Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/l_H3vB8lRxXrJxvY9paTmHqgve0.roa
File: l_H3vB8lRxXrJxvY9paTmHqgve0.roa (raw, json)
Hash identifier: aMeiyTuE05eMCjOBrOSgU3w1zfDoT5kqcqi7AKTVx1E=
Subject key identifier: 97:F1:F7:BC:1F:25:47:15:EB:27:1B:D8:F6:96:93:98:7A:A0:BD:ED
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 33A0A827
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/l_H3vB8lRxXrJxvY9paTmHqgve0.roa
Signing time: Sat 01 Jan 2022 15:01:10 +0000
ROA not before: Sat 01 Jan 2022 15:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39381
IP address blocks: 194.147.245.0/24 maxlen: 24
2001:67c:2fe0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866166823 (0x33a0a827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Jan 1 15:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97f1f7bc1f254715eb271bd8f69693987aa0bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:04:c3:27:ac:03:5a:37:a8:8d:7f:33:43:
4f:90:c4:1d:7f:70:02:e5:69:f9:4e:91:5b:ba:e6:
f5:3f:65:a0:2b:cf:4b:a5:84:50:5c:09:4e:c8:4c:
b1:18:fd:c5:10:32:b7:ed:7e:c2:c8:e6:d6:5e:71:
a2:d8:0e:92:8b:e7:29:3f:1f:ad:b0:5d:28:dd:46:
ef:71:93:ad:30:4f:7a:cb:86:6b:1e:5a:cb:e9:25:
fd:25:eb:05:0f:86:fe:0f:ca:39:a5:9b:dd:d7:a9:
31:13:8c:5d:f5:7d:d6:fa:61:ef:2f:ac:48:fa:ab:
de:e9:60:15:e5:2f:af:72:83:bb:d5:61:3e:3d:53:
05:50:24:85:ce:bb:e1:c7:96:50:98:53:dd:ec:cf:
0a:40:ce:69:b9:e5:d1:a4:82:15:cc:df:f0:e8:cb:
29:53:2f:5e:1f:e0:3f:65:79:30:42:80:c9:1d:df:
ab:46:bb:c6:2b:5d:a4:4e:ab:41:bc:6d:54:e1:44:
5d:43:19:a2:83:97:ca:87:25:e2:f5:18:da:05:b1:
e8:29:3d:70:c0:f8:5f:5f:bc:21:fc:7d:9b:86:f5:
78:36:66:09:cf:f4:54:ff:4f:80:93:5e:7c:23:1c:
7a:79:18:07:67:7b:98:2a:a9:6f:e0:89:49:e1:be:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:F7:BC:1F:25:47:15:EB:27:1B:D8:F6:96:93:98:7A:A0:BD:ED
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/l_H3vB8lRxXrJxvY9paTmHqgve0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.245.0/24
IPv6:
2001:67c:2fe0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:01:ad:98:1a:83:2b:2d:4f:db:4b:2c:ec:c8:ee:e8:36:b7:
f8:4a:9c:ba:5d:0a:e3:00:ee:05:e1:ae:1f:a1:b4:73:07:04:
22:8f:2b:28:54:a6:88:17:c4:70:70:17:42:54:d9:20:ac:a8:
46:cd:82:75:b7:90:22:12:f6:5c:76:22:6c:2b:4d:e3:6d:a8:
bf:87:1b:a0:5c:3e:c0:2b:08:63:0d:e1:02:32:a6:be:78:0c:
c3:43:a3:5e:f7:c1:62:4b:34:23:86:87:1c:76:1a:12:5d:8a:
a9:6b:f4:c3:b5:e9:f4:7d:24:15:82:64:02:79:15:40:13:de:
b1:4d:47:01:4f:a0:33:a5:43:79:68:e3:b9:9e:47:fb:41:57:
15:f1:2e:db:f8:ae:94:24:24:df:4a:e5:ca:21:9a:0b:07:d2:
17:13:91:05:ad:dd:5e:68:ea:9f:08:0d:34:75:24:2c:a0:69:
1a:46:cd:df:02:5b:73:c0:79:d9:25:a9:e1:66:4d:d6:69:9b:
60:e1:8e:18:56:12:ee:47:85:67:e9:28:51:b9:1d:a6:33:a1:
bd:09:37:fe:f6:24:c8:b4:67:b2:2f:37:61:81:e7:82:e9:46:
75:05:aa:f1:75:57:d2:fb:43:2b:5b:07:42:9d:a1:ee:a7:ca:
01:7a:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:50 2025 by rpki-client