Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/e0yCIvqpW0tstqXfRXaqLdyHqGo.roa
File: e0yCIvqpW0tstqXfRXaqLdyHqGo.roa (raw, json)
Hash identifier: MIS7EOhTAaG19KjUWPvTAHRUmYMHMKYPUNMo9BmX+EU=
Subject key identifier: 7B:4C:82:22:FA:A9:5B:4B:6C:B6:A5:DF:45:76:AA:2D:DC:87:A8:6A
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 0193C139
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/e0yCIvqpW0tstqXfRXaqLdyHqGo.roa
Signing time: Sat 01 Jan 2022 04:04:01 +0000
ROA not before: Sat 01 Jan 2022 04:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20775
IP address blocks: 194.55.3.0/24 maxlen: 24
194.55.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26460473 (0x193c139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jan 1 04:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b4c8222faa95b4b6cb6a5df4576aa2ddc87a86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:9c:5f:72:15:10:53:1d:52:65:fc:be:11:
fc:1f:8e:e6:ce:a1:b2:17:6a:be:db:c8:11:bc:eb:
cd:c8:db:cc:1f:20:bb:e0:37:ef:70:03:5d:3d:84:
88:e9:67:75:cd:36:89:4c:15:95:26:3b:89:1c:88:
ac:e0:d9:18:ae:16:07:02:16:3d:b7:47:45:5b:a1:
7d:cb:ee:b8:48:c2:ab:87:a1:52:30:91:68:37:86:
19:2e:bc:d3:27:7a:c1:ac:bf:e2:cd:8e:f5:de:d0:
65:14:0a:99:fa:7a:47:49:42:ab:9d:31:19:42:d5:
f0:6d:8a:1c:8b:49:d5:5f:20:25:94:81:03:7f:fb:
e2:7e:cf:7c:59:da:93:33:23:e0:37:2e:c5:5d:71:
48:0b:3e:06:db:90:29:58:c7:4e:43:50:c8:45:54:
79:0e:92:0a:11:2e:53:43:2c:ac:82:2f:30:62:85:
44:45:30:00:ad:96:bc:94:5a:1d:c0:88:41:e0:0e:
41:21:a2:19:5e:a3:cf:aa:23:ed:c9:6d:0e:d0:49:
32:31:a8:9f:ad:f5:68:7b:ff:3f:b1:e3:5c:72:0a:
57:98:51:4b:87:f2:5f:15:f2:c6:d0:61:f6:e9:55:
52:85:82:e7:99:1c:eb:f8:0e:a3:40:bb:4a:0f:c4:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:82:22:FA:A9:5B:4B:6C:B6:A5:DF:45:76:AA:2D:DC:87:A8:6A
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/e0yCIvqpW0tstqXfRXaqLdyHqGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.2.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1c:cf:a4:d5:37:6a:09:79:26:4f:d2:0d:45:7e:6b:57:06:
95:ec:66:39:d0:e4:90:3b:49:6b:0f:99:4e:3d:8e:37:d5:30:
c0:fb:05:f2:a4:a7:1e:51:19:ac:6f:c2:53:80:d9:c6:9a:8b:
2f:b8:00:de:fe:3d:24:28:f0:35:96:dd:8e:73:b7:7b:f2:c4:
eb:96:a2:7b:6c:00:65:38:ac:b8:f1:61:d5:94:8f:3f:61:26:
7d:aa:52:c8:3c:49:cd:66:27:0b:67:33:48:8a:da:c4:0d:b7:
48:b2:42:7a:eb:6c:9e:3f:f3:63:5d:a4:81:5b:ec:c7:04:9f:
11:77:bd:63:78:6b:9d:5c:c4:52:ab:18:bc:32:f1:1d:b4:91:
b4:19:4e:b3:10:6a:b7:fe:e9:e6:74:c1:a8:17:c4:26:bc:bc:
f1:ec:36:8f:f6:f5:2e:44:ea:d0:e0:82:b3:84:a4:b2:1a:f2:
c1:17:44:f4:51:e2:2b:19:25:f2:00:28:a7:dc:7c:4b:40:5a:
4f:b1:c4:79:3f:3e:e1:81:e7:dc:61:3d:42:fa:19:78:c8:15:
c8:11:d0:10:1b:d5:46:10:79:c6:5e:b2:61:64:5e:fc:e5:10:
8e:35:96:0f:2e:37:a3:0c:64:b9:ee:31:6c:0b:c1:8d:f1:40:
9a:6f:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:01:50 2025 by rpki-client