Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8RoCeUJe_keXIfnkOE64uUUvXpg.roa
File: 8RoCeUJe_keXIfnkOE64uUUvXpg.roa (raw, json)
Hash identifier: nWRAa5HznIA48mWRtzQtLK1zGYrY2X7r+3G8Bb6rh5M=
Subject key identifier: F1:1A:02:79:42:5E:FE:47:97:21:F9:E4:38:4E:B8:B9:45:2F:5E:98
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AF944D9462303718C268386B48BB7
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8RoCeUJe_keXIfnkOE64uUUvXpg.roa
Signing time: Sun 01 Jan 2023 13:35:02 +0000
ROA not before: Sun 01 Jan 2023 13:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12429
IP address blocks: 193.246.32.0/21 maxlen: 21
193.246.40.0/21 maxlen: 21
193.223.24.0/22 maxlen: 22
193.223.20.0/22 maxlen: 22
193.222.64.0/19 maxlen: 20
188.92.48.0/22 maxlen: 22
188.92.48.0/21 maxlen: 22
193.223.44.0/22 maxlen: 22
193.223.48.0/20 maxlen: 20
193.246.208.0/20 maxlen: 20
194.11.144.0/21 maxlen: 24
2a02:a90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f9:44:d9:46:23:03:71:8c:26:83:86:b4:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f11a0279425efe479721f9e4384eb8b9452f5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:97:a4:2f:c9:dd:b6:4b:69:35:65:8e:94:
5a:1b:93:e0:4b:7b:09:89:bd:f1:ac:fe:f9:52:1d:
e4:86:36:76:0f:e5:8b:58:a4:55:be:b0:32:97:51:
36:53:30:e5:89:1a:83:37:e8:6c:9d:4b:2d:43:79:
84:e7:f2:e6:9b:e7:fc:36:11:eb:70:61:ad:46:d7:
e4:d0:2f:50:1c:0c:0c:6d:8b:03:d5:fd:07:e4:10:
4e:f9:30:d3:e4:18:93:2e:06:98:c1:8e:39:10:2f:
85:50:e5:d6:73:71:0b:c0:47:82:f7:60:fd:3a:e0:
68:3f:64:18:26:10:8f:73:c6:c8:0e:89:34:33:ba:
0c:9b:e8:a4:58:f1:7d:ab:77:96:6c:34:1d:7a:a7:
d0:9c:bf:a4:ac:e7:bb:b7:61:5e:54:d4:0f:9a:7c:
d8:3f:f7:60:8a:d1:59:c1:5f:70:c6:09:a3:d6:1a:
2e:cc:f3:a6:90:65:20:87:66:4b:db:06:64:1f:74:
75:4a:6e:29:b0:ae:d4:bb:33:9a:ca:13:12:80:16:
d9:eb:61:48:10:bb:32:c1:1b:8a:85:fe:a2:c4:66:
85:6c:ea:f4:7f:5c:b5:d2:08:92:b3:f3:8b:f5:68:
e9:c5:14:ff:f0:8e:4f:79:5e:39:3f:46:f0:5d:8c:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:02:79:42:5E:FE:47:97:21:F9:E4:38:4E:B8:B9:45:2F:5E:98
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/8RoCeUJe_keXIfnkOE64uUUvXpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.48.0/21
193.222.64.0/19
193.223.20.0-193.223.27.255
193.223.44.0-193.223.63.255
193.246.32.0/20
193.246.208.0/20
194.11.144.0/21
IPv6:
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
6a:68:db:00:47:97:37:62:c3:fd:38:d1:e1:f4:e9:18:b5:ae:
fe:55:48:f0:46:20:fb:6f:cc:e0:8a:2a:04:38:b0:1b:ff:6c:
0c:ae:4d:65:fa:bf:00:4d:0d:ec:37:17:4a:f7:fc:f0:a8:bb:
8f:bc:28:49:9b:48:cf:ec:9c:72:b6:4b:35:84:e8:b7:6e:5f:
7d:17:dc:c0:65:e2:17:4a:7e:50:31:af:85:58:75:92:6d:8a:
d2:68:37:71:f2:8c:76:fe:22:0f:02:ee:bd:da:ee:43:2d:fc:
f2:db:8e:33:4e:be:b7:1d:3d:f4:97:a4:b8:dd:68:77:4b:91:
7c:bf:e8:05:43:9c:1c:09:62:31:df:7c:b0:4d:d0:7a:9f:91:
49:58:3e:fc:b0:35:83:b5:e6:0b:20:fd:d3:26:14:84:52:5c:
9c:54:f1:7c:76:06:26:6d:34:69:8e:5b:4e:71:83:e2:d3:11:
5f:65:aa:a9:25:a5:cf:49:f5:af:99:81:f2:6f:dc:66:c1:dc:
eb:4a:5a:00:cc:33:aa:a0:34:d8:2a:01:dd:b5:f3:ca:02:6f:
a3:8d:36:ed:51:cc:57:4f:9f:ae:c0:a6:30:41:5c:46:7c:4f:
0e:ef:41:6a:d3:57:51:8f:d2:12:5b:4e:d9:f8:f1:7c:dc:88:
6e:00:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:22 2025 by rpki-client