Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/Ff4aF9s2c3p3mGFEOgSv63r4D4I.roa
File: Ff4aF9s2c3p3mGFEOgSv63r4D4I.roa (raw, json)
Hash identifier: wASGwswJomUvJlv4Ifpgi3uMoWLFQ7KP3d1lsM9uTgQ=
Subject key identifier: 15:FE:1A:17:DB:36:73:7A:77:98:61:44:3A:04:AF:EB:7A:F8:0F:82
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 099305AE
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/Ff4aF9s2c3p3mGFEOgSv63r4D4I.roa
Signing time: Sat 01 Jan 2022 15:58:05 +0000
ROA not before: Sat 01 Jan 2022 15:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134743
IP address blocks: 192.145.74.0/23 maxlen: 23
192.145.72.0/22 maxlen: 24
2a09:7080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160630190 (0x99305ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jan 1 15:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15fe1a17db36737a779861443a04afeb7af80f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:bc:a1:de:2c:1b:ce:11:8e:71:89:f0:bc:
31:b8:47:3a:51:3c:76:98:a5:24:e7:8d:ac:b5:47:
74:45:78:1a:ca:92:6a:1c:2c:17:3b:7d:2a:ed:15:
1c:3b:25:89:b8:72:86:4c:b7:38:5e:28:8b:0d:46:
4f:55:40:aa:c9:b4:09:9e:d9:65:91:fe:0b:c4:56:
3f:b3:80:84:1e:03:6a:b5:28:7a:3d:df:58:4c:cb:
02:05:b2:43:64:a2:2c:10:ba:44:5f:27:97:6e:d9:
fe:92:1b:04:f6:0d:91:78:3a:8d:df:5f:cd:f2:81:
48:58:4e:f2:46:6c:f4:b6:28:ed:93:ef:b5:9d:d6:
0e:ae:ea:c3:32:a5:ff:d1:b1:f7:a2:e4:33:71:9a:
92:bb:20:32:d5:ba:33:ef:84:9b:df:c0:45:71:45:
8b:2f:aa:16:3f:ab:f8:b1:7b:6c:eb:a2:1c:cf:13:
8f:d7:9a:c2:99:4a:bc:f7:e8:81:91:01:b0:e6:ca:
b5:4c:bc:27:3e:f8:99:8e:06:74:39:37:53:90:b1:
1d:f6:a7:9c:f9:8c:73:fb:90:1a:27:b6:c0:e6:5a:
0a:5c:99:02:d6:81:6b:c8:a5:4d:1f:dd:90:83:c5:
d0:e5:5f:6c:dd:3c:6f:bc:10:1f:ca:02:9d:cb:04:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:1A:17:DB:36:73:7A:77:98:61:44:3A:04:AF:EB:7A:F8:0F:82
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/Ff4aF9s2c3p3mGFEOgSv63r4D4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.72.0/22
IPv6:
2a09:7080::/29
Signature Algorithm: sha256WithRSAEncryption
32:22:a1:02:6f:e6:f7:0a:dd:c9:62:e1:36:28:f2:64:d5:17:
b4:0f:94:eb:3e:c1:11:9c:38:65:9e:90:28:b7:18:18:a9:26:
42:c5:af:58:84:df:fc:f7:f1:c1:c8:12:13:c3:67:4d:2e:08:
8e:f3:bd:9d:0f:33:9d:c2:6c:f5:24:0b:5f:29:6c:06:30:f9:
b5:80:46:82:e7:20:52:f1:f4:73:34:9b:d2:06:72:14:1f:28:
61:58:6d:68:2e:26:ed:bf:f9:7e:90:ed:84:ff:88:c4:31:5b:
88:fd:66:dd:df:c3:37:66:50:3e:d1:dd:cb:64:d5:6a:f4:30:
85:be:47:40:9c:a4:a0:b5:81:55:26:00:58:c8:e0:e8:6b:9d:
1f:10:04:d1:b1:9c:8b:b3:50:14:a2:b1:2c:e7:72:29:23:ca:
35:59:20:b0:cb:8d:73:66:76:9d:0b:0a:08:88:61:15:a2:eb:
bf:98:e6:c5:d9:6b:f9:dc:99:6e:15:7d:4c:58:2d:92:25:fc:
27:d4:d7:1c:3a:04:83:c4:f5:68:ea:48:b9:4f:09:e2:1b:14:
63:59:b1:75:c5:06:b7:a0:62:1e:15:c4:6c:d7:62:a8:2a:60:
dd:ed:12:93:16:03:1d:6b:e6:99:70:4e:1f:75:5c:6b:f4:83:
aa:fe:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:19:58 2025 by rpki-client