Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/lA01GmlXhY8Kncf-Y2IzPnXQw0U.roa
File: lA01GmlXhY8Kncf-Y2IzPnXQw0U.roa (raw, json)
Hash identifier: 7ccD0q/3H/LSbcPnDBGGtz6TXhU6iYkYsvoow6mWJLI=
Subject key identifier: 94:0D:35:1A:69:57:85:8F:0A:9D:C7:FE:63:62:33:3E:75:D0:C3:45
Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial: 01B9FE36
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/lA01GmlXhY8Kncf-Y2IzPnXQw0U.roa
Signing time: Thu 05 May 2022 11:56:52 +0000
ROA not before: Thu 05 May 2022 11:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47951
IP address blocks: 194.104.137.0/24 maxlen: 24
2a11:5fc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28966454 (0x1b9fe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Validity
Not Before: May 5 11:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=940d351a6957858f0a9dc7fe6362333e75d0c345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:e8:a7:6b:17:58:78:0e:b5:82:93:86:79:
43:ff:9e:e6:75:4e:95:0a:fa:13:bf:bc:8e:6a:5b:
75:0c:14:7d:1d:12:4b:85:08:ea:d3:5c:df:10:f8:
db:68:1c:da:9c:ee:f6:64:cc:23:c7:52:27:60:7a:
fa:ad:2e:36:2f:f3:f6:6f:08:03:79:7f:f8:ad:53:
33:ad:f6:1f:1a:17:ac:ac:e1:7c:78:18:2e:17:d5:
17:77:4b:c2:49:fd:e5:72:82:c7:c6:29:5e:bd:74:
9e:0d:ce:ea:8e:de:ab:e9:3e:93:c3:43:2b:e1:6e:
3c:21:78:ea:15:f7:40:6f:70:4b:a3:ef:5e:e3:bb:
8d:6d:66:63:60:4c:76:77:00:c0:da:a4:2a:54:11:
aa:c1:a2:0e:8a:3d:98:e5:af:e3:b0:53:77:b3:74:
6f:8f:35:a1:13:c0:c5:57:10:15:83:cd:ef:df:98:
c4:ce:cc:d0:12:34:b3:6f:bb:c7:2a:99:df:62:a5:
8b:4e:6b:e0:7d:3e:88:46:24:9a:4d:e5:ee:45:39:
1b:bd:81:db:2b:4a:42:92:6b:fd:54:b6:7a:3c:f8:
c2:1d:1b:63:81:01:56:12:f9:c0:b0:a2:a4:6a:c2:
ce:d0:9f:d5:b0:aa:d6:9f:aa:b9:72:b6:df:7c:db:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:35:1A:69:57:85:8F:0A:9D:C7:FE:63:62:33:3E:75:D0:C3:45
X509v3 Authority Key Identifier:
keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/lA01GmlXhY8Kncf-Y2IzPnXQw0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.137.0/24
IPv6:
2a11:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:09:cf:6c:46:6b:e2:c4:61:19:e2:23:0e:a3:59:77:5c:56:
a3:38:8d:64:20:68:e9:a9:78:90:88:b2:9b:7f:a7:39:b7:30:
d7:2f:e2:23:4c:4b:ca:ba:a8:95:9b:d3:a4:f1:51:c0:b9:bc:
76:35:3d:bb:9d:83:f8:a3:4d:c8:4f:2a:7f:8f:6a:33:20:53:
da:c4:c6:d1:26:c0:4d:19:4c:4c:9b:1a:67:0f:66:57:24:a8:
4f:a2:a4:9f:a8:95:50:0b:7f:1f:e3:61:65:4b:80:d0:2c:08:
00:12:25:98:cd:1b:ed:2a:82:0e:e2:60:8a:39:c5:d6:5a:5a:
1a:3c:c6:b9:9c:be:50:2e:5e:ae:c4:20:95:ff:51:32:69:9b:
8d:3c:6b:94:44:f2:8c:d2:18:bc:47:b6:02:01:93:0a:25:b0:
ff:9e:f3:ac:a8:63:af:25:a2:5a:d3:2d:03:05:d5:8a:f3:20:
1f:79:cc:cb:e3:ba:31:fa:d0:25:17:10:9c:48:6a:27:56:7c:
7d:72:89:77:0c:ae:e7:8f:a1:db:a3:ad:46:70:5c:77:ad:c7:
62:1d:43:ba:ec:49:20:ca:99:a1:81:31:2d:31:d2:a1:9a:e3:
f3:b3:a8:8d:bb:9c:43:9d:7b:98:17:e2:e9:8a:5f:d9:5b:cd:
64:36:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:00:24 2025 by rpki-client