Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/8AApB5F2BwDJz7UVBtwt9buD2sM.roa
File: 8AApB5F2BwDJz7UVBtwt9buD2sM.roa (raw, json)
Hash identifier: TZSDTpM/FwAIQznuLLPnTvKtOQvUMs+Z4FvpTH7Bb9U=
Subject key identifier: F0:00:29:07:91:76:07:00:C9:CF:B5:15:06:DC:2D:F5:BB:83:DA:C3
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 017943
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/8AApB5F2BwDJz7UVBtwt9buD2sM.roa
Signing time: Mon 06 Jun 2022 10:56:20 +0000
ROA not before: Mon 06 Jun 2022 10:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96579 (0x17943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 6 10:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f000290791760700c9cfb51506dc2df5bb83dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:5d:ba:28:9b:9f:03:e2:f8:6d:62:33:50:
d3:4b:74:d4:d3:19:e2:4e:34:f9:eb:b2:35:ee:d4:
22:c4:15:15:d0:66:fe:b8:97:53:35:84:0b:2e:89:
fb:7f:71:78:5c:26:a7:c1:0c:ca:5c:cd:fc:59:85:
5b:f5:f8:0d:3c:be:b8:fe:2d:72:f7:ee:d8:d7:f5:
4c:2b:97:94:15:96:4f:af:25:71:41:cc:95:28:b1:
c2:ae:1b:da:22:da:bc:92:1c:e9:d3:17:8e:03:60:
f7:40:c4:e6:aa:5c:c1:3b:73:8f:d6:04:c4:49:42:
9f:f8:0e:4c:b0:4b:30:1f:82:97:2a:e1:30:0f:f4:
16:34:e0:50:15:68:67:8c:33:71:24:e0:b8:77:72:
b4:51:e0:1c:f2:da:26:8d:13:bc:b6:6e:db:4b:6e:
1b:73:1c:d2:fa:b1:50:6f:e0:5f:3f:41:7f:a7:93:
4b:20:f4:6c:92:de:c8:0b:94:91:38:49:b2:4b:a7:
ff:6e:4f:d3:13:4e:9e:d6:0d:c8:38:3d:5c:82:17:
3f:e0:0e:98:bf:7a:fc:ef:19:45:d4:05:35:4a:f8:
13:34:36:23:c7:79:c7:86:78:dd:be:98:e3:d8:68:
4f:0a:87:a2:eb:ea:53:77:ef:10:4c:58:bb:29:e7:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:29:07:91:76:07:00:C9:CF:B5:15:06:DC:2D:F5:BB:83:DA:C3
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/8AApB5F2BwDJz7UVBtwt9buD2sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.54.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:aa:44:79:4b:69:86:4d:44:22:36:47:cf:59:cc:c7:0f:
7d:3d:9e:f3:2b:42:8f:53:f9:0e:05:8b:73:e9:cb:87:2f:4d:
f4:d3:cc:52:aa:a6:60:f1:33:b8:ae:8a:6c:2d:4f:50:02:4b:
f0:e4:de:45:e0:02:50:8e:bb:87:91:7a:b6:89:2a:e3:30:e7:
cc:4e:9e:37:6c:81:fd:c0:d1:9a:fd:0b:0c:2a:8b:0d:5d:76:
7f:ed:fd:33:ad:f2:48:5f:3d:d5:b8:4d:1f:96:55:47:53:6c:
71:3e:67:7a:c2:23:27:6b:b4:0c:a4:76:ad:57:2e:30:e7:99:
ba:37:15:b2:d6:ac:95:c1:e8:39:e5:9c:fc:f8:4d:58:25:71:
f4:3d:52:67:9b:e9:9f:46:5d:92:fe:57:4b:b2:81:9f:f1:d8:
56:6a:1d:14:de:a2:8f:84:68:52:29:99:c9:aa:c6:eb:31:fb:
b1:f4:6c:00:73:41:8e:7d:96:0e:58:91:68:1f:a3:fd:d2:5c:
7a:42:0f:50:df:4a:27:17:1f:9f:2f:ef:72:55:e4:34:47:36:
ce:0b:ee:91:8e:7e:90:00:ac:e9:b8:b9:1a:20:95:bc:2b:f3:
e6:dc:7d:32:5c:8c:9a:26:84:91:6f:0c:d2:25:b8:44:c8:39:
46:71:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:07:29 2025 by rpki-client