Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/G9xO5jDdIpHOVL1ovaYmqXbLKTU.roa
File: G9xO5jDdIpHOVL1ovaYmqXbLKTU.roa (raw, json)
Hash identifier: d340HVDScSxaT7dBG4cX51uUBHlQJpgbiJn9PVqjHRo=
Subject key identifier: 1B:DC:4E:E6:30:DD:22:91:CE:54:BD:68:BD:A6:26:A9:76:CB:29:35
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 0187459D6107853DEE1D35C4AD69D1D4F822
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/G9xO5jDdIpHOVL1ovaYmqXbLKTU.roa
Signing time: Mon 03 Apr 2023 05:35:54 +0000
ROA not before: Mon 03 Apr 2023 05:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30971
IP address blocks: 193.46.104.0/21 maxlen: 24
193.46.112.0/20 maxlen: 24
83.136.32.0/21 maxlen: 24
185.102.15.0/24 maxlen: 24
2a02:850::/44 maxlen: 44
2a02:850:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:9d:61:07:85:3d:ee:1d:35:c4:ad:69:d1:d4:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Apr 3 05:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bdc4ee630dd2291ce54bd68bda626a976cb2935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:93:84:a0:40:57:33:fa:64:e5:ed:aa:88:
46:f2:ad:fb:30:8f:67:6d:80:c8:83:41:0d:54:95:
ae:ae:cb:59:01:c1:87:55:fa:26:4c:b8:26:5c:b1:
94:5a:f4:46:a8:54:ef:b5:3e:33:74:52:54:7b:19:
fd:30:d0:78:cb:9a:5a:6e:4c:fc:8e:86:1d:6d:50:
48:e5:6b:de:fa:46:1d:03:8e:cf:33:51:59:4d:a6:
86:c6:56:f7:fd:3b:b7:10:b0:e1:4b:c4:77:99:60:
cc:6f:2b:cb:52:37:87:1d:71:9a:22:97:13:9d:42:
25:7e:75:77:31:e9:f0:e5:bb:68:38:60:e5:6f:a0:
8d:29:35:82:9a:49:f4:28:8f:e5:4f:b6:e3:d0:94:
ea:2c:ed:a1:a8:3a:f8:14:9d:a5:c2:b3:51:75:70:
32:13:e6:45:ec:b0:7a:b9:23:4b:5d:e3:64:61:5c:
8f:5b:ba:3d:cf:d1:64:ed:83:73:ad:67:09:3f:b5:
98:50:ad:39:ec:98:9f:68:d0:49:4a:5e:f8:f3:bb:
3a:ff:21:41:75:7d:3b:29:b6:5c:61:3d:53:77:a2:
e7:60:0e:5e:88:be:50:1e:fb:83:24:97:70:61:e4:
23:cb:91:48:10:7c:0a:dc:b6:4c:4b:35:17:3e:2c:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:4E:E6:30:DD:22:91:CE:54:BD:68:BD:A6:26:A9:76:CB:29:35
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/G9xO5jDdIpHOVL1ovaYmqXbLKTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.32.0/21
185.102.15.0/24
193.46.104.0-193.46.127.255
IPv6:
2a02:850::/43
Signature Algorithm: sha256WithRSAEncryption
63:eb:e6:cf:21:d4:43:41:08:e6:09:d7:34:6d:05:d1:02:ca:
69:63:91:44:3f:0e:d1:d1:f7:77:c5:2f:47:fc:05:d5:60:eb:
23:19:45:ff:1d:5d:09:41:6b:ff:1c:93:97:d8:fb:10:4e:16:
9d:53:6f:6f:85:4e:f3:32:2d:8c:e6:58:83:5f:b8:46:26:2d:
e5:f0:0c:54:dc:c5:58:9f:8b:13:4a:83:38:f8:c8:72:d7:00:
71:83:a7:52:ce:fa:53:e4:f6:ab:57:37:2a:a4:22:c3:ef:af:
06:51:fc:da:d5:2c:78:3b:2c:b6:e6:9a:09:83:3e:79:1f:0f:
54:48:37:ba:e3:75:b7:02:0d:54:6d:e4:4d:87:e0:5c:b3:38:
b7:ad:f1:36:f3:53:6b:eb:94:a6:7a:12:77:5f:8d:79:6f:5e:
b7:49:14:ee:b0:bc:06:40:64:03:64:19:a2:a7:37:a6:b8:a8:
99:9e:d0:1a:8c:48:94:c9:09:8b:24:f9:cf:3b:c3:d9:06:65:
fa:6f:95:03:6f:ee:e6:f1:a6:2a:4d:21:1c:1a:d5:05:f6:15:
5c:af:d4:37:9a:da:40:00:0a:68:06:b8:98:ce:05:8d:07:e7:
0f:06:8c:b8:f3:2d:43:34:ad:4e:cd:36:ce:6f:93:a6:25:68:
ae:cb:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:09:39 2025 by rpki-client