Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/ATNI-dmNeiETB7wPwxYXQ-HmQco.roa
File: ATNI-dmNeiETB7wPwxYXQ-HmQco.roa (raw, json)
Hash identifier: kiMLqbvXGAi8POm21BU/QIQKGSC3ixHDv9B72rmJMfQ=
Subject key identifier: 01:33:48:F9:D9:8D:7A:21:13:07:BC:0F:C3:16:17:43:E1:E6:41:CA
Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial: 07E73740
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/ATNI-dmNeiETB7wPwxYXQ-HmQco.roa
Signing time: Sat 01 Jan 2022 02:01:07 +0000
ROA not before: Sat 01 Jan 2022 02:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56851
IP address blocks: 193.111.60.0/22 maxlen: 24
31.131.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132593472 (0x7e73740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Validity
Not Before: Jan 1 02:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=013348f9d98d7a211307bc0fc3161743e1e641ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:2b:32:9f:af:09:1c:96:46:26:b4:9f:1b:
b0:7d:1d:44:2a:3a:8f:7a:78:9f:65:6a:cf:fd:8a:
f5:28:07:3e:99:d5:76:fb:52:cb:b2:52:22:9c:77:
2f:ee:97:d4:31:3c:c1:ec:19:01:1a:ad:f8:c4:fc:
52:21:50:0b:2b:d7:4c:bc:ad:41:e1:51:00:84:4e:
eb:ec:45:c7:99:19:54:41:d0:a1:ae:70:a5:57:52:
b2:b6:97:d0:d1:44:23:d1:4b:4d:b0:39:33:a8:83:
6b:cb:53:0e:ef:57:f5:12:ec:19:88:0c:6c:b3:a5:
0c:2a:5e:56:98:bf:49:1b:02:55:59:b0:b7:ca:f4:
f4:f8:54:f1:18:5d:55:0a:7c:3e:ae:ea:84:42:4a:
fd:31:fc:ea:8e:ca:09:aa:47:80:e2:80:fc:d7:bc:
26:2a:2f:6b:ac:b0:ea:2b:60:49:c2:64:0a:b3:c1:
bc:a6:e8:b4:0c:10:71:fd:56:d2:16:5d:47:b3:79:
19:1c:e2:54:55:83:5c:c3:50:87:28:e4:2e:2e:27:
3f:75:16:76:6f:ea:0b:9e:b1:be:eb:18:c0:52:28:
70:cd:65:b8:5c:9f:cb:45:85:a4:e0:2f:8c:54:ab:
b8:80:90:3c:c7:4d:56:a2:de:44:af:6d:50:83:d2:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:48:F9:D9:8D:7A:21:13:07:BC:0F:C3:16:17:43:E1:E6:41:CA
X509v3 Authority Key Identifier:
keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/ATNI-dmNeiETB7wPwxYXQ-HmQco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.16.0/20
193.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:fa:eb:de:2e:17:2e:ef:a4:42:e0:cc:7f:f4:d6:2a:d4:bb:
83:78:32:94:0a:f3:d4:68:55:21:03:86:ba:d1:d3:0a:49:c5:
5a:1d:f0:bb:66:bd:f5:3d:a0:83:c5:20:48:26:1c:b0:ab:f1:
a6:05:e8:cc:b4:9a:0d:4f:b2:af:b6:3d:db:f5:01:3a:c5:bb:
56:79:de:49:c0:1e:db:7e:d9:d4:53:6e:16:04:a7:30:c0:d8:
b4:fc:d4:93:04:00:aa:0e:68:76:0e:13:17:44:5f:73:29:e4:
0b:9a:bf:76:7b:8d:75:1b:ca:87:36:a5:0e:1d:69:0f:3b:5b:
f1:b0:9c:49:7d:04:f3:33:64:a2:2b:07:83:2c:6d:40:4e:f7:
30:19:91:cc:19:0f:a1:1b:91:1a:41:8f:08:ec:7b:c2:27:f0:
b5:d0:5a:19:2b:25:7c:66:b4:15:a1:a7:48:e9:a5:7c:f0:78:
55:de:10:da:1f:39:58:79:7c:0a:a8:dc:a7:f0:e3:b2:1b:13:
40:a3:0b:41:f0:27:2c:41:5b:ac:df:32:2f:4b:62:f5:34:bb:
2d:12:e8:2d:d7:53:e2:88:d6:b3:88:c7:e2:17:27:16:2f:23:
93:fb:40:56:c7:85:84:87:49:4a:c3:8f:8d:30:80:aa:09:8f:
7b:d1:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:04 2025 by rpki-client