Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/G3jWjNfU7j09ogKF_FjwHIG-UzY.roa
File: G3jWjNfU7j09ogKF_FjwHIG-UzY.roa (raw, json)
Hash identifier: nsUAolVvXKYw1nJfv8pzwESOipruS5c0Yh+rO2oFVZ8=
Subject key identifier: 1B:78:D6:8C:D7:D4:EE:3D:3D:A2:02:85:FC:58:F0:1C:81:BE:53:36
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 01856B6E98BB89E6802BC8CBE3ED020DBB09
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/G3jWjNfU7j09ogKF_FjwHIG-UzY.roa
Signing time: Sun 01 Jan 2023 03:44:48 +0000
ROA not before: Sun 01 Jan 2023 03:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31454
IP address blocks: 194.102.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:98:bb:89:e6:80:2b:c8:cb:e3:ed:02:0d:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Jan 1 03:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b78d68cd7d4ee3d3da20285fc58f01c81be5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:dd:2a:06:38:2a:9a:c2:ff:fa:a5:0e:9a:
fc:98:6c:ff:9c:e9:48:6b:07:36:4d:1b:d1:a3:59:
8c:7c:f6:01:11:75:8b:98:84:c7:6f:1e:aa:b5:17:
f6:88:bc:b3:4a:02:76:d1:2a:7d:9b:62:00:d8:22:
9f:a5:8e:27:4b:cd:fa:f6:5d:7f:dc:9e:c4:26:32:
62:4e:dc:7f:c1:51:d9:8a:36:20:6d:a1:98:4d:61:
c4:52:5b:52:2e:37:cb:c5:a6:1d:7b:ac:e3:94:03:
f6:34:67:f4:45:45:0f:be:20:8b:2d:c7:6a:b1:60:
19:7e:e9:4f:00:f3:f4:e1:81:10:0f:4b:c6:dd:6d:
8a:40:23:59:32:08:15:4c:2b:4a:30:45:c8:fb:9c:
1b:7d:a3:c8:76:0c:6f:ae:6f:2c:d9:24:96:2a:fc:
0c:b6:44:bd:46:4c:c8:e4:9e:1a:e2:fc:ff:87:02:
6a:69:f7:c9:11:cb:aa:8d:71:f6:5d:37:14:6c:87:
60:90:5f:33:84:cb:5f:97:28:e0:fc:fc:09:95:38:
18:a7:51:37:e8:c7:41:e2:4c:0a:61:45:56:2f:99:
d6:02:ee:d3:42:51:94:aa:77:49:76:8a:59:9b:4e:
4f:d8:04:86:2a:bb:2e:b1:35:16:fb:a6:ce:37:85:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:D6:8C:D7:D4:EE:3D:3D:A2:02:85:FC:58:F0:1C:81:BE:53:36
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/G3jWjNfU7j09ogKF_FjwHIG-UzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.86.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:1f:22:7e:b5:59:81:bf:e6:af:4c:c2:4b:f4:0f:19:c0:
d4:68:ec:d8:f0:0c:fc:89:1c:0b:b6:4a:ad:0e:f7:55:f6:37:
60:f0:62:83:92:6e:82:c1:e3:f9:61:2e:cd:83:51:14:62:f4:
68:3f:2d:49:17:b1:f0:17:7f:cb:ca:2d:ce:46:48:4e:34:a0:
9c:d1:60:ba:8a:60:49:4d:55:ea:59:24:dd:37:22:8a:e8:ea:
e3:11:51:d0:10:a0:73:07:22:82:57:97:82:78:11:1d:01:e7:
62:ff:d4:c1:d1:6f:a0:dc:ad:f8:c1:7a:fe:53:9c:b1:0e:a1:
a7:9d:e4:ba:37:ba:bc:e3:91:55:fb:3a:99:5c:27:9c:fc:4a:
d1:bc:26:8f:3e:03:00:d2:4f:51:8a:f9:5c:b9:e2:1f:ff:94:
55:80:e8:c1:93:ef:cf:6f:2d:bf:93:cb:8d:db:69:47:ee:5a:
3a:44:80:06:33:0a:71:42:e4:6a:14:a6:85:8b:3f:4d:4d:25:
0a:db:f9:e5:52:48:c8:9c:e5:eb:fd:3b:80:86:5d:03:66:5f:
9f:10:7f:c3:7e:2f:e6:49:c8:b9:67:f8:4f:7e:3d:86:7b:65:
01:82:0d:1b:82:32:1e:87:64:ec:d7:b1:6a:62:30:56:4f:66:
5e:83:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:48 2025 by rpki-client