Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/4ifNuX_auXoByvAbXyuq6ux9Z5U.roa
File: 4ifNuX_auXoByvAbXyuq6ux9Z5U.roa (raw, json)
Hash identifier: UtnY8KbeXl2WRKJaQbCWb0m1ytHXpyRPdc3dwJGGqMI=
Subject key identifier: E2:27:CD:B9:7F:DA:B9:7A:01:CA:F0:1B:5F:2B:AA:EA:EC:7D:67:95
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0183216979181D8B0CB7C6E07D3908936B92
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/4ifNuX_auXoByvAbXyuq6ux9Z5U.roa
Signing time: Fri 09 Sep 2022 08:41:43 +0000
ROA not before: Fri 09 Sep 2022 08:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1267
IP address blocks: 194.20.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:69:79:18:1d:8b:0c:b7:c6:e0:7d:39:08:93:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Sep 9 08:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e227cdb97fdab97a01caf01b5f2baaeaec7d6795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:10:b9:6b:6a:00:b1:3c:71:30:34:b9:3b:
ef:70:8c:bb:24:92:e8:e6:19:1d:5e:d3:cc:b1:d1:
ee:58:f5:88:a3:b7:00:50:c2:67:5c:32:41:72:81:
4a:bd:50:6d:d7:1c:c5:d2:56:3b:e1:08:71:85:5f:
b1:68:41:04:f4:e3:6e:34:40:8c:de:1f:96:54:fa:
c5:99:95:69:5a:f6:d1:89:e7:f6:0b:0b:66:9f:e6:
f1:bc:ad:1b:b6:2f:33:e5:db:b9:dd:33:79:52:99:
85:a0:19:b9:6e:65:46:33:60:7a:e4:b5:f0:87:1b:
f5:ed:56:bf:a0:9b:63:64:1c:45:b3:ba:27:0b:57:
8a:50:76:6d:64:29:18:86:8b:2f:9d:83:7e:eb:d5:
e3:ca:ac:6a:da:93:db:b4:01:a6:62:ca:f0:ca:5d:
e1:e7:6f:27:14:0a:57:72:58:8c:3b:0b:07:85:96:
06:1a:ac:18:87:5f:73:b2:cd:01:13:03:53:5d:db:
b2:fc:63:da:e7:bb:07:50:95:0b:7a:45:1d:2d:40:
61:a8:a5:77:f3:05:2b:34:cb:bf:5f:d2:73:8d:7a:
d4:d6:f6:4d:b3:79:53:cd:3a:fc:5b:96:86:a0:78:
d2:69:6d:2c:22:81:0f:98:28:b1:6a:49:ba:b7:03:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:CD:B9:7F:DA:B9:7A:01:CA:F0:1B:5F:2B:AA:EA:EC:7D:67:95
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/4ifNuX_auXoByvAbXyuq6ux9Z5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.24.0/24
Signature Algorithm: sha256WithRSAEncryption
43:58:9f:60:cf:32:e1:74:bb:3c:af:73:cd:58:21:33:d5:bb:
1f:9c:ae:f3:b1:cd:82:01:55:c8:ec:5b:11:64:40:19:49:b3:
c8:d7:6d:0e:cc:2d:85:c0:63:de:f0:11:44:2a:61:d4:0f:4f:
7f:e8:c9:48:72:d7:12:48:37:17:ac:35:12:cf:c6:5a:f7:a8:
b0:bc:08:80:2a:e2:9c:3b:0f:9a:37:76:8e:e9:6e:c0:86:a4:
9c:76:bd:53:67:07:e5:65:4d:8e:fc:4c:96:83:c6:17:c1:bd:
a0:f1:48:ec:52:5f:54:3d:49:43:c3:ea:22:fa:54:f1:3a:dc:
29:41:1c:ad:67:f8:ef:ab:17:db:92:e0:cb:56:43:35:4a:5e:
8d:af:2e:61:e5:78:9d:58:c4:d9:e6:ae:a2:8c:e4:9d:8e:d8:
3a:5e:5a:9a:1b:16:cd:10:a6:ce:e9:07:4b:7d:20:0c:0c:cf:
f0:c3:bc:67:10:65:13:44:79:27:60:54:b5:be:1c:5b:9b:b7:
bb:cc:fb:b3:3b:73:6f:d5:45:64:c2:43:25:a3:15:48:95:b3:
02:54:b5:60:a0:33:1e:0f:cc:38:71:8d:c0:ca:75:f7:82:72:
05:52:ee:94:de:15:2b:a6:8a:be:12:d7:5d:31:6e:78:2b:0a:
a3:35:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:49 2025 by rpki-client