Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/xMmsQeILlVm_Le5vNHGj9LR6_Jw.roa
File: xMmsQeILlVm_Le5vNHGj9LR6_Jw.roa (raw, json)
Hash identifier: yibhfoXrwNzgreczTF617DffEhWtUg+ps+tUIHoQDTM=
Subject key identifier: C4:C9:AC:41:E2:0B:95:59:BF:2D:EE:6F:34:71:A3:F4:B4:7A:FC:9C
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 01867900BE226A226C8583AA16E21AE7C900
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/xMmsQeILlVm_Le5vNHGj9LR6_Jw.roa
Signing time: Wed 22 Feb 2023 12:02:17 +0000
ROA not before: Wed 22 Feb 2023 12:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1921
IP address blocks: 194.0.26.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:00:be:22:6a:22:6c:85:83:aa:16:e2:1a:e7:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 22 12:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c9ac41e20b9559bf2dee6f3471a3f4b47afc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:81:f8:b1:e7:ea:bd:89:a6:28:c3:ff:6d:
f5:5e:f9:48:a6:1e:46:ac:26:b9:29:41:da:b6:9e:
cf:7a:23:b3:53:0f:a0:ee:40:d2:6a:82:35:f9:63:
2a:e5:0a:e3:cb:59:0e:8d:47:dc:cf:51:b8:61:22:
f2:e1:10:91:dc:b8:99:93:ef:12:72:3d:b8:53:63:
4d:e8:4a:12:be:da:a4:de:e8:66:48:72:cf:c7:d5:
54:dc:f3:34:04:17:99:40:f4:f9:29:a4:ad:0f:73:
2c:0e:b0:89:88:95:50:9d:85:37:7c:57:7f:7a:14:
f6:3c:4f:29:61:75:17:d9:eb:2c:8a:3e:17:19:fc:
31:ed:ea:d5:88:e3:2b:00:74:2f:d7:55:1b:37:9f:
53:70:28:ae:ee:b8:e5:25:d0:67:b5:ca:82:14:0c:
8c:10:40:07:ae:4e:fb:52:08:e8:85:9d:dc:57:86:
a9:e8:08:78:f9:9c:be:70:73:1e:28:75:f9:ae:d8:
97:3a:f7:92:a3:bc:e6:62:11:31:b3:d3:c0:3f:cf:
ec:a0:94:5b:ea:db:e6:6d:83:1d:64:fd:4b:d6:8d:
15:c5:d6:bc:7a:ac:91:1a:21:a3:e1:e4:7d:92:c6:
6c:78:9b:ca:95:57:ce:23:8e:da:67:5c:aa:e1:e8:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:AC:41:E2:0B:95:59:BF:2D:EE:6F:34:71:A3:F4:B4:7A:FC:9C
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/xMmsQeILlVm_Le5vNHGj9LR6_Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.26.0/24
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
a6:d4:ef:97:79:ab:d1:27:c2:81:84:66:5c:0b:20:f3:62:2e:
3c:6f:ba:7c:fd:c9:f2:49:b6:e9:6c:60:29:2c:12:a6:9d:3f:
39:05:e7:30:22:51:69:dc:ba:16:a0:9a:29:9f:78:79:be:cf:
16:15:74:5a:95:ba:3f:8b:c5:54:fd:9a:50:4b:7b:1b:a3:91:
c5:5c:a7:62:3b:89:7b:2a:18:b2:90:5e:b5:d8:67:ec:0d:01:
90:d5:19:9a:de:23:06:2e:6f:f9:94:3f:4b:03:8d:32:45:d9:
2e:99:e2:b2:46:62:6e:29:30:08:84:1a:9e:6a:d1:19:b9:51:
41:55:4e:81:ae:67:29:b2:0b:f9:c2:96:e8:65:04:f0:c2:33:
ac:f9:a0:1a:32:90:57:8e:c9:6c:91:8b:0f:67:b7:a8:74:de:
83:0b:ee:ae:8e:c1:c9:f0:a3:59:30:a3:aa:a4:59:34:9f:41:
1f:18:2e:08:f8:71:ea:04:31:38:09:18:18:a9:9e:c3:56:66:
ff:e9:93:6e:af:82:07:7c:74:ce:1c:f6:19:2d:54:01:eb:b5:
6c:e3:87:fe:2e:37:97:55:45:b1:70:70:ce:50:19:6d:71:c9:
9c:78:e2:97:4d:24:93:2d:72:e4:96:76:cd:bf:6b:af:91:fd:
bc:fe:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:43:07 2025 by rpki-client