Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/fHOB94TzDALcUQ3MTnq1dQ-pp9I.roa
File: fHOB94TzDALcUQ3MTnq1dQ-pp9I.roa (raw, json)
Hash identifier: Uva6gol47UIUjNhqt4XP2S9iwbHGfutJhsHg6duWo2M=
Subject key identifier: 7C:73:81:F7:84:F3:0C:02:DC:51:0D:CC:4E:7A:B5:75:0F:A9:A7:D2
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01856F94997447925B02A9FCA65A3CC501BB
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/fHOB94TzDALcUQ3MTnq1dQ-pp9I.roa
Signing time: Sun 01 Jan 2023 23:04:47 +0000
ROA not before: Sun 01 Jan 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 192.109.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:99:74:47:92:5b:02:a9:fc:a6:5a:3c:c5:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7381f784f30c02dc510dcc4e7ab5750fa9a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:53:c4:31:cb:ca:45:00:96:94:c8:0f:12:
ce:6b:05:1d:f2:1e:e1:4e:0a:81:ef:86:0c:d4:58:
f7:f3:bd:64:1d:6c:2e:ff:78:d1:8a:d9:57:0f:fa:
0d:c2:a5:99:9a:58:cb:b7:7d:f5:1e:02:da:40:0a:
cc:a8:20:6c:b1:64:4d:72:db:73:ce:4e:e5:e7:1d:
a5:1c:81:27:43:77:73:45:2c:94:f9:66:4e:85:11:
0f:29:2a:06:1b:15:5e:4c:77:a9:a4:8f:79:ca:7b:
21:11:3c:d9:f3:77:75:a8:7c:a8:2f:17:b8:f1:ac:
17:6f:91:1a:f0:b9:17:69:cc:32:33:18:5e:8a:1b:
c1:8c:8b:5d:a1:ce:4a:8f:e7:55:42:d8:53:bf:11:
74:19:eb:1a:b1:0b:33:a2:ec:2f:0b:6f:86:ed:6f:
0a:5b:45:61:b0:61:eb:37:0a:2a:88:41:f1:93:5f:
ba:f5:ad:41:1d:6a:ce:63:f6:21:ed:73:73:c0:6b:
2d:dd:b4:99:58:fd:a1:89:80:a1:c1:bc:9c:be:fe:
83:30:f5:97:fb:1f:ff:40:c3:53:cd:38:ff:f2:0a:
8a:8a:bd:37:43:57:b8:a6:1b:95:73:77:f4:01:af:
fe:22:2a:b9:ce:82:8a:db:a1:8a:59:46:06:72:e4:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:73:81:F7:84:F3:0C:02:DC:51:0D:CC:4E:7A:B5:75:0F:A9:A7:D2
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/fHOB94TzDALcUQ3MTnq1dQ-pp9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6d:be:d0:93:7e:6e:d5:d7:b5:8f:ca:02:45:e4:f9:92:7e:
6c:71:fb:ad:90:50:07:e5:d7:2a:64:54:2b:32:79:f1:f8:d2:
10:3f:fd:79:00:c5:c1:68:55:23:e6:c0:80:25:8e:1b:15:40:
dd:55:07:c5:2d:61:f7:22:69:36:4e:65:51:14:e6:6e:5f:be:
c4:26:ae:00:a8:46:de:c1:47:bc:5a:c2:ac:f6:fd:e6:70:7c:
d8:a6:5c:43:47:91:75:f0:10:36:44:e5:f1:5a:5a:64:cd:e8:
37:34:fe:bc:2d:40:01:cd:46:6d:01:8b:0e:e1:f7:d0:79:8a:
69:1e:c8:8c:c2:ec:0c:49:24:9b:cf:c9:82:45:09:6b:ff:fc:
c8:17:fb:4d:05:40:dd:65:d0:94:56:ee:fe:4f:79:37:04:15:
5e:68:2a:ce:a7:28:71:62:4c:9c:a4:8e:da:fc:2a:dd:64:24:
dd:b5:f5:d6:92:2e:ee:9e:97:87:1d:a2:ca:b8:5b:8a:85:1a:
6a:09:e0:bf:04:71:8b:f9:7d:e6:c5:20:0e:25:91:01:f5:7f:
a7:6c:49:66:46:dd:67:64:5d:05:cb:c0:3d:32:6d:7d:ed:3c:
fe:8a:35:5b:9c:b9:87:0b:8d:4e:1d:08:1e:f8:92:f8:c9:6f:
9b:e4:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:02 2025 by rpki-client