Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/4AKWnpMBuEdd-VFRxwne9ncAeJA.roa
File: 4AKWnpMBuEdd-VFRxwne9ncAeJA.roa (raw, json)
Hash identifier: EwxtOOPt5oi/O8FGzeRJtT3s8JixA1C0Waqx0RK/Hl8=
Subject key identifier: E0:02:96:9E:93:01:B8:47:5D:F9:51:51:C7:09:DE:F6:77:00:78:90
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 08500252
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/4AKWnpMBuEdd-VFRxwne9ncAeJA.roa
Signing time: Sat 01 Jan 2022 06:04:51 +0000
ROA not before: Sat 01 Jan 2022 06:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211874
IP address blocks: 194.93.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139461202 (0x8500252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jan 1 06:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e002969e9301b8475df95151c709def677007890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:28:e9:83:f3:6c:51:15:64:12:09:a6:97:
e6:cc:ba:c0:b2:3d:94:dc:42:3b:b4:5e:0b:8b:41:
97:88:c2:50:98:b9:bc:ad:77:57:c3:a4:de:7a:6e:
1b:ed:f2:8a:7a:67:cd:ed:2f:5a:86:69:fb:2e:6f:
57:31:4b:dc:43:06:1a:19:6c:11:37:2c:b1:d3:0e:
89:c8:69:bc:d7:5d:c5:42:f0:d7:aa:6e:5f:ef:c8:
4f:fd:22:a3:72:4e:12:a0:f9:e4:de:68:59:13:b4:
60:be:c4:a5:9f:c4:d8:ca:61:a6:d9:fe:f0:50:99:
41:ce:88:f3:91:48:bd:5d:b5:03:45:88:3b:9e:6e:
83:d8:fb:78:16:ab:09:a1:44:8d:ed:f8:57:92:3c:
72:1a:bc:f9:cf:00:22:73:f4:68:d5:37:a0:69:2f:
f8:90:65:46:cb:fe:d9:d5:ff:9d:ca:56:2f:4f:0f:
02:74:55:38:8d:43:ba:52:e6:dc:35:bb:d8:aa:5d:
69:8e:f2:bd:17:c1:8a:36:fe:fb:a5:29:4b:29:f6:
34:ce:6b:c8:df:63:f9:60:81:01:87:25:5e:05:3a:
fb:c1:96:5c:e2:17:ce:34:54:9c:7c:6c:d0:3e:e6:
90:0b:b8:13:2f:1c:92:e5:81:a1:20:e7:b6:3a:3e:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:96:9E:93:01:B8:47:5D:F9:51:51:C7:09:DE:F6:77:00:78:90
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/4AKWnpMBuEdd-VFRxwne9ncAeJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.44.0/22
Signature Algorithm: sha256WithRSAEncryption
06:9e:19:cf:0f:4e:99:9f:77:e7:99:4c:1c:e2:8e:19:a2:92:
5f:b2:91:c3:68:e5:9c:08:4d:39:77:c6:48:7e:72:95:c0:27:
72:2e:1d:07:6f:12:2a:91:76:be:d9:f3:e6:50:9a:fd:9f:25:
76:15:4e:c7:f1:66:d7:b5:00:b7:49:06:64:0b:27:08:4d:9f:
52:73:ab:9c:2c:bd:c6:40:52:dd:e2:5e:16:17:a1:fa:1a:7b:
b5:93:a9:ec:c7:9d:71:8a:1f:6a:5c:0f:eb:47:3e:4f:e0:88:
d8:ee:67:98:cc:30:cb:97:5b:71:7e:fc:8d:e8:16:68:60:99:
fc:d2:61:f9:e8:e3:e8:13:46:cd:87:68:d0:41:64:5a:57:cb:
04:76:ce:31:83:f8:4c:46:3d:90:12:b2:6a:53:7a:c6:c7:27:
b0:af:3e:e0:24:f4:d0:c3:61:dd:f9:3f:ab:ab:af:a2:a1:d1:
07:c8:bb:21:9b:e2:fe:57:dd:6a:59:d7:f1:c9:e8:01:ae:88:
7e:c4:be:4b:c8:41:b2:87:93:fd:6e:d6:da:b8:ee:dc:d3:d6:
98:b9:fe:d1:03:0b:11:bf:3d:a1:83:e8:71:23:56:b4:87:86:
27:d0:52:4e:16:d3:00:6c:a3:73:62:25:c4:82:f9:0c:e3:8d:
9b:72:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:56 2025 by rpki-client