Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/ojvccwfx6vovMGKF7gjiFRO5608.roa
File: ojvccwfx6vovMGKF7gjiFRO5608.roa (raw, json)
Hash identifier: h/RSbs/qwBWReA4QxBv8dQWIbXvmNcIpTTAig0b/ce4=
Subject key identifier: A2:3B:DC:73:07:F1:EA:FA:2F:30:62:85:EE:08:E2:15:13:B9:EB:4F
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 018697C2A077549668B06998A042F41201FD
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/ojvccwfx6vovMGKF7gjiFRO5608.roa
Signing time: Tue 28 Feb 2023 11:22:39 +0000
ROA not before: Tue 28 Feb 2023 11:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201612
IP address blocks: 193.46.135.0/24 maxlen: 24
193.46.134.0/24 maxlen: 24
193.46.133.0/24 maxlen: 24
194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:c2:a0:77:54:96:68:b0:69:98:a0:42:f4:12:01:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 28 11:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23bdc7307f1eafa2f306285ee08e21513b9eb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:ce:f4:22:df:d5:b3:93:77:c7:c6:36:f4:
12:4e:9a:24:26:c4:d7:40:3e:ba:f7:c2:da:d4:db:
9c:d3:dd:6a:8a:9b:ab:64:a8:df:f0:f7:1c:ff:60:
41:85:0f:22:9e:d4:37:61:1b:79:e8:7a:b3:81:68:
7f:0f:9a:99:37:ed:4d:8a:2f:65:5a:20:66:fb:0e:
ae:a7:d0:b8:16:df:81:07:83:c7:06:60:53:fb:c2:
01:71:4a:2b:3b:bf:74:b2:96:a1:fe:c9:3a:2a:62:
b9:f6:ee:b3:02:05:e8:56:89:56:25:8e:39:63:c0:
c2:12:72:e8:d9:00:ff:7f:97:19:68:67:85:a9:e9:
72:93:98:8c:e2:bd:40:a2:b2:06:f1:94:e7:a8:90:
48:3b:99:d4:f8:6d:53:37:d8:f4:ea:44:6b:ee:4c:
e4:f7:72:b9:60:93:98:a2:9f:8e:60:69:ff:8f:50:
a2:8b:31:d9:c8:41:46:a1:b0:bb:69:d1:f6:73:79:
cd:00:00:c2:63:95:e2:7d:13:36:64:9e:73:a3:85:
fc:90:c4:26:3f:c1:64:fa:54:99:fd:cc:79:80:24:
49:a8:9c:58:9c:da:a3:58:84:53:f1:96:9c:ee:1f:
91:de:82:96:f8:69:ee:82:9d:97:6f:23:ed:b0:28:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:DC:73:07:F1:EA:FA:2F:30:62:85:EE:08:E2:15:13:B9:EB:4F
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/ojvccwfx6vovMGKF7gjiFRO5608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0/21
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
16:c6:f8:cd:16:15:ad:9c:b9:44:56:68:91:3d:42:5f:b1:dc:
a8:5d:e2:12:fb:d0:c5:d9:9f:2b:5e:24:38:48:b1:73:35:9c:
3f:fe:38:73:e1:8b:c4:96:c2:c4:3e:69:24:73:0f:a0:4a:93:
f1:8d:cd:d3:29:0a:88:ff:9c:d2:77:36:f0:39:51:a7:9a:32:
56:d3:38:36:c5:6e:0d:32:a6:c0:ae:3e:01:5c:f5:a9:b7:42:
c3:8b:8f:91:f1:66:24:f1:0f:00:3e:06:27:db:58:3a:06:ea:
df:3c:47:42:6c:d1:c4:44:ef:48:c7:3e:47:d4:70:b0:8a:ce:
f6:f8:6f:63:78:91:c2:b8:0e:d4:37:06:21:31:ba:95:ec:57:
50:f6:3f:79:22:bf:b5:fa:90:38:d3:19:4d:49:28:fa:7a:2c:
59:4e:dd:eb:4a:a9:8b:4e:53:5a:fa:18:ae:8c:12:7f:33:1f:
57:86:fc:75:d5:f8:3c:8f:c3:62:57:47:18:7a:7b:49:b8:20:
15:0d:e4:8f:ed:33:bc:54:42:b7:a9:52:5b:ea:1e:d5:06:16:
94:a8:99:0b:0a:b1:c5:23:15:f3:5a:de:49:15:58:9a:6d:4e:
b9:10:ee:5c:88:f9:74:f0:83:36:b9:50:ed:77:e3:09:e3:4c:
91:a4:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:49:22 2025 by rpki-client