Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/F31G9Wk-xlQpQ3hEvct_LTD-o4k.roa
File: F31G9Wk-xlQpQ3hEvct_LTD-o4k.roa (raw, json)
Hash identifier: 96IcTm6hkUR7V15tcaSokcT33Ac6yDQ1Nw35iVqjgTs=
Subject key identifier: 17:7D:46:F5:69:3E:C6:54:29:43:78:44:BD:CB:7F:2D:30:FE:A3:89
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018856C7A59759C7C75F42F34C58A0EC9E33
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/F31G9Wk-xlQpQ3hEvct_LTD-o4k.roa
Signing time: Fri 26 May 2023 06:38:24 +0000
ROA not before: Fri 26 May 2023 06:38:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206046
IP address blocks: 195.55.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:c7:a5:97:59:c7:c7:5f:42:f3:4c:58:a0:ec:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 26 06:38:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177d46f5693ec65429437844bdcb7f2d30fea389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:9e:39:bd:89:71:85:e0:37:4b:87:69:49:
aa:33:9c:a0:72:1b:1a:05:7a:3c:80:ec:b5:8d:dd:
01:44:a1:09:81:9f:a9:15:7e:fb:7d:d4:b8:68:be:
a3:dd:16:65:e3:5b:70:00:fa:62:3c:06:4a:ab:b7:
1d:f5:ec:ca:ad:34:a1:b0:c1:93:63:f0:6d:f8:64:
49:ef:28:30:92:f1:09:f9:71:06:79:96:d5:65:0e:
88:8c:c5:96:a5:2c:19:fe:2c:41:95:94:95:a1:36:
58:61:bf:e7:15:95:18:c3:e7:59:8d:3f:e1:38:7c:
f9:72:f6:78:3d:28:ca:7b:32:a9:f6:15:48:86:89:
fc:5a:b0:43:ed:48:4e:2e:18:bb:e7:8b:75:a2:ab:
8d:7f:f2:b2:8e:e4:6f:d5:b6:84:fb:bd:91:13:77:
1c:e5:6d:1b:af:c7:54:83:8b:bc:c1:a8:02:f6:fb:
55:9f:44:b8:7a:3a:9a:6c:3f:f8:b5:24:ff:3f:17:
b7:74:d0:40:7f:2c:36:fc:82:4d:a6:7a:b7:f8:04:
fb:64:56:16:f7:cd:7c:f6:b5:f8:24:8b:8f:a9:52:
58:e4:ee:a7:30:9d:97:d5:85:7a:42:1e:bd:10:2d:
22:3d:e6:51:93:16:24:1d:9b:73:2e:81:21:3e:e3:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:46:F5:69:3E:C6:54:29:43:78:44:BD:CB:7F:2D:30:FE:A3:89
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/F31G9Wk-xlQpQ3hEvct_LTD-o4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:c5:af:0f:e8:c0:5a:7a:f6:cc:20:17:ca:11:c1:fb:a7:47:
81:4c:e7:cd:c9:aa:50:fc:cd:fe:0c:29:f4:8a:6f:db:10:8a:
56:e0:a7:62:84:9b:58:02:82:df:cc:47:b1:b2:41:79:5c:4d:
4b:51:25:95:f8:1d:de:2b:e5:49:3e:73:73:3b:be:88:dd:d9:
4f:7a:86:5f:a8:4e:65:97:d4:ec:09:f5:11:14:58:6d:ff:c5:
7b:54:8d:55:5a:68:9d:50:64:0e:88:06:b1:06:de:f1:32:15:
e3:60:24:f7:47:8a:07:e2:fa:08:b3:b6:88:37:9b:26:30:6c:
98:26:17:d2:5d:b8:a8:0b:8d:98:61:11:07:21:18:bf:7b:24:
be:eb:a8:ba:e3:8e:e6:1e:a1:7c:e4:51:b1:88:cb:35:7b:5f:
2b:7d:a2:ed:ef:0f:fd:c6:1b:21:77:8a:aa:3b:6c:32:51:a1:
02:e5:fc:be:0d:05:ea:d1:11:a7:83:79:ae:4f:4e:cc:81:18:
cb:c5:f8:e6:3c:f2:5a:11:95:99:1c:a3:25:e6:bf:da:50:9c:
c5:fc:87:6a:1c:d6:f9:e7:ad:ec:92:b1:f0:9a:30:90:7e:fc:
c3:66:43:09:a0:c3:66:c6:47:c1:85:28:de:c2:7a:03:4f:b6:
88:3d:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:31 2025 by rpki-client