Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/aNE-DEfpZX_VC8JwN5LUY-e_4NY.roa
File: aNE-DEfpZX_VC8JwN5LUY-e_4NY.roa (raw, json)
Hash identifier: 2tOh8iWPfHteqighpSz5H35v0k1LBJaFASCR63/gLE0=
Subject key identifier: 68:D1:3E:0C:47:E9:65:7F:D5:0B:C2:70:37:92:D4:63:E7:BF:E0:D6
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018570B988FE938ED88BE7DFF4B71AA513CA
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/aNE-DEfpZX_VC8JwN5LUY-e_4NY.roa
Signing time: Mon 02 Jan 2023 04:24:45 +0000
ROA not before: Mon 02 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5394
IP address blocks: 194.20.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:88:fe:93:8e:d8:8b:e7:df:f4:b7:1a:a5:13:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68d13e0c47e9657fd50bc2703792d463e7bfe0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:61:52:61:86:27:7b:e7:bc:c6:f5:1b:13:
7a:4f:99:b6:03:b6:6f:d1:c0:28:44:ca:bf:9b:d2:
2c:38:aa:b6:fa:74:21:43:84:ef:ce:3c:67:6c:47:
74:d7:12:4d:9f:16:d2:22:3f:13:ab:14:b4:b4:17:
40:7b:47:74:58:fa:93:02:09:11:79:e8:f7:13:d0:
ca:8b:99:45:46:bc:2a:10:15:06:32:dc:24:3a:1a:
11:cf:d6:f7:f5:8c:72:27:ac:65:bd:89:05:7a:0a:
be:8d:ce:25:93:6b:f3:2b:86:04:8c:dc:cd:6b:e8:
56:08:e6:b5:6f:86:da:57:5d:5f:fc:5c:95:e7:f8:
ec:8b:f7:ed:50:89:cf:9d:57:50:84:60:45:4c:f0:
91:74:21:6c:92:c1:42:5a:9b:cd:f8:be:36:0b:fe:
16:6d:f7:0a:b4:e8:21:94:b5:78:ce:91:43:bd:25:
61:04:17:eb:97:6b:f2:cf:85:60:b2:1f:8f:a6:c0:
0e:2a:ad:9c:d3:57:6f:1c:04:ab:03:a8:05:e2:ca:
a4:68:72:df:31:1a:89:71:1f:d1:04:fc:32:a7:e4:
74:fa:87:98:8d:e8:67:c6:22:b0:55:0b:92:e5:5f:
ee:19:d1:70:97:37:bc:2b:a5:3d:1b:ac:48:fc:38:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:3E:0C:47:E9:65:7F:D5:0B:C2:70:37:92:D4:63:E7:BF:E0:D6
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/aNE-DEfpZX_VC8JwN5LUY-e_4NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:4c:42:11:07:7a:cf:59:a6:e1:92:40:90:27:84:59:5c:d4:
eb:33:2f:f1:f4:a9:ab:c9:4d:9d:5e:1c:99:db:10:2c:7d:91:
f0:ff:3f:b4:32:77:d1:58:f5:49:05:7e:e7:6f:0f:8b:37:af:
0c:8e:43:a9:0f:36:87:c7:22:ec:04:d5:12:59:70:73:a1:fa:
be:b3:69:14:d9:40:cc:b3:82:9c:11:5b:df:a2:53:f4:53:13:
ee:7d:a5:71:ce:28:79:ad:99:4e:f7:8e:6d:5d:f8:27:f0:03:
7b:a3:d6:23:b1:2a:7d:45:2a:6c:ff:2b:9b:30:6b:77:b6:c3:
d5:ed:ff:e7:29:0a:0e:60:f6:ea:13:63:5f:92:fd:6b:34:fb:
bf:34:2f:d8:df:bf:15:16:b7:44:b7:b1:4f:fa:9c:f9:2f:1c:
f6:59:b3:1f:81:55:6d:6d:8d:8b:56:7d:e3:65:ee:e9:be:d0:
84:76:0d:ce:cc:b0:29:b4:f2:d6:8e:42:bd:db:94:d0:5e:ae:
ea:f9:8a:21:20:bd:50:67:e9:c7:f4:04:18:56:46:e7:41:7b:
73:5d:0d:06:3a:53:89:2c:b8:93:c3:ac:91:a9:61:45:1d:db:
14:dd:01:63:fe:0e:b5:18:57:c3:f4:b6:0d:50:8f:dd:52:aa:
dc:30:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:21 2025 by rpki-client