Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cOZKqCzTd6W_zq6Sge7M8C9cgFM.roa
File: cOZKqCzTd6W_zq6Sge7M8C9cgFM.roa (raw, json)
Hash identifier: wp+SjXkBUoBmQZboUkWknayq0STllH2p8s3otQu6Sl4=
Subject key identifier: 70:E6:4A:A8:2C:D3:77:A5:BF:CE:AE:92:81:EE:CC:F0:2F:5C:80:53
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01838E605610072A5D9C2CF11A0D1A68D1B0
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cOZKqCzTd6W_zq6Sge7M8C9cgFM.roa
Signing time: Fri 30 Sep 2022 12:30:21 +0000
ROA not before: Fri 30 Sep 2022 12:30:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 192.109.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:60:56:10:07:2a:5d:9c:2c:f1:1a:0d:1a:68:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Sep 30 12:30:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70e64aa82cd377a5bfceae9281eeccf02f5c8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:f0:75:fb:66:62:7f:74:6f:04:61:cd:4d:
f2:28:ea:b0:67:96:09:87:cd:b8:6e:61:e9:41:92:
ca:aa:c4:f0:a3:87:b4:d6:8a:5d:35:1d:70:dd:c9:
f4:7f:94:89:80:f5:c4:a5:65:1e:f7:29:29:a8:2c:
b5:ec:b0:58:b5:37:74:d3:ce:7d:43:df:20:9e:b3:
6a:3a:fc:87:41:a5:f5:58:eb:99:20:c0:b6:ac:4b:
b6:5f:2d:27:64:2d:11:d6:28:46:c5:d6:58:9e:9c:
c8:3c:46:59:34:00:bc:3c:a0:4f:f7:bb:9c:2f:95:
27:d1:f9:49:55:53:a0:d4:c3:aa:fe:3a:7c:c0:4e:
2c:cb:dc:10:6e:eb:1c:be:80:d4:2b:d5:71:35:57:
13:56:94:b9:68:49:5b:88:53:27:f4:55:ff:45:0b:
2e:b1:35:fe:51:14:33:fe:b8:89:11:29:b8:6e:a3:
8d:51:27:b6:ca:e4:93:2f:b6:bd:b6:32:4d:a6:6c:
42:75:56:43:27:49:c6:4d:9b:6d:8e:6d:bc:2e:ea:
2f:26:2a:89:28:1f:fd:f6:32:aa:73:27:7f:eb:35:
4f:35:4a:42:7e:4c:62:92:ee:72:60:68:5c:98:fa:
0b:ec:ec:b4:7c:e6:78:3a:d2:b1:62:b1:41:fb:bf:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:4A:A8:2C:D3:77:A5:BF:CE:AE:92:81:EE:CC:F0:2F:5C:80:53
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cOZKqCzTd6W_zq6Sge7M8C9cgFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d4:ae:30:d9:9d:f5:aa:65:73:06:74:e4:c1:c4:24:55:88:
90:49:77:ad:e7:dc:5a:7b:22:1f:5a:49:e5:13:18:91:70:f1:
58:1c:f5:99:9f:f0:96:7c:4c:89:84:aa:ef:03:a7:7e:93:b4:
f0:b1:22:72:e2:c6:73:b1:d5:c1:e4:cf:b3:c1:a5:40:17:69:
1f:06:12:b4:24:be:01:21:6c:7e:96:d7:b7:c5:ba:13:21:74:
90:38:d5:a5:ee:7f:9c:77:01:aa:4d:7b:92:dd:f3:af:fa:0e:
f8:2c:ed:35:4e:a2:23:c8:39:45:19:38:b9:e2:1d:3f:04:40:
d1:d0:bb:48:b4:db:58:6c:da:6f:c2:d9:84:cd:d9:b3:3d:7d:
0a:c6:66:88:66:bd:89:e0:a8:95:35:84:e3:70:8c:b9:6f:50:
6e:09:78:5c:f8:d1:0d:e6:e0:03:7b:49:a9:00:31:ef:f2:6a:
21:bb:8f:31:3a:e2:e4:74:19:1c:d4:95:3f:43:b8:42:d6:82:
0a:de:0b:2d:d4:42:c8:15:69:78:2f:34:c2:47:73:ba:23:c8:
f9:d1:43:91:b0:27:55:b4:63:72:7a:3e:c6:92:99:c2:06:53:
c8:a6:c0:7d:39:58:98:90:48:d9:4b:81:ee:4f:f0:26:1d:76:
d5:67:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:52 2025 by rpki-client