Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/e40MyCu28kYUU4s4D5_iHp0NtEs.roa
File: e40MyCu28kYUU4s4D5_iHp0NtEs.roa (raw, json)
Hash identifier: SThg72pHKOZ0opPwJQF92KWb75Z5egb34uYwfPSAIxA=
Subject key identifier: 7B:8D:0C:C8:2B:B6:F2:46:14:53:8B:38:0F:9F:E2:1E:9D:0D:B4:4B
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FDEDC04
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/e40MyCu28kYUU4s4D5_iHp0NtEs.roa
Signing time: Sat 01 Jan 2022 12:59:40 +0000
ROA not before: Sat 01 Jan 2022 12:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44006
IP address blocks: 194.28.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266263556 (0xfdedc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b8d0cc82bb6f24614538b380f9fe21e9d0db44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:c9:9e:2f:01:46:d2:26:b1:b9:43:f8:0f:
57:ad:6e:58:6c:b5:6b:47:5f:82:f2:75:3f:7e:fa:
cd:1c:b2:24:be:9f:84:e7:3b:e3:f2:af:aa:da:31:
88:14:ce:ec:3e:08:5b:10:95:b6:7f:ce:08:c1:f4:
1b:e0:cf:1c:7f:7c:b7:aa:ef:6d:e7:4e:60:19:a4:
8e:68:59:20:bf:db:2f:07:61:79:15:aa:d0:e8:eb:
7b:bd:17:98:ed:00:d4:b2:d3:ca:b1:1a:1a:f2:7f:
11:c1:f3:c1:97:b8:da:13:e8:b9:5f:7a:0a:69:e2:
c2:4c:86:66:84:60:7d:e6:7a:13:11:d1:79:b5:c3:
f8:ef:79:d7:8e:f5:f5:50:e1:87:42:ae:9d:c4:73:
21:9e:dc:c9:33:c2:cd:cc:65:00:ba:6c:a3:9b:d5:
82:b5:93:39:7b:20:ab:84:93:fa:bb:f4:17:90:80:
55:45:5a:21:b5:a4:60:27:6f:21:6d:a0:ea:21:93:
54:e9:5e:a4:9e:a6:8e:56:fb:f8:ab:60:c2:c6:9a:
7c:25:bf:07:f8:c5:6f:2b:a8:bc:58:2b:ae:ed:b9:
5d:23:19:aa:be:b6:d5:ab:d6:b2:06:df:69:43:2e:
3e:5f:60:ea:ec:0e:89:f6:83:6b:e2:9d:63:6a:27:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:0C:C8:2B:B6:F2:46:14:53:8B:38:0F:9F:E2:1E:9D:0D:B4:4B
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/e40MyCu28kYUU4s4D5_iHp0NtEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.100.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8c:bb:1f:9b:cf:7e:14:9c:dc:c1:cd:19:8f:61:34:b4:0a:
7e:bf:3d:91:80:6b:f4:20:76:77:bd:11:e2:99:fe:f3:d6:47:
cf:e8:7f:41:87:a0:82:1d:e5:a6:3a:d8:e7:49:7f:4e:10:c3:
9e:a1:31:b1:6b:77:62:46:e4:fe:22:95:bd:f5:1c:39:c2:13:
40:f9:f7:f7:d5:59:5b:43:4b:49:5b:d9:a6:82:42:14:c5:11:
bd:97:2e:2f:7d:f2:75:79:9b:4f:e5:49:a0:03:ea:1e:c7:51:
f6:72:59:ad:3d:b3:43:04:0e:41:f5:d1:09:b6:26:87:c0:2c:
f8:e0:5b:ac:04:73:96:36:77:77:68:df:38:df:32:a0:57:08:
c4:93:f8:96:f5:78:fb:f5:c7:eb:72:34:14:ee:4e:fc:c0:a8:
7b:c2:a4:83:f5:40:5a:be:e3:96:6b:b0:6f:83:78:f8:89:0f:
ed:5f:94:37:96:42:f2:4b:a4:65:b7:db:82:35:81:2e:3b:3c:
72:69:ab:c4:a1:5b:95:0a:c3:89:ce:5d:58:3a:03:2c:73:5e:
7d:12:14:8b:f3:d3:6a:78:9d:a6:e2:59:32:93:8b:a1:cf:eb:
f0:da:ae:51:00:85:dc:86:ff:57:08:17:17:eb:46:79:55:4b:
87:79:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:45:29 2025 by rpki-client