Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PhWyQnzeiyOYtuFuDGVHREtPYKw.roa
File: PhWyQnzeiyOYtuFuDGVHREtPYKw.roa (raw, json)
Hash identifier: HKv1mCtWBGq/R9I4Apbk1I0gsDubb8LWYpVtqCJwpcc=
Subject key identifier: 3E:15:B2:42:7C:DE:8B:23:98:B6:E1:6E:0C:65:47:44:4B:4F:60:AC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 425E1FB4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PhWyQnzeiyOYtuFuDGVHREtPYKw.roa
Signing time: Sat 01 Jan 2022 14:03:03 +0000
ROA not before: Sat 01 Jan 2022 14:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20943
IP address blocks: 194.68.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113464756 (0x425e1fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e15b2427cde8b2398b6e16e0c6547444b4f60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:b0:99:2c:dc:a5:05:14:7c:50:ad:66:f5:
3c:26:80:97:63:fe:72:b0:93:59:86:9e:0e:84:ef:
7a:49:a8:6c:dc:0e:3f:c1:3e:6f:a8:bb:cb:10:37:
4f:ab:5a:64:22:64:9d:6a:88:c6:94:66:0c:7b:34:
3a:ea:bc:64:0c:32:0d:de:22:f3:12:99:0d:e1:7d:
21:f1:6e:dd:9f:98:05:89:9d:4e:8d:7e:e3:7e:26:
4f:38:6c:b9:0c:59:34:d9:aa:ad:8f:c2:6d:f4:33:
00:90:f6:7e:a5:43:42:1e:31:27:84:a5:73:2d:f4:
3f:14:3e:83:9f:4e:62:84:4c:21:bd:b6:b9:73:98:
2e:50:9a:61:11:0d:5d:16:d3:61:19:a9:4b:09:ea:
0b:55:e3:87:65:7c:b6:aa:b7:1c:e0:74:1a:8d:d1:
b2:94:51:ae:77:86:29:dd:ef:dd:e6:5c:3c:ba:3b:
4d:8c:44:1a:eb:93:98:8c:0a:2c:c0:f5:eb:9c:9c:
c0:d8:a1:84:05:fa:b7:a6:90:51:c9:b0:64:28:4a:
f9:75:98:9f:f3:0a:84:ad:fd:97:e6:b6:5d:05:3c:
6f:2c:96:7d:d8:93:0c:36:b8:a9:4b:0d:2e:ba:cd:
ff:66:d4:b9:c2:4b:de:ce:65:c8:bd:66:43:ab:ae:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:B2:42:7C:DE:8B:23:98:B6:E1:6E:0C:65:47:44:4B:4F:60:AC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PhWyQnzeiyOYtuFuDGVHREtPYKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.134.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4d:3b:1b:80:43:1a:e1:8b:69:eb:9a:89:57:81:e0:57:a8:
cd:10:30:91:ae:12:b6:01:d6:0f:cb:a8:1d:fc:20:89:5c:84:
5b:1c:ee:c5:ea:58:23:14:62:4a:25:70:c4:4d:f0:64:ea:38:
ec:28:47:36:fa:76:a7:2a:a8:26:dc:84:73:c1:88:6e:18:20:
76:97:99:f7:e4:01:be:4f:0c:9e:d4:ee:69:62:bd:fe:6b:60:
18:2d:0e:b5:94:db:a0:de:8e:ff:a6:bd:ba:ad:0f:e1:d1:9a:
64:90:f8:cb:af:ef:c5:20:2d:15:07:ee:1b:47:51:e1:2d:9e:
09:94:06:24:e8:21:d6:95:ec:b1:48:68:2a:5a:a3:59:70:0a:
23:ff:93:0a:9e:dc:39:ef:8e:9c:43:a6:b0:16:c3:fc:9e:3b:
b2:57:f3:42:e4:72:b0:dc:23:d7:3a:11:7f:be:35:90:f5:9b:
8e:02:c9:3d:22:46:8d:9d:dc:28:90:18:56:b4:3c:7f:e0:36:
1e:52:a9:e2:36:15:56:ae:05:e7:ab:1e:ac:33:86:66:08:4f:
07:3e:a8:16:9d:00:3b:6f:5b:b5:21:39:d4:7f:49:ec:ea:c2:
b7:f6:6c:35:04:01:ee:c9:3d:d3:62:30:c4:c4:0d:e3:f6:64:
8a:a6:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:11 2025 by rpki-client