Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/at0C7YIRJ0z0kBcJjco3xhZaf3I.roa
File: at0C7YIRJ0z0kBcJjco3xhZaf3I.roa (raw, json)
Hash identifier: qUsf9o0sosXp69xd9tr4iRBlsr86gWh/vX6BdkyuSec=
Subject key identifier: 6A:DD:02:ED:82:11:27:4C:F4:90:17:09:8D:CA:37:C6:16:5A:7F:72
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 1005914A
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/at0C7YIRJ0z0kBcJjco3xhZaf3I.roa
Signing time: Sat 01 Jan 2022 15:56:12 +0000
ROA not before: Sat 01 Jan 2022 15:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206104
IP address blocks: 194.126.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268800330 (0x1005914a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jan 1 15:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6add02ed8211274cf49017098dca37c6165a7f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:45:67:7a:7b:e4:b0:f5:61:09:28:0a:cd:
64:a0:47:38:48:ec:f0:0d:0c:1f:cf:cb:1c:5c:e2:
83:01:a1:28:29:62:27:1d:c8:f1:b0:f6:da:ba:f6:
6e:df:e4:3c:70:bc:fe:9d:14:6a:97:55:3b:31:59:
13:d9:93:59:2d:e5:c2:8f:be:29:66:36:37:da:2e:
5b:22:11:31:c6:6e:72:31:fe:9c:ff:f3:7e:8c:f0:
df:10:34:36:b9:7e:75:10:36:a4:80:15:cb:d3:7d:
8e:b1:c0:6c:09:06:54:cf:a0:be:f4:a9:c7:6b:07:
21:f5:fb:d9:26:da:71:3d:5f:61:95:a9:50:86:eb:
39:e6:12:be:24:54:50:69:28:33:76:c0:50:87:2c:
03:4d:29:11:f0:f7:14:9c:f1:53:f3:6b:e0:20:37:
dd:6d:12:11:77:6a:0a:b9:8a:30:1d:7f:f5:6d:f4:
8c:96:b1:90:b0:6b:8b:0b:2a:25:5e:27:12:ff:c5:
0a:53:44:d4:01:5a:e9:75:b8:5e:34:b4:41:b7:0e:
c8:12:53:5c:1c:dc:e5:c4:36:bd:c6:c7:dc:56:07:
d2:22:05:7d:15:51:43:36:da:bd:e0:74:80:db:e5:
46:d4:74:7b:e5:e5:92:40:25:57:88:f3:ee:01:37:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:02:ED:82:11:27:4C:F4:90:17:09:8D:CA:37:C6:16:5A:7F:72
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/at0C7YIRJ0z0kBcJjco3xhZaf3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:6f:a3:a8:65:d0:1c:38:1d:fc:7e:51:d2:68:b7:b8:2b:
42:39:09:6a:72:79:50:30:b2:43:a2:a7:be:58:03:9b:f1:76:
4d:f6:4d:1f:21:bd:1f:e5:f9:9f:7d:1d:a5:89:2b:08:63:e8:
51:eb:8e:e6:12:16:4a:e3:4d:29:d5:4c:c3:aa:db:89:6a:3b:
1d:6b:3b:69:80:5c:c7:d8:ee:56:54:bf:a5:19:7f:df:2c:6e:
67:cc:33:06:3e:f5:76:e3:02:4e:1b:5e:f7:6d:cd:ea:ed:b8:
33:8f:4b:ac:6d:e3:94:a8:cc:ca:9d:a5:ce:e3:0e:f9:4b:5f:
7e:73:21:87:8e:8f:c5:5d:8f:5e:8b:ea:0c:9d:3a:27:3f:5a:
3a:4c:7f:81:78:d2:71:e0:25:6e:07:f2:e5:f9:06:f0:b2:c3:
9d:2b:2e:88:bd:52:28:8f:9a:0f:48:2b:05:d1:87:8d:be:53:
fc:5f:87:61:fa:8b:c0:cc:7b:aa:ef:7c:c8:3b:50:ea:d1:5b:
05:a4:12:ed:2e:77:0a:19:85:67:06:e2:2a:86:9c:00:2e:e3:
f7:c3:cd:57:f8:51:56:f5:55:0a:2a:aa:05:5b:d4:5a:4a:68:
5b:66:be:35:d5:34:b3:3c:20:2b:bf:76:6a:59:f1:25:09:6c:
b7:37:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:32:06 2025 by rpki-client