Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/oSE8u40dMrUEnvW2lKJtUWJLhEo.roa
File: oSE8u40dMrUEnvW2lKJtUWJLhEo.roa (raw, json)
Hash identifier: s5P3rE3x0hMsmeTMlEUZvu3w8u09uT0zDbSvTuYqWbw=
Subject key identifier: A1:21:3C:BB:8D:1D:32:B5:04:9E:F5:B6:94:A2:6D:51:62:4B:84:4A
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 018A703324435D36B3C91052F80E3CA499AC
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/oSE8u40dMrUEnvW2lKJtUWJLhEo.roa
Signing time: Thu 07 Sep 2023 15:11:54 +0000
ROA not before: Thu 07 Sep 2023 15:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 194.48.198.0/24 maxlen: 24
2a13:9540::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:33:24:43:5d:36:b3:c9:10:52:f8:0e:3c:a4:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Sep 7 15:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1213cbb8d1d32b5049ef5b694a26d51624b844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:5f:64:74:92:3e:7d:1a:03:09:e7:30:d3:
bd:7c:b0:02:a3:0a:01:20:c8:89:ed:a5:3c:65:62:
d8:e4:d7:e9:ca:4c:3d:0b:2a:a7:88:e6:ea:4f:42:
bc:12:bb:15:c1:66:b0:cf:65:7c:db:e8:0b:f3:ac:
47:83:8d:f9:6b:f5:20:87:4f:3a:d5:fd:e9:9f:53:
f2:6e:6e:93:d0:e1:82:51:6c:8c:03:4d:4f:f8:c1:
4c:98:13:e9:e2:a4:8a:2c:40:70:bc:7c:9b:53:cf:
60:d7:fb:bd:0d:90:09:29:56:61:ec:a0:46:64:0d:
d5:b9:43:57:48:4c:4d:10:cf:1d:31:fc:eb:46:20:
1b:6f:65:48:42:88:7c:c8:87:28:ff:7b:9e:bb:5d:
37:7e:65:fe:82:8d:6d:b7:15:d5:3b:02:cd:4b:78:
92:ec:d7:d4:82:8a:f6:05:7c:c8:40:f2:8f:75:6d:
3c:63:ad:13:d2:77:32:cb:ef:bc:00:3d:56:f1:ec:
88:ea:15:b8:9b:25:bd:a4:1a:19:bd:5c:87:8d:19:
50:f0:56:66:b9:03:33:da:7a:d2:c1:80:1e:58:c3:
7d:37:90:63:75:70:c2:d5:f0:d8:2d:cb:2a:d9:73:
46:e3:b6:f8:68:17:4c:5c:aa:1d:90:c5:e4:10:76:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:3C:BB:8D:1D:32:B5:04:9E:F5:B6:94:A2:6D:51:62:4B:84:4A
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/oSE8u40dMrUEnvW2lKJtUWJLhEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.198.0/24
IPv6:
2a13:9540::/29
Signature Algorithm: sha256WithRSAEncryption
b0:22:67:5f:6b:f2:40:ea:85:99:66:77:47:c0:9c:fa:f7:16:
55:47:73:f3:ec:fc:bb:de:2d:82:13:b5:a2:ac:70:42:f2:88:
fb:80:e0:33:9e:9e:84:9f:c0:9c:ca:78:30:46:d9:5b:c8:4a:
9c:dc:f7:72:15:43:a5:ac:47:b4:0a:24:3a:49:1c:d6:89:84:
2e:76:24:75:96:33:7a:84:a9:aa:04:7e:6f:96:62:5c:ad:23:
9b:dc:da:51:1e:28:07:6f:5f:75:e2:e8:70:c5:f5:5a:39:2c:
b1:46:d9:df:dd:a1:95:49:ea:d9:78:eb:a6:51:04:7e:70:c8:
e2:4e:95:cf:92:fb:76:56:c6:8b:3a:27:f5:20:95:46:79:56:
f7:33:43:f5:f7:9c:20:c7:81:fc:50:8b:25:23:c0:ec:f0:30:
83:f8:a9:d7:53:82:22:fb:2b:36:b7:9c:0b:0b:d0:8d:79:ca:
15:4b:8b:22:25:d7:c0:b3:53:bf:8e:ea:8d:45:55:3a:58:f2:
7b:0d:34:06:5e:37:bc:9a:61:5d:ec:49:d2:b7:c4:5a:a5:a1:
bf:eb:16:6b:93:b2:62:07:c6:5f:37:20:5c:27:97:ff:12:55:
2d:d8:20:b3:dc:bf:de:69:04:7a:ef:e6:ff:ec:78:a8:44:03:
85:fa:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:03:28 2025 by rpki-client