Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DcLhpSu5M9poIMt4o3UEjD3CGuA.roa
File: DcLhpSu5M9poIMt4o3UEjD3CGuA.roa (raw, json)
Hash identifier: ixLRS2Gb53aDDiCxYFvq0M/oOmBQMyXdwafTEtBKNpU=
Subject key identifier: 0D:C2:E1:A5:2B:B9:33:DA:68:20:CB:78:A3:75:04:8C:3D:C2:1A:E0
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 01867ED6E32800029D0452C7E69403633D67
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DcLhpSu5M9poIMt4o3UEjD3CGuA.roa
Signing time: Thu 23 Feb 2023 15:14:17 +0000
ROA not before: Thu 23 Feb 2023 15:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201612
IP address blocks: 194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:d6:e3:28:00:02:9d:04:52:c7:e6:94:03:63:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 23 15:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc2e1a52bb933da6820cb78a375048c3dc21ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:9e:ff:09:ec:20:3a:ef:ec:64:4c:24:88:
d7:f7:2e:21:19:b7:ef:e6:ff:b2:6f:1f:91:fa:00:
3b:59:b4:34:93:cb:47:c1:2b:8a:29:c4:c2:8a:8e:
54:d3:cb:62:69:0a:e4:68:84:42:9d:2f:36:97:d6:
d4:a2:36:02:0c:3f:9c:25:d9:b0:b6:a5:53:09:6f:
07:6f:44:15:43:52:b0:1b:32:f1:f6:56:6d:26:ca:
1b:1d:d9:fe:60:57:ad:fd:8f:99:5a:90:eb:0b:da:
fc:ee:c5:1e:63:09:e3:f0:5a:97:90:a8:f1:55:f5:
3a:8e:a6:84:23:34:2b:de:b5:16:65:0d:aa:5a:8a:
a5:e4:39:58:de:39:b4:27:b9:86:10:a4:b5:19:89:
b9:ef:72:0b:b5:f8:df:1d:2b:61:7b:90:57:1f:b0:
53:b0:82:8d:cd:48:e2:6a:56:e6:f6:57:5a:a1:1a:
db:98:c2:1b:d7:29:47:fc:1b:f3:99:f8:96:da:43:
5b:5b:8b:66:ca:e7:d2:0a:0f:25:de:8c:95:7b:f3:
a4:41:79:a4:2f:bb:b9:f0:69:4e:22:75:a2:4d:2e:
03:58:d3:1b:d5:18:4f:4f:40:3b:59:7f:1d:61:14:
cd:98:28:6c:d9:5f:f7:f1:cd:cd:a4:ab:9a:81:f4:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:E1:A5:2B:B9:33:DA:68:20:CB:78:A3:75:04:8C:3D:C2:1A:E0
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/DcLhpSu5M9poIMt4o3UEjD3CGuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0-193.46.132.255
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
a6:c0:f6:cc:b0:ad:4a:a3:07:e1:77:b2:cf:3b:6c:e3:62:08:
ad:de:94:7c:d9:fe:0e:b0:95:33:00:a5:86:1d:da:f2:82:36:
28:6d:3b:4f:d8:34:9a:3a:16:42:89:1d:9f:48:b7:e2:5e:3f:
cc:e7:15:d4:a9:ba:d3:63:10:03:56:ca:52:7a:93:ac:da:7b:
70:6d:54:5d:ea:b0:aa:1f:76:df:42:a1:e7:66:e9:20:8b:3d:
f5:6e:ff:cb:47:1d:30:fa:08:d9:09:4c:b7:1d:a0:af:ce:18:
25:0d:f3:b1:52:a8:37:47:9f:9d:b9:fc:f8:09:2a:20:cc:38:
14:86:92:a9:b2:dc:cc:d3:32:87:1a:55:7a:05:ad:02:87:1e:
eb:6f:c1:bf:96:bc:af:92:18:6d:7b:cb:f8:e5:3c:a4:2b:b6:
b9:a0:9a:7a:be:b6:21:e2:0d:50:ba:bf:f2:1a:68:ac:1b:0d:
04:bb:8a:67:d8:2c:38:0d:f0:3a:eb:4b:29:bb:30:c3:1b:ac:
3e:a8:e8:b0:5f:98:96:2b:f9:2a:80:9f:0a:73:6d:3d:9c:fb:
19:5d:fd:87:d3:45:44:60:62:2a:b2:4b:02:4a:62:4f:06:81:
34:3b:f0:b8:3a:0c:6b:30:68:e6:ce:66:a0:6e:32:aa:4b:36:
79:82:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:16:42 2025 by rpki-client