Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1idTFdVh6E8UOMr5XJwbTZGJc44.roa
File: 1idTFdVh6E8UOMr5XJwbTZGJc44.roa (raw, json)
Hash identifier: uSJhQA5u6N+vifusD0DmMfrh+Aa84fYYhJUnyQZzhto=
Subject key identifier: D6:27:53:15:D5:61:E8:4F:14:38:CA:F9:5C:9C:1B:4D:91:89:73:8E
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A2764037A10D74BFDC541EAD832C9F520
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1idTFdVh6E8UOMr5XJwbTZGJc44.roa
Signing time: Thu 24 Aug 2023 11:53:00 +0000
ROA not before: Thu 24 Aug 2023 11:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6168
IP address blocks: 151.253.180.0/24 maxlen: 24
194.170.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:64:03:7a:10:d7:4b:fd:c5:41:ea:d8:32:c9:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Aug 24 11:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6275315d561e84f1438caf95c9c1b4d9189738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:d6:c7:ba:da:fb:90:a4:62:ed:6e:10:d6:
09:9f:38:48:ee:76:33:1e:61:ca:2f:7e:0a:e4:59:
f5:e4:1b:52:87:e7:7d:c6:7d:97:74:79:f0:9e:cc:
6a:06:15:f9:04:32:17:7d:32:c9:ba:d6:4f:b8:c4:
f0:69:9e:8c:85:1c:82:b5:fc:35:f5:92:bc:fa:69:
d5:9a:d8:8f:32:d9:20:b0:cf:5a:2c:80:f4:0d:03:
d8:64:85:dc:05:06:65:d3:e6:fb:bd:dc:1d:af:e2:
d8:63:f2:05:ce:10:28:d6:6b:d7:23:4a:e0:04:fd:
c3:79:b5:22:82:01:89:27:e6:3b:d7:58:e5:92:0d:
1a:85:26:09:4b:3e:96:75:e1:9f:22:53:d0:f4:c0:
b4:6a:1c:f8:0a:48:aa:ce:c6:29:9a:27:00:fd:e3:
09:51:32:31:9a:7e:ec:04:fb:32:e9:ee:3f:42:14:
e8:5a:2d:d9:b5:0e:3c:bd:e9:53:52:95:38:67:22:
78:18:0c:e6:03:0c:8c:62:c1:a2:e3:d0:39:d3:9a:
f6:6c:18:08:1f:a7:eb:a3:c9:8c:f0:91:47:4a:3b:
16:75:d2:05:a1:46:21:ef:80:2f:3a:6a:1c:c8:09:
29:d2:22:f2:0a:11:1b:08:1b:10:a4:65:3b:e9:33:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:53:15:D5:61:E8:4F:14:38:CA:F9:5C:9C:1B:4D:91:89:73:8E
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1idTFdVh6E8UOMr5XJwbTZGJc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.253.180.0/24
194.170.246.0/24
Signature Algorithm: sha256WithRSAEncryption
95:08:37:0b:62:47:de:3b:95:a3:7f:8c:d8:86:35:02:c5:a4:
ac:f0:0a:4a:42:2b:7a:8c:ba:d9:62:ee:76:ca:55:87:70:e8:
df:37:90:37:af:a2:9b:3d:40:71:14:ad:72:78:93:3b:48:8a:
62:86:2a:9a:ec:c9:d6:ec:d8:1f:b6:b8:b6:19:71:9e:54:cb:
f9:3b:4f:0d:08:86:7e:95:63:9d:b8:81:01:9c:ac:62:23:81:
83:ce:c9:00:ee:08:42:83:90:95:54:07:78:e7:98:f2:38:93:
c9:20:8c:31:15:e7:d7:a9:c1:52:1c:5a:fe:57:4b:26:38:fa:
26:7d:6d:e3:21:9b:1f:e4:7c:7a:5d:07:c5:26:5d:23:e5:5e:
6c:ee:98:5d:e0:6f:1c:fd:37:ee:5a:20:96:ec:25:2c:c1:d2:
5c:6c:9b:24:c4:67:8d:95:70:6b:9b:8e:b3:0c:b2:77:5f:e3:
17:90:24:fe:37:83:b5:5f:79:90:56:08:cd:56:0a:74:a7:b7:
fa:2d:89:99:6b:50:99:44:82:b3:5a:6d:85:b0:e6:78:13:b1:
ba:ce:6d:65:a5:97:78:5b:fa:cc:e3:a0:43:da:c9:37:67:cc:
46:58:c3:b6:ad:5d:e2:8a:7a:38:6c:df:c3:6f:23:d7:59:e8:
4a:4c:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:52:13 2025 by rpki-client