (raw, json)
Hash identifier: XkWV/dV+hnA9wCatHbvrRCj7txXUcZGNwovq40gcqkY=
Subject key identifier: A6:6F:1B:C5:F8:0B:4A:31:9E:79:DD:F6:6D:01:B1:48:3C:0B:AC:44
Certificate issuer: /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial: 0450CD9D
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/pm8bxfgLSjGeed32bQGxSDwLrEQ.roa
Signing time: Sat 01 Jan 2022 06:52:23 +0000
ROA not before: Sat 01 Jan 2022 06:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 194.56.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72404381 (0x450cd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
Validity
Not Before: Jan 1 06:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a66f1bc5f80b4a319e79ddf66d01b1483c0bac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:86:0b:4d:48:a3:d9:68:eb:d1:e0:ba:ac:
83:cf:8e:08:70:06:b1:3a:b6:ee:47:a5:a7:ae:40:
8f:40:6a:3f:08:fc:d1:f0:90:37:87:5b:cf:0c:05:
b1:f4:f9:df:c4:bb:12:43:74:09:30:2f:33:da:31:
66:fc:79:d6:42:25:6d:d2:c0:13:78:b4:67:f9:a6:
b3:63:4f:74:27:c8:42:57:d5:dc:c6:01:50:c6:71:
4c:92:3c:53:20:7b:5e:7d:a4:6f:ee:0e:bd:10:dc:
ec:f3:00:c7:1c:29:a3:4a:cf:32:08:16:d9:39:90:
24:67:0c:99:ad:d6:1a:18:e2:47:2b:ac:5a:89:95:
8a:b1:b1:1c:ac:62:b6:da:7e:b9:02:78:88:8e:2c:
64:c4:77:b4:f4:ee:3d:84:95:74:fe:b2:58:dc:aa:
79:f6:c7:d8:79:db:8b:d8:78:67:20:1a:f3:74:0f:
14:0d:cb:2d:dd:6d:5c:c0:96:8b:3a:e5:05:46:c1:
1a:02:94:13:a3:fa:11:03:49:b6:0f:f6:ad:c5:3a:
72:19:0c:1e:64:ad:85:56:d0:ae:14:65:55:d7:67:
71:e3:92:18:b2:13:14:18:1d:d8:03:44:47:f0:91:
61:45:ca:0e:83:18:df:e1:51:ec:08:83:2e:12:e4:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:1B:C5:F8:0B:4A:31:9E:79:DD:F6:6D:01:B1:48:3C:0B:AC:44
X509v3 Authority Key Identifier:
keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/pm8bxfgLSjGeed32bQGxSDwLrEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.178.0/24
Signature Algorithm: sha256WithRSAEncryption
68:dc:f0:a2:b4:67:c1:73:e7:02:93:ec:2d:1e:0f:b8:a0:df:
79:70:0f:1e:3d:a3:eb:88:fc:48:5f:e7:1e:54:aa:58:18:44:
33:bd:02:ec:4d:1f:1f:3e:72:0b:b5:f8:29:75:a7:b9:4b:e9:
35:58:22:a6:bc:09:e9:cb:8d:25:4c:49:2d:ae:61:1d:2d:73:
a0:b4:dd:91:b3:b8:98:9b:98:5f:09:70:f4:60:2e:d4:37:e7:
01:37:33:d3:68:7e:77:18:ab:ed:41:11:54:45:4c:4c:b1:99:
bd:50:68:fb:fc:af:8e:b6:36:d0:db:ce:4c:24:dd:60:a9:a2:
bf:c2:44:c4:24:4d:d3:b0:29:8f:7d:4d:67:01:5f:7b:ac:9c:
b8:47:5c:89:11:bc:c0:ca:72:30:60:1c:46:21:f4:13:72:16:
9d:b9:d6:76:95:b6:41:56:e3:38:04:af:f9:f6:3e:0f:2a:61:
5b:bb:14:85:06:e3:54:89:65:6d:a8:91:13:42:22:48:97:33:
30:6c:67:c8:87:13:66:49:17:75:0a:45:46:da:43:dc:90:f3:
7d:5a:2e:55:f6:ce:7f:f1:5e:3c:06:27:b4:b1:b8:4c:ea:be:
bf:39:9e:31:50:53:48:74:71:b6:84:8c:13:3c:40:bb:34:b7:
fd:ff:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:16:45 2025 by rpki-client