Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6bR2wxsT6-Av9NL5VQcbPbeR-Pg.roa
File: 6bR2wxsT6-Av9NL5VQcbPbeR-Pg.roa (raw, json)
Hash identifier: 6eQsCdSmQJAuZeSq1XXhUxX5k6I/gzxj2jmXX8hK1m4=
Subject key identifier: E9:B4:76:C3:1B:13:EB:E0:2F:F4:D2:F9:55:07:1B:3D:B7:91:F8:F8
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018785F9EFF6B8FFA3207205370B226EC88E
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6bR2wxsT6-Av9NL5VQcbPbeR-Pg.roa
Signing time: Sat 15 Apr 2023 17:32:42 +0000
ROA not before: Sat 15 Apr 2023 17:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:f9:ef:f6:b8:ff:a3:20:72:05:37:0b:22:6e:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Apr 15 17:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b476c31b13ebe02ff4d2f955071b3db791f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:02:0a:b5:c7:b9:f8:db:29:74:52:0b:ac:
73:15:7d:ed:e5:6d:64:56:e0:63:0c:92:71:0d:0d:
fc:8a:ac:41:a3:60:40:e6:e0:77:bf:10:d0:d1:13:
09:c2:38:95:fa:d9:1f:df:59:0a:04:93:90:ef:5c:
aa:87:f1:bf:31:78:36:4c:57:e0:5f:22:c5:13:b6:
c9:53:e9:17:d8:51:8d:92:80:1f:6c:14:78:05:9f:
cc:13:4d:71:6a:b1:88:31:46:77:50:21:a3:8a:8f:
42:23:e3:a0:00:d5:0e:16:71:13:ce:12:ef:35:52:
a1:60:10:d1:1d:e6:04:26:c0:ea:dc:64:91:a8:fb:
30:a3:c1:74:78:ce:db:38:47:76:06:e9:15:6e:84:
aa:3c:0c:63:2b:63:f2:e7:f0:46:5b:10:4c:4d:25:
12:8c:5e:30:a2:9e:a9:87:a4:a7:1c:b6:be:fe:f0:
d0:0c:76:d4:6a:ea:ad:4c:48:1a:2a:91:07:2c:cb:
86:92:e5:ee:0e:5a:15:35:d7:d4:7e:44:a5:18:41:
d0:93:2d:83:f2:37:bc:5f:08:83:21:2d:e2:11:17:
36:e7:9f:1a:96:5d:f5:9e:b4:02:ca:1d:f3:b9:b8:
73:e2:4a:08:ec:50:08:18:9c:8c:98:8b:b3:50:10:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:76:C3:1B:13:EB:E0:2F:F4:D2:F9:55:07:1B:3D:B7:91:F8:F8
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/6bR2wxsT6-Av9NL5VQcbPbeR-Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:69:8b:49:b7:e2:d4:bd:66:a3:ca:f1:89:3b:c7:2a:02:14:
0d:2c:27:12:19:9b:01:5d:e1:23:63:bd:71:34:f5:76:7f:e4:
97:f2:70:62:91:eb:6b:5b:b7:b7:86:57:8f:1b:41:be:82:f6:
91:2f:df:ae:37:5d:fd:06:f9:7d:a9:d4:5f:87:f9:5e:f4:e7:
4b:89:df:7d:6d:be:65:54:ac:7d:39:ad:cc:29:41:8f:3f:76:
15:36:51:ec:a7:18:2f:15:de:aa:ad:97:9c:76:74:ee:7c:87:
21:59:a3:e7:b6:d3:e9:34:29:df:8c:db:92:e8:79:9d:ab:2b:
02:de:c7:18:ba:81:c9:a7:1e:f6:a4:80:af:46:18:b9:00:50:
c6:6b:f4:e9:3f:58:ec:fa:fa:0b:40:27:67:4b:20:5a:66:01:
5d:9e:3a:ca:75:20:6c:5a:03:03:e0:0b:91:55:d3:d9:21:25:
87:df:9c:dc:b7:90:60:60:71:54:f3:dd:f8:68:7c:1a:dc:cb:
24:48:c7:08:0c:2b:b0:8c:28:c5:9f:24:47:a3:39:3e:02:4f:
99:2d:38:4d:99:46:fa:b6:db:80:2f:32:ce:3d:68:67:6b:b3:
e8:6c:6b:cc:aa:d4:8f:ca:24:1e:4c:63:16:64:62:75:29:9c:
89:03:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:16 2025 by rpki-client