Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DPlvwmq28GGFFKmONQvzzlbwG9U.roa
File: DPlvwmq28GGFFKmONQvzzlbwG9U.roa (raw, json)
Hash identifier: M6WLCZDmWjTjfPkYhSN0PdanM7LYAoeuMfLhQ+ClJX4=
Subject key identifier: 0C:F9:6F:C2:6A:B6:F0:61:85:14:A9:8E:35:0B:F3:CE:56:F0:1B:D5
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 01867EAC21E61AD38B88E884E1AD5127670E
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DPlvwmq28GGFFKmONQvzzlbwG9U.roa
Signing time: Thu 23 Feb 2023 14:27:35 +0000
ROA not before: Thu 23 Feb 2023 14:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207021
IP address blocks: 194.0.24.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:ac:21:e6:1a:d3:8b:88:e8:84:e1:ad:51:27:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 23 14:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cf96fc26ab6f0618514a98e350bf3ce56f01bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:d3:6a:ba:65:60:b5:82:36:6c:22:9c:2c:
84:4e:59:32:5e:04:67:39:3d:06:76:91:3a:fe:56:
73:fd:1b:34:9f:65:8f:84:4f:74:57:8a:f0:46:ed:
22:af:92:ea:9e:3f:4e:a9:19:c5:ca:bc:13:31:5f:
49:b8:e9:9c:68:07:1a:87:6b:d4:1b:19:22:81:8a:
e8:bf:c8:ed:4a:46:11:e7:85:ff:db:39:23:10:a6:
58:9b:4e:cb:40:b7:c8:10:cb:87:8d:ab:b0:e0:42:
1d:56:dd:51:a1:26:53:cb:08:90:e6:19:79:2b:c9:
12:3b:c7:6d:ea:69:c8:06:6c:9b:fa:7a:68:1a:eb:
c0:69:57:43:e1:75:41:a0:d3:50:3b:ad:fc:3e:29:
91:b8:2d:74:f2:09:f1:fa:7b:6b:e2:fb:18:9f:a4:
06:4f:0c:e8:11:a5:d3:e1:9e:ea:f2:20:ef:64:d6:
2e:04:dc:5a:1b:cb:76:4f:c7:1d:f2:90:f3:e0:8a:
1d:24:ea:2a:4c:a1:49:14:c9:12:52:75:ff:af:62:
a4:f8:57:9e:0e:c8:09:1e:eb:7e:d3:05:ad:0e:ef:
30:4e:5d:9d:de:09:71:ea:b8:ef:87:91:48:9c:a2:
84:1d:af:0c:70:fb:19:c8:db:44:4b:86:d2:cb:ad:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:6F:C2:6A:B6:F0:61:85:14:A9:8E:35:0B:F3:CE:56:F0:1B:D5
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DPlvwmq28GGFFKmONQvzzlbwG9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0/24
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
15:5d:65:6c:69:39:f6:de:a8:50:67:c1:1c:75:e0:e0:dd:34:
7e:29:05:8f:94:e3:33:2e:e5:b3:02:7a:53:ec:b7:93:1e:50:
62:af:19:5d:15:6c:19:b8:9a:63:a8:56:49:2a:2a:ea:04:4c:
0e:1b:93:5c:75:fd:a3:0e:db:39:01:46:5f:2d:16:70:a5:35:
19:d9:97:19:15:b8:fd:2c:60:9e:75:38:f5:8c:3c:67:b5:82:
4a:d0:92:99:80:02:9f:b1:cf:cf:5b:c8:5d:ac:17:be:be:d6:
df:9f:88:cf:aa:46:0b:f3:4d:0b:68:07:03:68:ff:f9:05:97:
18:50:27:83:b2:59:d8:c9:73:a5:e6:5b:0a:f0:d4:ce:19:28:
bb:8d:e7:c2:c1:25:3a:e5:a1:fd:70:28:27:49:3f:f7:59:8a:
fe:91:29:6e:ee:f3:ae:31:dc:cf:db:c7:8c:12:a0:d0:cc:ee:
1d:96:cd:63:75:0d:25:6a:68:18:34:38:ab:36:52:64:ac:00:
a1:06:d2:d1:5f:6c:96:00:4e:e1:8f:e0:d1:90:40:52:ea:b4:
c2:a8:46:0e:05:62:92:2a:50:24:73:2c:a6:ad:3a:26:be:03:
6b:ea:f4:0b:65:a7:a5:74:3b:40:c9:66:05:6b:5b:b8:61:89:
24:2b:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:26:20 2025 by rpki-client