Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/RlTlscpCCja37_sCCK4btX3-D6Q.roa
File: RlTlscpCCja37_sCCK4btX3-D6Q.roa (raw, json)
Hash identifier: gUh0GNPIFjjhDshbHOzGsyPglMxFHVRLogipMYVYFMc=
Subject key identifier: 46:54:E5:B1:CA:42:0A:36:B7:EF:FB:02:08:AE:1B:B5:7D:FE:0F:A4
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01856F949C05EAF33C46DCBD909E4033B04B
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/RlTlscpCCja37_sCCK4btX3-D6Q.roa
Signing time: Sun 01 Jan 2023 23:04:48 +0000
ROA not before: Sun 01 Jan 2023 23:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197705
IP address blocks: 94.26.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9c:05:ea:f3:3c:46:dc:bd:90:9e:40:33:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 23:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4654e5b1ca420a36b7effb0208ae1bb57dfe0fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:2a:b9:f3:cb:89:83:41:56:01:e6:6d:2e:
f0:57:a1:0b:c7:fd:e9:5c:23:6f:c5:1c:7a:2b:c8:
c1:43:22:e9:c4:1a:9a:2d:3a:c8:bd:8b:91:e1:1a:
83:e4:aa:92:d5:0e:91:73:38:34:aa:62:a4:d3:21:
3d:cb:3b:c0:ae:f3:2c:18:da:68:df:98:55:d0:63:
13:70:56:8b:6e:bf:23:5a:7d:82:e6:85:77:2d:62:
1b:11:4d:9d:fa:48:ae:4e:71:bc:0b:3b:8b:83:74:
37:f7:af:88:b6:89:ac:cf:97:1c:83:d8:3f:63:0a:
85:cc:4b:50:a2:8e:9d:cc:69:b4:52:4a:dd:e6:aa:
85:4e:33:73:81:ef:5f:f9:38:00:10:03:44:51:bd:
b1:dc:84:57:b4:df:ca:bf:71:83:4a:aa:6d:41:5a:
44:61:28:02:a1:5d:06:6a:86:55:56:b5:95:3e:a9:
a2:4f:dc:54:90:0b:b1:34:5a:59:2f:f8:d2:b2:f6:
9e:3d:2c:8c:aa:15:bd:92:ea:e0:e8:b0:f5:06:44:
b0:ca:c7:5f:fa:61:d0:1f:0d:7c:6b:58:f5:d1:98:
d0:62:5b:97:94:59:2f:bc:81:54:09:27:1f:cd:a0:
d0:aa:55:53:ae:da:fa:db:4a:59:98:07:a7:7f:16:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:E5:B1:CA:42:0A:36:B7:EF:FB:02:08:AE:1B:B5:7D:FE:0F:A4
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/RlTlscpCCja37_sCCK4btX3-D6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.38.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:ed:3e:b9:77:01:85:73:77:0b:9e:04:bd:79:c5:a0:13:
53:5c:f0:57:ed:3d:b6:22:67:0f:3e:49:91:ea:c0:42:2c:34:
ba:32:ef:d9:9c:a2:2d:5a:cf:3c:3c:37:e6:1e:03:ab:1c:07:
f4:ba:50:9b:0a:aa:9a:8b:4e:15:ec:eb:a0:8f:c4:e5:1e:f5:
f1:d6:6a:0d:ca:16:70:7d:b6:09:18:c9:c3:e0:d7:8a:f1:fb:
fd:df:f9:7f:d7:50:49:4f:f0:51:bf:a4:7f:93:04:75:db:4f:
3c:9f:9b:b4:7b:5f:03:05:a5:f3:ed:48:92:0a:84:fb:94:73:
f0:35:45:2a:b8:86:76:df:27:d9:cd:c2:04:7b:2c:73:d6:f0:
1a:17:e0:fe:33:19:ff:f6:09:89:95:eb:6b:6e:d5:38:e8:3e:
f7:75:ec:4d:43:02:ff:b2:3e:df:b8:4c:a3:54:f0:4d:8e:e5:
82:be:34:bc:79:1e:d8:4e:ca:3f:32:75:b6:9e:1f:e2:60:83:
a9:df:c8:36:13:26:5f:3d:1d:c0:8e:2e:09:ad:82:f3:d5:a7:
e7:e8:f5:54:68:82:d0:2f:cb:41:cd:ab:1c:7a:96:13:0a:b9:
0c:ed:45:ea:04:bf:ba:3e:a5:ba:5b:93:16:e4:f3:a6:8e:df:
05:c1:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:27:58 2025 by rpki-client