Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/1-j5-N4wS81Sgw37hDiFjiymuVAg.roa
File: 1-j5-N4wS81Sgw37hDiFjiymuVAg.roa (raw, json)
Hash identifier: FEGn8yLVAgMSFmoYUtB9d5Y8POdzT7A/7N9iOxMQbog=
Subject key identifier: FA:3E:7E:37:8C:12:F3:54:A0:C3:7E:E1:0E:21:63:8B:29:AE:54:08
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 059B39CB
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/1-j5-N4wS81Sgw37hDiFjiymuVAg.roa
Signing time: Sat 01 Jan 2022 09:04:15 +0000
ROA not before: Sat 01 Jan 2022 09:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48152
IP address blocks: 194.116.128.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94058955 (0x59b39cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jan 1 09:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa3e7e378c12f354a0c37ee10e21638b29ae5408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:51:70:60:05:a0:e9:3f:32:e9:5c:3b:09:
36:d7:03:ee:ed:8a:3d:23:1d:70:d8:cc:41:5f:9b:
3a:e3:ed:b8:f0:76:fc:49:e1:e5:dd:96:e5:d5:0e:
37:90:e1:24:a7:ad:81:fa:aa:bb:34:90:3b:83:b4:
01:13:dd:af:d2:71:60:12:4c:27:7f:a3:b8:ac:d1:
15:16:c5:1f:2a:ac:a5:52:8b:18:57:37:4f:27:8c:
19:dc:a8:de:48:83:98:78:26:81:aa:90:a8:7a:6c:
b3:4f:9c:66:8f:fa:02:96:b4:b0:f5:ce:4b:5b:b2:
ce:22:4c:a0:67:bb:5a:0e:b5:d2:2d:78:89:e1:c7:
d7:7c:38:3a:7e:21:43:53:65:ef:38:55:4b:e9:59:
7a:a3:42:63:f9:ee:79:6c:6c:c9:3f:9f:48:81:39:
8f:64:a6:1b:ba:aa:0e:a2:6b:30:98:6f:00:34:7c:
d4:b8:c7:80:6a:e9:bf:ba:c9:46:28:23:f6:6b:6f:
db:1a:0c:e1:b6:42:25:ed:1b:69:55:4a:5f:5f:5e:
fa:e1:b6:c5:d9:08:1e:17:9b:ba:a8:28:f8:e9:5a:
ee:b3:b3:b9:57:4d:17:21:76:aa:02:ed:29:6e:af:
e7:ce:ea:99:c6:e6:5f:03:85:a1:ca:33:31:8a:63:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:7E:37:8C:12:F3:54:A0:C3:7E:E1:0E:21:63:8B:29:AE:54:08
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/1-j5-N4wS81Sgw37hDiFjiymuVAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.128.0/23
Signature Algorithm: sha256WithRSAEncryption
42:8b:54:78:eb:00:6a:3d:89:04:0f:32:21:13:a5:11:bc:84:
66:bd:05:ba:09:93:2f:78:8c:b4:97:a3:e2:01:e0:0b:90:50:
36:ec:5f:2b:a4:56:df:d0:3a:9d:26:29:36:d9:71:10:1a:75:
6b:de:1a:33:b2:f4:e7:ce:f8:64:00:46:f1:c9:ed:d1:bb:a7:
b8:9b:b7:4f:6e:9a:4f:c0:80:95:9e:79:f6:95:a3:79:74:fe:
8a:e4:5e:23:60:2d:5f:97:14:6e:59:6c:c2:6b:8a:1b:3b:88:
9b:c7:24:a1:0c:b4:57:56:64:85:ad:35:b8:a5:0c:d4:d9:4a:
2a:5b:17:07:8c:e3:35:6c:a6:54:9e:93:14:ae:6f:f5:a4:75:
b3:87:f8:ce:25:79:d8:2b:5f:f4:79:6f:f1:a9:3a:08:6e:b9:
c8:6e:50:d7:a9:b3:30:6e:f3:36:ee:82:f6:b6:c9:3f:68:b0:
35:e9:d1:e2:04:8e:54:93:26:38:f4:fa:e7:81:d4:b3:fe:a6:
ab:40:30:b5:90:39:d5:34:30:15:75:f2:bf:34:66:a2:4c:2a:
66:b3:d4:68:85:3c:81:85:0d:96:f6:10:60:3c:2f:7b:d7:5d:
48:61:f9:ea:bf:c7:55:2c:d3:eb:69:26:ea:1d:b1:69:2c:17:
4f:c5:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:13 2025 by rpki-client