Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aoInJzc-QxjGwtRq_qIa9-5eo0k.roa
File: aoInJzc-QxjGwtRq_qIa9-5eo0k.roa (raw, json)
Hash identifier: KckQWLLhohGOVRwYAHwIbbQm3NCnd3GRbaqZ3199BYA=
Subject key identifier: 6A:82:27:27:37:3E:43:18:C6:C2:D4:6A:FE:A2:1A:F7:EE:5E:A3:49
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A93C6BF1AB77D4D0C071C71FD1DA67BDC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aoInJzc-QxjGwtRq_qIa9-5eo0k.roa
Signing time: Thu 14 Sep 2023 12:59:50 +0000
ROA not before: Thu 14 Sep 2023 12:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201604
IP address blocks: 194.71.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:c6:bf:1a:b7:7d:4d:0c:07:1c:71:fd:1d:a6:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 14 12:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a822727373e4318c6c2d46afea21af7ee5ea349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:d4:8e:55:3f:8c:8f:2a:3b:9b:66:07:44:
8d:50:23:82:2f:bc:79:33:53:f7:50:8c:64:e4:da:
bc:5e:74:1d:c9:4f:b9:0c:68:fa:a8:4d:ff:ba:a0:
23:7c:eb:bc:7b:ad:98:62:dc:9e:d9:3a:33:7c:96:
5a:8e:11:29:a3:b0:d1:af:8c:aa:e6:e3:4b:96:da:
79:3c:f7:42:fb:9f:25:49:6b:b4:1b:86:ee:1d:36:
c0:7f:c5:a5:71:90:f3:3e:0b:78:1e:2f:63:89:a8:
dd:c6:f0:54:04:1d:a3:47:b6:dc:8b:5a:b2:ec:e7:
aa:89:60:76:c8:40:a7:34:f0:1b:a7:d4:d5:71:d6:
ae:f4:bb:56:d9:65:a9:14:6d:89:17:56:10:4f:a5:
0c:e0:50:a9:39:97:13:65:d0:07:3a:d5:55:55:60:
5d:47:1e:fb:b4:8d:f8:bb:82:0a:c1:ea:27:d9:9e:
6b:6f:23:3f:aa:a9:0d:57:a5:9e:e3:be:2a:81:e2:
4b:92:f3:1b:c2:a2:58:46:3b:e2:bf:1b:7d:e4:e6:
da:08:79:b4:9a:6c:ce:ac:24:53:a7:a9:ce:32:79:
18:6e:34:df:3a:f1:b3:f7:4c:3c:70:6e:ec:91:b8:
71:c9:1e:1b:75:4a:29:47:da:39:5c:67:83:39:7a:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:27:27:37:3E:43:18:C6:C2:D4:6A:FE:A2:1A:F7:EE:5E:A3:49
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aoInJzc-QxjGwtRq_qIa9-5eo0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
01:50:ac:d2:73:90:fe:68:6f:a9:50:9e:cc:7e:fb:69:7b:17:
d9:72:88:da:f9:98:f5:08:61:d5:89:d3:5a:bb:02:af:55:15:
0d:66:5c:62:75:79:eb:b7:88:33:e2:db:ed:94:bd:8f:15:ad:
a4:5f:2f:23:a1:46:d4:e0:bb:30:2f:d3:c2:8e:c4:40:b4:60:
c9:44:55:d7:dc:47:14:a3:cb:98:92:42:c1:14:72:89:fa:51:
d4:8e:6e:f8:d3:bc:ab:2e:80:ea:2f:ea:81:cc:b5:d3:48:fd:
17:8d:fa:f1:e4:88:fe:cd:f2:b5:a3:21:94:73:f3:b2:5e:e0:
6d:00:c6:7d:c8:59:b9:31:84:62:3b:7a:3f:1c:a6:36:88:cb:
c8:8f:04:6b:c2:17:aa:8e:fe:43:e7:83:79:1d:10:fc:62:cc:
54:df:d4:c0:9a:97:0b:03:1a:a5:b6:c0:e8:bf:92:fc:17:54:
dd:cd:3f:11:c0:ca:ea:2a:15:63:24:e1:87:c0:18:02:1c:77:
38:fa:4c:b9:22:3b:75:47:12:37:53:39:34:20:a6:92:51:87:
5d:90:5d:b8:6f:e0:ec:01:ee:51:d9:28:6e:17:59:2b:7c:99:
18:3d:15:57:bd:0a:2b:39:d4:5f:68:b4:f9:0c:05:fb:dd:ec:
11:9d:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:03 2025 by rpki-client