Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/_LsyiDxv8ulOPTYm1HgZNc68_bY.roa
File: _LsyiDxv8ulOPTYm1HgZNc68_bY.roa (raw, json)
Hash identifier: 4nqMLqu8JguzGXnb450eyIjQ1iBdP7m8tfdINsdH53k=
Subject key identifier: FC:BB:32:88:3C:6F:F2:E9:4E:3D:36:26:D4:78:19:35:CE:BC:FD:B6
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018570B98981A8117D5A756D60834202BCE9
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/_LsyiDxv8ulOPTYm1HgZNc68_bY.roa
Signing time: Mon 02 Jan 2023 04:24:45 +0000
ROA not before: Mon 02 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6665
IP address blocks: 194.20.232.0/21 maxlen: 24
194.20.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:89:81:a8:11:7d:5a:75:6d:60:83:42:02:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcbb32883c6ff2e94e3d3626d4781935cebcfdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:af:64:3d:a5:00:db:a3:4a:a4:b1:ce:1f:
df:4c:e7:db:0d:01:d0:a5:9c:89:c4:02:5a:90:03:
8c:45:f7:19:d4:09:82:61:6c:0f:7e:30:d4:87:bc:
9f:6f:4c:4c:e0:25:e3:34:97:ed:7e:ee:cb:17:90:
a8:29:03:ee:f8:e4:7a:a0:69:cf:68:f8:02:03:31:
32:97:da:4c:df:82:b2:7c:89:2f:92:2c:38:8b:c1:
c4:b0:c5:ae:55:32:52:bb:f5:cf:e2:4c:18:a1:64:
e5:48:34:fb:2f:0e:50:11:96:a4:69:02:d4:0e:e0:
25:86:cb:12:5a:52:38:ca:f3:ac:02:ab:3d:bc:5f:
0b:8b:73:31:46:5c:aa:e2:d6:80:33:52:80:90:95:
47:82:a9:b2:65:db:59:ed:4b:84:f4:81:52:ae:85:
3f:41:0a:fe:33:66:16:80:95:0b:d9:1e:82:bc:85:
e7:ec:5c:4b:e8:30:f8:84:d2:4e:01:02:d2:0d:53:
a7:82:04:0c:53:d7:3b:ff:c9:53:27:21:44:5f:aa:
77:58:5d:27:bb:47:6b:c4:d5:bb:a0:71:58:11:28:
76:28:ee:b8:95:d9:62:06:92:e5:3e:fa:b2:65:2b:
7e:b9:23:34:18:fb:4c:8a:3f:02:75:e1:bd:aa:df:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:32:88:3C:6F:F2:E9:4E:3D:36:26:D4:78:19:35:CE:BC:FD:B6
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/_LsyiDxv8ulOPTYm1HgZNc68_bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.232.0-194.20.247.255
Signature Algorithm: sha256WithRSAEncryption
c4:29:34:9f:1a:d7:13:f5:30:d7:f4:70:fe:a2:4e:95:8d:2c:
5e:6e:9c:38:14:19:37:8d:18:6b:10:ce:9e:49:37:bc:b7:53:
40:fe:8b:dc:fa:98:ec:ff:bf:ed:cd:af:9d:c8:12:0d:cb:21:
77:de:7d:85:5f:a1:db:f9:86:43:ec:23:37:b4:35:4e:c9:b9:
0f:05:c3:3d:81:f7:ae:2d:bb:78:72:f3:5e:cc:4b:22:7b:5c:
8e:87:4d:de:8e:fa:73:50:45:6e:d2:b9:7b:2c:7e:d7:17:43:
9f:02:1a:b8:0d:00:f8:3c:51:4e:ae:b7:ee:fc:a0:86:55:0f:
11:2a:b3:e8:5a:da:e8:4f:36:3d:84:79:83:ea:ed:31:e2:95:
ce:f5:eb:98:ab:2e:34:ef:10:61:bd:25:b9:78:47:16:32:2f:
c1:d0:e2:52:2c:01:ff:2f:50:86:0a:9b:3c:62:68:cd:78:b2:
5c:49:e8:a0:20:a5:8a:29:a7:b5:4a:c7:d1:ed:c5:4c:05:c0:
bf:c1:0f:19:f0:b7:df:d3:2a:7a:3b:8b:63:bb:86:0a:e4:a1:
42:97:34:15:38:6a:f2:3f:ba:7a:38:05:80:90:3e:50:c5:b1:
e7:ef:cb:ef:01:1b:f4:b6:00:d0:f0:18:10:a1:3c:93:72:41:
82:86:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:38 2025 by rpki-client