Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/dW5aD1iRMO8Eb7Wg-kbJ5ECFF7Y.roa
File: dW5aD1iRMO8Eb7Wg-kbJ5ECFF7Y.roa (raw, json)
Hash identifier: AWMaJh2xy6kAT75ETYvzguxbS1flD/DFT3iUUEe7wL0=
Subject key identifier: 75:6E:5A:0F:58:91:30:EF:04:6F:B5:A0:FA:46:C9:E4:40:85:17:B6
Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial: 154E1F9B
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/dW5aD1iRMO8Eb7Wg-kbJ5ECFF7Y.roa
Signing time: Sat 01 Jan 2022 05:01:36 +0000
ROA not before: Sat 01 Jan 2022 05:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 193.56.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357441435 (0x154e1f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Validity
Not Before: Jan 1 05:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=756e5a0f589130ef046fb5a0fa46c9e4408517b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:af:71:1a:63:fa:54:d8:a7:ab:62:52:7b:
ae:f7:97:4b:b8:8d:97:f5:de:9c:37:86:f7:82:a1:
2e:0c:ef:64:a6:67:37:3e:e7:d1:42:b9:e1:6b:1a:
d5:c6:7c:fb:ec:06:95:8b:5c:9f:36:1d:8c:e0:d6:
ec:0e:e9:76:ab:4c:33:b4:31:57:c9:62:c2:34:e7:
03:05:90:b7:5d:7c:66:82:fe:a2:89:d6:56:fe:15:
b4:a5:e4:c2:d6:8d:5f:15:d9:d2:51:ef:8b:2e:90:
4e:b8:e5:f7:42:b6:3c:02:6a:e5:e7:57:2c:c2:57:
9f:f9:d8:28:15:a1:8f:d5:48:4d:4f:83:2c:1c:a7:
77:63:26:13:e1:16:a8:ad:11:2b:4b:59:0a:d6:b4:
91:0f:a7:67:4e:21:eb:1c:3b:00:1a:9e:92:8a:c4:
50:89:3b:82:7d:94:f2:7f:ce:1d:fd:1f:d1:2c:0c:
d9:3f:70:e9:04:9a:ed:67:47:8b:ac:ae:9d:11:cc:
c4:e8:7d:c5:96:56:94:97:2c:b9:b8:34:55:9c:76:
ae:6d:f0:d0:9f:18:c0:09:53:6f:dc:ae:fc:b6:05:
db:1e:f0:c1:ed:4f:bc:05:18:4d:2e:22:c9:3c:5c:
5a:bb:74:ab:76:36:d0:da:69:39:68:88:2d:d8:5a:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:5A:0F:58:91:30:EF:04:6F:B5:A0:FA:46:C9:E4:40:85:17:B6
X509v3 Authority Key Identifier:
keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/dW5aD1iRMO8Eb7Wg-kbJ5ECFF7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:f0:b9:db:a3:c5:30:d0:41:7b:7c:9e:d1:2f:20:20:63:d8:
ad:53:30:9d:7b:d6:b2:3b:b2:d5:06:9e:6b:59:4e:db:ff:6a:
34:ad:88:5c:5d:d5:bf:3e:32:a2:a2:d7:96:f5:13:48:63:64:
08:29:0d:1a:ee:ab:dd:ea:be:7d:ef:31:40:42:1b:a2:2b:57:
44:b0:58:d4:1c:58:c7:8e:1b:8a:2d:6e:cf:f0:15:56:9f:cf:
a3:e5:e4:06:b5:7f:ef:5b:85:13:a2:e8:27:b7:88:5d:d0:4d:
ff:16:eb:92:8c:3a:52:f2:f9:3a:8d:89:48:21:31:43:2c:70:
75:59:e0:80:97:bd:2d:f8:a4:67:3d:24:c4:f4:4d:b4:bd:f1:
cc:a1:88:92:66:85:2f:53:cf:e9:55:4c:5c:fd:5a:d6:20:d2:
0c:bd:df:b7:70:11:a1:16:cc:c8:97:f9:4d:e3:f7:53:b4:73:
74:23:9f:9b:91:0a:ed:a4:9c:52:b7:93:bf:0c:86:fe:81:a1:
a4:72:8f:d2:72:4f:a2:ba:c6:57:a5:21:86:17:30:8a:a4:ea:
a7:78:18:05:b9:e7:2c:93:87:a7:b2:a9:95:1f:ec:42:49:f5:
f2:ac:2f:df:1f:b0:c1:e8:52:f5:40:2e:8a:a5:1e:cc:6b:87:
61:c3:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:04:12 2025 by rpki-client