Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xBpjz_SQk6Iu6xEWbri4se94lZg.roa
File: xBpjz_SQk6Iu6xEWbri4se94lZg.roa (raw, json)
Hash identifier: GlvNFDBofCjCZ4+hOLQDV8YqqLqv7ECSkRt8CK1tjIg=
Subject key identifier: C4:1A:63:CF:F4:90:93:A2:2E:EB:11:16:6E:B8:B8:B1:EF:78:95:98
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D94329
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xBpjz_SQk6Iu6xEWbri4se94lZg.roa
Signing time: Sat 01 Jan 2022 16:01:49 +0000
ROA not before: Sat 01 Jan 2022 16:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48038
IP address blocks: 212.243.39.0/24 maxlen: 24
2001:918:ff3e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356415785 (0x50d94329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c41a63cff49093a22eeb11166eb8b8b1ef789598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:95:e9:5a:35:11:44:ce:68:9d:9a:c4:f6:
39:6e:1d:6e:ea:88:49:48:ed:52:bc:e8:c0:d6:72:
cc:74:3c:32:5f:46:f4:3a:f8:f2:e3:a9:16:d9:e4:
c4:5e:e3:16:b8:a8:52:68:a5:e7:ec:72:6e:54:8d:
d3:f3:7a:08:9f:50:e2:89:10:a1:ec:79:1c:fd:76:
3d:08:a8:f1:50:d8:fd:6c:d7:fc:21:86:b2:37:1f:
52:4f:e4:28:23:2e:e3:9a:71:5c:98:22:48:b5:49:
af:fd:e2:d3:84:e0:5c:bf:22:c3:9d:f2:91:8a:50:
50:63:16:49:8f:c8:54:b8:bf:ad:aa:8d:26:98:a4:
72:f3:e7:dd:61:ee:38:5d:4c:3f:da:83:54:86:86:
9d:7a:57:80:58:16:4a:9b:c6:c6:d1:ab:5e:0f:57:
40:27:05:50:c9:cb:c6:7f:37:6f:4b:ad:75:32:a2:
e1:b1:ec:d2:76:08:f1:bf:79:8c:37:c0:23:ca:2d:
48:27:76:e4:ed:0d:e4:c1:21:b3:5c:0b:10:7e:7f:
16:f0:5c:c2:92:a4:ca:55:90:73:ed:d5:10:08:a4:
ce:13:20:11:dc:af:15:fc:96:cc:16:9e:db:70:37:
ae:6d:65:64:79:11:ef:bc:85:11:d6:22:2d:5c:b5:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:63:CF:F4:90:93:A2:2E:EB:11:16:6E:B8:B8:B1:EF:78:95:98
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xBpjz_SQk6Iu6xEWbri4se94lZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.39.0/24
IPv6:
2001:918:ff3e::/48
Signature Algorithm: sha256WithRSAEncryption
76:e2:f7:1f:2b:61:95:32:7f:bc:21:78:0d:6a:65:15:b7:85:
81:5c:6d:cd:ee:8c:ee:47:c6:81:fd:02:2c:61:83:a3:2d:86:
c4:60:b4:f8:cf:20:d9:ab:e8:e6:30:ce:ce:8b:31:b4:1f:22:
a4:2a:53:ce:42:02:c1:0a:03:c5:aa:0d:fa:ff:ce:95:84:ca:
83:d1:2b:e4:fe:05:b3:91:95:bd:53:d0:d4:04:7c:ac:c1:b2:
5e:45:7c:30:47:d3:5f:d1:ea:23:a2:68:fb:83:44:78:b2:6a:
5f:ff:8d:60:14:fb:5c:8b:5a:51:1c:40:81:cb:49:44:e4:25:
bb:55:f4:2f:86:ae:41:e5:a6:70:8d:1f:02:bf:3e:0c:82:8f:
20:9e:5f:dc:e4:d4:c3:2d:43:2f:93:12:c3:f4:5a:a3:62:c1:
1c:4a:66:62:78:d8:b7:fe:f3:b3:70:a3:52:67:09:6e:34:50:
94:02:76:0d:2f:c0:60:26:6f:57:d6:45:9c:a1:11:17:5c:8d:
4f:84:4b:83:8e:92:64:dc:ce:22:34:23:10:e7:0d:cc:3a:5d:
0b:1c:12:1e:c5:3c:64:a1:18:72:4d:1b:ac:8d:f3:89:87:3f:
09:f4:4a:b4:c3:d0:52:4b:9e:e9:7b:a8:e4:1a:54:1e:c7:7a:
95:79:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:49 2025 by rpki-client