Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/tEFsvH5OXncnqKlBjigkvcBLQ-A.roa
File: tEFsvH5OXncnqKlBjigkvcBLQ-A.roa (raw, json)
Hash identifier: Jdnky+9igiO5XhGDfYaFhj+7WCgcTiKEf5wD5b9rEEw=
Subject key identifier: B4:41:6C:BC:7E:4E:5E:77:27:A8:A9:41:8E:28:24:BD:C0:4B:43:E0
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 4963
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/tEFsvH5OXncnqKlBjigkvcBLQ-A.roa
Signing time: Thu 21 Apr 2022 13:25:48 +0000
ROA not before: Thu 21 Apr 2022 13:25:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42324
IP address blocks: 194.0.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18787 (0x4963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Apr 21 13:25:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4416cbc7e4e5e7727a8a9418e2824bdc04b43e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:0c:a7:eb:1f:96:9f:f0:d2:bc:5d:1f:fa:
32:88:6e:1b:63:53:cd:9c:06:a9:4b:58:be:b0:30:
77:70:89:3f:58:5f:ad:f7:15:78:93:46:33:61:df:
99:bb:89:22:4d:25:7d:55:f1:ab:1c:bd:90:9e:19:
97:74:a8:27:2b:ff:00:7d:8f:03:19:d2:23:a2:62:
82:c4:3a:6f:c1:24:8c:24:b1:83:66:3e:eb:73:f9:
e4:47:2a:c2:93:ad:f2:c8:d1:08:fd:ff:27:80:f4:
4f:0f:2e:4e:97:eb:3b:04:a8:14:c2:a0:6f:e9:e4:
cc:91:29:c3:c2:50:28:68:25:42:44:26:f5:a9:91:
55:da:04:38:63:34:88:ec:05:0b:a4:6f:bc:37:b2:
15:c0:9c:3c:6a:09:b9:2d:1c:85:20:60:e3:ec:72:
f4:3e:ab:77:15:4e:11:d6:2c:d6:1c:c6:b4:6d:f2:
10:f9:d4:34:cb:bb:bd:78:6c:14:25:68:10:d6:69:
5f:b6:e9:1b:14:f7:6d:64:cf:c1:96:d1:50:22:99:
54:27:88:69:30:8b:93:6e:f1:23:42:b6:1a:f6:de:
a4:10:f9:58:ea:cf:a1:5b:26:bb:70:78:2d:81:9c:
1a:14:f3:c4:44:60:ed:54:f9:30:b9:65:3f:4c:3d:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:6C:BC:7E:4E:5E:77:27:A8:A9:41:8E:28:24:BD:C0:4B:43:E0
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/tEFsvH5OXncnqKlBjigkvcBLQ-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
56:91:19:f5:a0:98:8e:b7:7c:f9:98:95:2d:e2:18:59:d1:3f:
c0:4c:8a:eb:63:11:df:d5:23:ad:42:42:90:b6:60:99:f0:03:
d5:82:bc:0c:3b:8b:58:c5:e6:67:94:9d:61:e0:a3:2d:45:d2:
ed:b3:e8:dd:da:8d:58:d2:ad:69:f4:26:a3:c0:48:da:9b:53:
4d:29:37:23:a9:bf:49:74:de:7e:84:a4:73:58:c9:82:af:21:
cd:c2:df:d1:b8:4a:ee:48:fb:c2:60:b4:15:b9:4f:8b:bd:40:
00:40:51:40:1c:ec:93:ee:49:3f:58:02:ca:30:0c:90:b9:ba:
76:ad:09:cd:88:4a:83:7f:96:b0:a2:7a:e4:ee:c2:ae:d5:8a:
81:c9:60:61:a4:16:12:8d:c9:b2:85:30:a2:1f:d3:39:91:ad:
d7:69:a2:d1:2e:50:09:ad:51:be:da:c0:4a:2b:aa:3c:10:11:
8a:3b:b0:4a:95:dc:3f:ff:9b:f4:40:50:34:14:31:55:b7:36:
74:45:f8:eb:16:13:22:cc:c2:85:8f:ff:93:a4:0c:f2:73:55:
c3:92:2e:e3:c9:4c:9c:6a:07:ee:e5:03:bc:cb:91:d3:09:9a:
f0:99:b7:d0:d3:43:2d:6b:12:27:f6:a6:c5:76:72:a1:ee:46:
e4:fa:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:17:14 2025 by rpki-client