Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/AabEA1f8dN2p35S0b_Yz_xal-Lc.roa
File: AabEA1f8dN2p35S0b_Yz_xal-Lc.roa (raw, json)
Hash identifier: lr55rf+Z0AZylzYh87La5cHe0snfi4avbUUyj58vDY0=
Subject key identifier: 01:A6:C4:03:57:FC:74:DD:A9:DF:94:B4:6F:F6:33:FF:16:A5:F8:B7
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 114DF2EE
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/AabEA1f8dN2p35S0b_Yz_xal-Lc.roa
Signing time: Sat 01 Jan 2022 01:56:42 +0000
ROA not before: Sat 01 Jan 2022 01:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39702
IP address blocks: 193.31.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290321134 (0x114df2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Jan 1 01:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a6c40357fc74dda9df94b46ff633ff16a5f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:b1:85:f2:27:84:63:9e:e2:c7:25:ca:d7:
3c:76:3e:1d:06:11:56:8f:29:94:39:63:1f:5b:85:
af:60:fe:78:99:5b:1d:31:b3:01:04:df:c9:c0:e7:
c7:9e:18:a9:53:93:a7:0b:11:6f:01:32:8a:8a:e8:
21:9c:e8:85:74:42:4d:45:4b:e2:0d:f8:dc:2e:23:
17:ca:04:ec:1a:8d:74:73:a5:21:e0:a1:03:4f:be:
de:8d:88:5a:3c:b4:a8:b4:9c:ea:87:d7:89:d6:4e:
16:33:82:8e:00:84:e3:48:3f:4b:65:cc:ef:5f:93:
fd:31:8d:93:55:9f:91:96:8a:b4:1b:7d:30:e1:8b:
84:7a:0f:5e:12:65:f8:c2:66:6d:11:89:44:21:17:
d7:d9:c8:56:58:d9:58:a5:f8:a7:14:1f:81:a1:80:
36:5b:1e:54:0e:c0:b0:a7:f4:1a:b5:70:14:d3:51:
36:90:6c:f6:2c:4a:6d:a2:bb:ea:ce:7f:2c:27:64:
b9:9f:f0:d4:09:3a:6a:bd:fd:34:91:0b:00:1c:ec:
05:1b:77:6b:5f:4e:79:de:5a:68:08:23:a8:33:c8:
65:9c:1e:be:75:60:be:55:6f:1c:db:73:ce:64:1e:
a4:f6:69:21:fd:d7:f2:69:e2:a5:fb:d0:47:53:d5:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A6:C4:03:57:FC:74:DD:A9:DF:94:B4:6F:F6:33:FF:16:A5:F8:B7
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/AabEA1f8dN2p35S0b_Yz_xal-Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.18.0/24
Signature Algorithm: sha256WithRSAEncryption
00:46:56:dd:9c:2f:f8:ba:71:e6:e9:64:b2:6d:70:32:49:ff:
7d:96:bb:56:47:1e:cc:91:67:b4:d2:32:41:f4:84:93:5f:33:
20:c9:c3:be:03:fc:56:94:3b:b7:ad:e4:10:c3:b8:da:2e:17:
b7:3f:49:fc:c9:dd:2b:bf:44:54:6f:b4:97:db:3d:5a:f8:44:
7d:f5:c7:dc:e4:17:a8:f0:d4:84:f7:fc:c1:7a:f3:2c:b4:fe:
7f:4c:c3:d0:bf:d5:52:bf:94:03:24:40:72:12:ae:14:d8:60:
8c:85:e8:1f:15:b4:9c:b4:ee:c3:e7:ed:1a:fc:29:a6:4f:a4:
95:25:c4:9e:ce:2f:dd:a5:83:59:8a:a3:dc:cd:bd:7e:96:e9:
c0:e0:92:88:b5:5b:68:b2:a4:e1:27:87:a1:b5:b1:85:83:ab:
d8:ae:8c:af:57:41:c1:47:33:8b:3a:a4:6b:04:be:fa:3d:b5:
7f:be:da:7b:0e:39:47:77:ae:93:73:a2:20:cc:51:83:59:e4:
e7:13:0b:97:b7:09:d8:5f:61:fd:48:4c:b9:bc:ec:b7:2c:22:
04:18:4e:56:53:74:db:33:9c:07:8d:ea:f9:5e:db:04:55:67:
80:cf:c3:6e:3a:d0:7a:5d:5e:0b:d8:7c:3f:57:d3:08:81:0d:
29:fb:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:26:55 2025 by rpki-client