Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/ATxLfEzHAWk_P3jZz3K_n7eHJxM.roa
File: ATxLfEzHAWk_P3jZz3K_n7eHJxM.roa (raw, json)
Hash identifier: tgeyXK5gBnC22cDfFUrGZ793UiU2e8GXrzInKw7w9QA=
Subject key identifier: 01:3C:4B:7C:4C:C7:01:69:3F:3F:78:D9:CF:72:BF:9F:B7:87:27:13
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 018B6DBF9D89F4E80699551ECBEBA1183A18
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/ATxLfEzHAWk_P3jZz3K_n7eHJxM.roa
Signing time: Thu 26 Oct 2023 20:49:15 +0000
ROA not before: Thu 26 Oct 2023 20:49:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210108
IP address blocks: 194.49.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:bf:9d:89:f4:e8:06:99:55:1e:cb:eb:a1:18:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Oct 26 20:49:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013c4b7c4cc701693f3f78d9cf72bf9fb7872713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:c7:e7:bc:c0:82:1b:4e:2b:69:82:29:76:
c8:a1:a1:b2:ff:0d:65:d6:8e:cd:9d:2c:8b:b1:23:
d3:46:45:ab:83:d7:c1:65:b6:87:e9:76:5a:12:03:
34:0a:cb:68:59:24:30:da:60:54:c6:f9:69:25:5c:
6b:96:20:07:bf:5b:f1:72:1e:66:6e:7c:00:4d:cd:
c9:09:0c:e0:2c:b4:6f:cb:7d:8b:fe:a9:d3:6f:14:
79:ff:86:b4:92:19:ca:c5:b4:87:10:0d:b9:36:fb:
c8:00:8f:8e:c7:c2:8e:f6:a3:71:fe:d4:7d:5b:d9:
a1:5d:a3:82:67:42:53:27:1a:66:7f:f7:02:e4:bf:
75:e8:d5:fe:4a:40:9e:3b:62:f4:ef:31:60:51:d0:
65:5e:ac:03:8b:7d:21:a3:5f:1e:6f:8f:4b:11:b9:
ea:af:ac:ff:8f:0e:db:43:a8:a4:74:cb:52:be:f8:
49:c2:23:cb:e7:59:81:90:77:5f:f5:cf:0f:b8:26:
67:f2:26:e7:e3:77:ee:58:18:32:18:2c:2e:65:82:
54:e0:a9:01:c1:7f:3e:e6:19:f8:12:87:39:fd:15:
2d:45:fb:0e:d4:50:f6:d7:5b:94:66:9c:82:dd:89:
ac:35:be:b8:35:80:a4:10:f8:96:1a:46:e6:a2:f0:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:4B:7C:4C:C7:01:69:3F:3F:78:D9:CF:72:BF:9F:B7:87:27:13
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/ATxLfEzHAWk_P3jZz3K_n7eHJxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:96:70:39:17:e6:47:63:0e:54:62:2e:75:ad:0c:56:e1:c3:
71:b7:42:76:4d:5d:38:a8:bc:fd:7d:3c:ed:68:a8:64:bc:6a:
b3:70:c5:55:2f:50:fb:a0:8a:60:67:2c:4c:c7:83:69:d7:32:
1b:58:88:63:42:19:bc:13:20:be:d4:f1:de:78:1f:52:26:2f:
8d:a7:c5:d4:7f:f2:22:e0:a0:3a:c4:61:f3:43:5e:a6:94:6c:
35:fb:ed:00:2c:c6:00:58:77:74:fb:de:3a:ca:d8:42:5a:e9:
a0:6b:f9:5e:6e:ca:43:d1:20:b2:5a:14:ed:f7:c9:9b:18:ad:
a5:78:cc:46:e0:1c:ed:16:02:ef:94:91:33:6c:c8:6f:66:96:
da:87:81:ce:6d:77:58:cd:97:07:30:2c:05:54:fc:e4:50:f0:
86:31:4f:16:dc:19:bc:94:8f:74:5d:c6:99:3f:0f:cf:b3:79:
1d:28:e8:47:1f:02:64:50:e5:27:40:62:79:59:1c:ad:a5:77:
11:59:bc:78:31:89:5b:45:a2:55:15:5b:a1:dd:cc:59:06:a9:
3f:fb:b6:f8:3f:e7:55:ed:11:46:43:8e:fc:2d:6b:a2:ef:d5:
3a:d6:9e:57:84:5c:da:21:47:cf:16:89:7b:bf:94:78:ef:47:
42:d8:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:46 2025 by rpki-client