Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/V0EMCI7kqm-UuEpMXWnz0JoK1fE.roa
File: V0EMCI7kqm-UuEpMXWnz0JoK1fE.roa (raw, json)
Hash identifier: JlAU2F9kNM7a/BncK+FjSX2Vleg0fT7gQtBNN/wYUt8=
Subject key identifier: 57:41:0C:08:8E:E4:AA:6F:94:B8:4A:4C:5D:69:F3:D0:9A:0A:D5:F1
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 0182686B8BA90172DA00F68BB3565540D118
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/V0EMCI7kqm-UuEpMXWnz0JoK1fE.roa
Signing time: Thu 04 Aug 2022 10:34:14 +0000
ROA not before: Thu 04 Aug 2022 10:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 192.109.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:6b:8b:a9:01:72:da:00:f6:8b:b3:56:55:40:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Aug 4 10:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57410c088ee4aa6f94b84a4c5d69f3d09a0ad5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:0a:19:7d:20:53:ad:5c:98:71:a4:2e:62:
55:02:dd:49:e4:82:a8:b3:4a:4a:9c:0e:6c:bd:3c:
86:65:c9:f6:7d:32:7a:0c:16:bd:f0:cd:47:84:23:
ac:d5:00:51:8c:5d:bd:af:7e:e1:fc:0a:4a:8f:db:
41:24:12:06:ae:39:ed:bf:92:54:28:b2:9e:e4:3e:
f4:a9:fe:d0:30:ab:6f:cb:06:21:1b:ac:bd:58:3c:
66:c0:64:23:97:8e:77:75:69:a4:bb:90:bf:02:31:
b3:26:0c:8a:6f:8f:ba:cc:4c:6f:2e:f6:1f:6b:4e:
62:ab:61:48:48:8d:d0:6e:21:c4:ae:60:dc:c8:d1:
e1:6f:d0:c3:31:46:6b:74:b4:97:d8:db:07:c5:c0:
0b:89:ad:5f:c6:56:b8:e5:4b:12:6d:1b:0c:52:fb:
9a:9d:6f:51:aa:fe:64:33:4c:45:86:39:18:e5:0f:
6e:43:4f:86:60:3e:9f:47:39:5f:f4:85:fc:6b:f4:
b6:07:3c:60:6d:08:6b:4f:c5:98:5c:e0:d3:67:9a:
d3:2d:6e:fc:84:69:7b:a5:79:56:af:0f:60:21:28:
1a:89:08:ea:2f:d9:78:3c:b5:45:e1:c0:c0:62:f0:
9f:a8:9c:fc:87:7e:91:b2:50:db:81:eb:1c:3c:52:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:0C:08:8E:E4:AA:6F:94:B8:4A:4C:5D:69:F3:D0:9A:0A:D5:F1
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/V0EMCI7kqm-UuEpMXWnz0JoK1fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6f:0b:31:01:db:5a:8c:1b:d1:e7:f0:51:b4:2e:ce:57:0c:
20:1f:00:b8:b6:35:41:81:19:ac:8b:16:58:76:56:d8:c9:b7:
f7:ab:57:da:d1:6d:00:66:a2:af:26:64:7f:fb:6d:c6:42:2b:
c2:80:df:79:0f:98:6b:c8:54:cb:b8:b1:29:af:20:b6:72:8b:
5f:f6:5d:3d:e1:a8:e4:f6:62:02:26:e5:00:86:af:80:f4:7f:
41:bb:db:99:ce:cd:c3:c7:b2:d3:f9:e3:50:02:d0:97:10:d1:
22:94:c8:6e:41:47:73:96:a1:a7:73:df:d6:39:74:86:b1:c1:
67:ae:b5:4b:b3:41:c1:f3:78:54:af:79:d4:6f:0b:04:f6:e8:
e7:32:cb:8d:7f:b2:9d:b4:ba:da:f2:40:28:d6:88:fd:b3:b6:
7f:02:51:73:bc:0d:34:9a:08:25:d4:12:bf:8e:87:81:89:84:
6c:10:76:bd:f1:bf:cc:d4:1b:92:7d:30:77:30:05:9f:a4:95:
28:a9:28:f5:e7:8a:7b:11:15:d4:88:e2:72:a6:b9:ec:4d:50:
51:c9:31:ca:c0:0c:f1:a1:cb:81:3c:7d:b5:e4:46:5b:c1:47:
fa:13:4b:8d:da:25:67:d5:86:2c:ba:c1:f4:81:03:f5:b8:f4:
ac:96:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:57 2025 by rpki-client