Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/V4AyJSCivgdiLkb-PeaJYIVv1HA.roa
File: V4AyJSCivgdiLkb-PeaJYIVv1HA.roa (raw, json)
Hash identifier: /WX9XXhh70rdo3zYNHCmI9MGfUE954BiwUDTml2nUNc=
Subject key identifier: 57:80:32:25:20:A2:BE:07:62:2E:46:FE:3D:E6:89:60:85:6F:D4:70
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 018C68AC86A7B4BFA0DE71BE414FF1165D1F
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/V4AyJSCivgdiLkb-PeaJYIVv1HA.roa
Signing time: Thu 14 Dec 2023 14:13:06 +0000
ROA not before: Thu 14 Dec 2023 14:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 194.0.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:ac:86:a7:b4:bf:a0:de:71:be:41:4f:f1:16:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Dec 14 14:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5780322520a2be07622e46fe3de68960856fd470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:8c:98:63:0e:69:d0:0c:aa:8d:51:74:14:
0c:90:ba:a2:e3:74:0e:32:48:db:98:1c:8d:9e:67:
63:d1:8d:da:4b:3c:ca:ed:bf:8a:91:ae:b5:bf:d1:
21:2c:a7:50:d8:40:0b:34:9c:90:bb:13:b4:3c:8e:
6d:25:f1:89:2b:0d:d8:74:bc:71:7a:96:d0:88:38:
ab:88:dc:cb:ad:6b:8f:88:dc:2c:2a:a1:4d:da:fb:
ac:36:be:73:d8:e1:64:28:91:48:de:29:4e:c1:6b:
31:c6:20:80:04:d8:46:0f:9e:05:dc:d3:de:86:97:
60:34:23:97:bb:d3:99:db:65:d4:77:c3:aa:be:33:
84:80:33:e0:f7:d5:c0:7f:57:1f:be:3f:31:af:fe:
ce:04:bc:3d:14:d4:14:60:6f:e5:52:05:ea:f8:97:
0c:f1:08:3e:9e:f2:35:57:a4:de:18:3e:5f:ee:8c:
11:e4:71:76:fe:4a:73:62:f7:82:7a:e3:a4:d2:dd:
cc:f0:4f:9c:e5:d4:d2:be:0f:f2:e6:10:e3:ba:4b:
b4:88:12:b5:66:4e:67:8f:c3:ba:c5:9d:c2:32:bc:
26:9e:4d:3a:d6:d1:c7:f8:e0:f0:66:19:b0:ba:55:
42:2d:96:18:20:40:6f:75:fe:71:66:ec:ca:35:1c:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:32:25:20:A2:BE:07:62:2E:46:FE:3D:E6:89:60:85:6F:D4:70
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/V4AyJSCivgdiLkb-PeaJYIVv1HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b5:31:c1:cc:c9:b1:ca:da:df:2f:fc:94:8a:df:ae:ec:48:
ab:97:fc:33:5a:46:82:26:2a:3c:5e:19:a9:5c:ca:3d:69:f8:
86:93:c3:21:d9:17:ad:bc:4c:b0:47:71:ed:de:e3:7c:c2:fe:
0b:e7:6d:9b:c8:4c:9d:bb:36:28:91:50:48:c7:2d:eb:06:f6:
e5:74:96:cf:6a:0a:2b:d9:82:98:ee:f9:e9:a8:50:52:f7:06:
6c:14:f8:77:b0:27:90:b8:87:10:d6:97:2f:78:a3:77:55:4d:
d2:3b:ba:03:fe:df:5f:27:5a:e0:68:28:6a:54:04:25:11:69:
9b:9b:2c:0e:58:c7:38:fb:fb:c2:9c:f7:c2:0f:f7:64:af:cc:
27:b0:60:8b:60:c4:5b:ed:06:2f:99:24:aa:39:bf:b3:ce:06:
44:89:5a:6f:f2:b3:8e:be:2f:72:a1:85:93:34:11:f0:a2:eb:
e0:82:94:e4:95:fb:5b:d8:38:71:89:44:b6:ca:02:b5:50:fe:
95:48:e4:6e:1e:42:9a:f9:b7:b3:94:e6:1c:bb:99:3e:4c:89:
14:cb:a1:42:f9:d4:54:46:e6:28:e0:86:49:06:34:0c:07:df:
47:af:e2:7a:06:08:1f:99:f7:64:e5:fd:87:00:c3:47:c1:45:
29:10:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:38:30 2025 by rpki-client