Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/fkPlGzJLnWecUSrj134jWaKwwWU.roa
File: fkPlGzJLnWecUSrj134jWaKwwWU.roa (raw, json)
Hash identifier: p64fYGOEm1hC9I9lDdzrQctYetCqCRHyaXwF0qnMj9k=
Subject key identifier: 7E:43:E5:1B:32:4B:9D:67:9C:51:2A:E3:D7:7E:23:59:A2:B0:C1:65
Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial: 3281F215
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/fkPlGzJLnWecUSrj134jWaKwwWU.roa
Signing time: Sat 01 Jan 2022 13:55:57 +0000
ROA not before: Sat 01 Jan 2022 13:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3301
IP address blocks: 194.246.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847376917 (0x3281f215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Validity
Not Before: Jan 1 13:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e43e51b324b9d679c512ae3d77e2359a2b0c165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:5a:be:b8:38:0d:b7:5f:b2:ac:d1:64:60:
17:d9:82:41:6a:5f:7b:07:9c:2c:d9:e5:b7:66:1d:
9d:a9:7b:0e:66:96:0a:e0:84:39:66:e8:ed:25:9f:
d0:0d:23:ad:a3:df:ba:52:4e:16:cf:fa:66:2f:9a:
3f:ab:71:85:3c:90:83:9d:bc:39:21:18:e6:7c:c8:
64:43:f0:a5:88:e5:ea:36:2f:30:58:c7:4c:47:cd:
87:d1:78:48:13:2b:64:00:2b:0a:b9:4c:b9:5c:e5:
dd:de:23:cf:a4:f6:b4:82:1e:c5:13:72:1a:a2:96:
14:40:b4:f5:80:71:2b:9c:26:03:35:95:15:76:a8:
d0:78:e5:87:0c:32:c3:6d:5b:48:f9:60:a9:f8:98:
f2:d5:5c:9c:3e:24:83:e1:06:c3:f5:19:4c:6e:5a:
81:e1:52:fc:43:07:2b:da:20:62:16:19:f4:9c:80:
49:42:31:3e:62:d0:29:3e:0a:ff:70:32:33:eb:70:
5f:d2:6d:2d:6f:e1:f0:07:0e:a9:08:8c:8a:6c:56:
22:77:6b:c6:cc:86:3e:2e:b5:9d:a7:e4:77:6a:ff:
a2:a3:b1:37:b9:c6:7b:59:e7:93:ae:de:f9:f6:61:
c7:77:4a:b4:ce:73:86:7c:a1:e6:e7:02:93:03:ed:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:E5:1B:32:4B:9D:67:9C:51:2A:E3:D7:7E:23:59:A2:B0:C1:65
X509v3 Authority Key Identifier:
keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/fkPlGzJLnWecUSrj134jWaKwwWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:47:bb:bd:93:44:ad:2e:b9:c6:9e:6c:07:a1:ac:3d:12:85:
d3:ec:dc:12:31:89:33:46:12:e6:1d:01:0d:cb:f3:56:7b:b3:
5f:d7:44:c3:e7:ca:cb:1e:0b:1f:69:c5:57:6b:13:c4:4f:23:
19:6c:21:ff:37:87:95:2a:32:e6:a8:7f:82:d9:23:a1:9c:ac:
1d:c6:d2:a3:59:ae:90:53:d4:6b:da:5b:da:80:d4:b9:a3:28:
90:81:94:a0:b7:62:62:cc:85:3b:8f:6b:6c:6e:fd:05:d8:54:
6b:94:64:ff:b8:95:52:75:4e:06:51:04:9a:7c:f1:5a:36:b2:
78:b7:06:f3:7c:ae:06:d0:da:86:53:86:dd:20:16:0e:fc:73:
1f:a6:a9:64:40:af:a5:48:6a:88:69:8a:72:d0:0c:16:25:23:
6a:03:5d:ec:7f:f7:6c:96:22:a2:71:2b:e8:16:bd:3b:ca:5e:
c1:bd:65:5f:b0:93:40:21:1b:ca:b9:c0:a9:48:77:ca:78:36:
92:46:71:e3:dc:25:09:f7:e2:4c:c6:c7:cf:63:d8:d3:7e:d1:
69:27:bd:65:2e:a0:13:da:38:d8:38:4e:dd:ce:59:86:e6:70:
39:dc:f5:a9:99:62:00:0b:ca:e4:55:ea:42:82:96:93:bf:b7:
3b:4d:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:33 2025 by rpki-client