Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/iJKFmTzS8FjqN6ona_PrZp1JCt4.roa
File: iJKFmTzS8FjqN6ona_PrZp1JCt4.roa (raw, json)
Hash identifier: TM1sTYvj9GtLxBQHFBniVqjpeEL5y9+OtY4KaI+/Jzw=
Subject key identifier: 88:92:85:99:3C:D2:F0:58:EA:37:AA:27:6B:F3:EB:66:9D:49:0A:DE
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 06E42B6D
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/iJKFmTzS8FjqN6ona_PrZp1JCt4.roa
Signing time: Sat 01 Jan 2022 02:59:38 +0000
ROA not before: Sat 01 Jan 2022 02:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29329
IP address blocks: 193.84.8.0/24 maxlen: 32
195.135.232.0/22 maxlen: 32
83.243.72.0/21 maxlen: 32
185.16.100.0/22 maxlen: 32
91.151.192.0/20 maxlen: 32
2a0f:6a40::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115616621 (0x6e42b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jan 1 02:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=889285993cd2f058ea37aa276bf3eb669d490ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:6a:08:3e:98:0c:16:ca:57:05:72:db:95:
a5:4b:c7:85:ff:dc:f6:4d:66:e7:33:00:be:c9:4f:
25:ff:ec:4d:7b:c3:27:92:71:90:65:1b:db:33:26:
c3:09:c8:0f:2a:bf:f5:2e:a3:8d:88:ca:84:ae:27:
3d:01:ab:04:5e:df:29:b6:c3:44:a4:b0:ce:93:99:
21:80:6f:66:ee:1d:c5:4f:1d:60:c6:5e:b1:7c:5b:
03:d3:44:57:9e:49:b9:b7:9a:ce:e8:60:38:9a:37:
13:17:c4:8f:c6:f7:87:ca:7f:66:48:54:02:fd:4c:
a0:d6:0e:1d:80:9c:1d:1b:84:74:32:c2:38:a8:29:
98:91:ed:7f:5b:d8:61:b1:f4:53:62:2c:9b:4a:a9:
5f:b7:ae:c9:20:89:f0:15:a7:f1:ae:21:34:ae:df:
14:0e:f4:2a:5e:9c:86:8e:12:75:0a:5b:76:13:cb:
4b:51:d4:ad:f0:fc:16:04:b0:18:4c:6b:79:ac:5f:
2b:68:8f:63:71:1d:e1:b2:08:08:2c:7a:b2:a2:18:
4b:83:3a:40:92:06:1a:9a:df:d2:0c:8e:8a:d5:7e:
dc:a1:68:82:cc:c9:c8:30:ce:36:9a:da:b4:cd:df:
92:ee:92:b4:07:aa:d7:67:02:72:11:48:a9:dd:45:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:85:99:3C:D2:F0:58:EA:37:AA:27:6B:F3:EB:66:9D:49:0A:DE
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/iJKFmTzS8FjqN6ona_PrZp1JCt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.72.0/21
91.151.192.0/20
185.16.100.0/22
193.84.8.0/24
195.135.232.0/22
IPv6:
2a0f:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
98:38:f5:20:0a:c0:59:4c:05:b0:5d:04:11:d6:76:b8:5f:d7:
ca:eb:95:55:d5:f7:fd:6c:3d:83:d5:0f:7c:26:83:a2:0e:97:
49:aa:02:16:d5:11:94:f7:f7:b7:bb:86:23:4f:96:15:f1:20:
1b:83:f6:6d:bc:03:c3:20:5f:93:01:61:78:b9:17:92:2d:11:
65:07:43:10:34:60:ad:18:2d:68:aa:da:e3:23:0f:16:57:8a:
dd:4c:48:f0:dc:d5:ee:2c:f7:92:7e:ff:e2:fb:e4:3e:40:30:
cc:0e:ea:f7:a9:d7:40:cb:26:de:58:ca:ed:d8:89:53:90:79:
eb:f6:d9:6a:f3:83:ff:53:1a:e8:9f:23:59:8f:80:c5:52:36:
ac:bd:a7:b3:54:22:56:79:9e:c6:a2:70:3c:12:52:be:17:3d:
6e:34:d8:c1:1d:0f:9f:d1:5f:ae:2a:c5:8e:3d:e6:bc:d9:7b:
93:be:9b:9f:55:d4:52:0f:da:14:ec:ca:f2:d5:b0:2a:7c:38:
14:e7:2b:ca:1d:c7:a0:7c:bc:a9:af:69:17:31:7f:56:3d:96:
cc:99:48:d0:a5:56:7b:2d:67:45:7c:27:e9:73:3c:74:f1:fd:
6e:c7:88:1d:a2:b5:e0:67:02:c8:32:22:a4:f0:d3:79:93:38:
53:f5:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:39 2025 by rpki-client