Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/myE1ffFrqNtWhrEgb4o3r4kYPDE.roa
File: myE1ffFrqNtWhrEgb4o3r4kYPDE.roa (raw, json)
Hash identifier: lepyHpthbteXyZ8dnFeXFyrbYpYhZKe3N2jyyG0VpT4=
Subject key identifier: 9B:21:35:7D:F1:6B:A8:DB:56:86:B1:20:6F:8A:37:AF:89:18:3C:31
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 06370971
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/myE1ffFrqNtWhrEgb4o3r4kYPDE.roa
Signing time: Sat 01 Jan 2022 15:05:22 +0000
ROA not before: Sat 01 Jan 2022 15:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 193.33.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104270193 (0x6370971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Jan 1 15:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b21357df16ba8db5686b1206f8a37af89183c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:9c:1c:19:62:60:cb:70:0e:7c:f0:8e:67:
81:86:de:53:fe:2b:fe:81:b3:01:cc:7d:2b:28:1f:
75:46:b9:ec:0d:0e:08:bd:55:e2:c1:4d:53:16:c9:
0f:59:9b:83:c0:fa:43:4c:8c:d2:1e:70:d0:7a:d8:
4b:86:db:13:db:48:af:2c:f8:cc:b1:cc:84:24:3c:
50:6c:d1:93:a0:37:11:f6:a5:39:73:4c:c4:03:d9:
8c:ed:a6:38:98:53:a2:49:02:ef:a5:0a:1c:40:0c:
ad:bb:6d:54:76:fc:9e:3f:0f:bb:d3:a9:60:f2:d6:
ea:3d:57:96:f3:32:4a:50:62:3b:7f:51:cb:dd:48:
80:5e:f4:b2:fa:54:31:34:fc:95:14:b0:90:d1:7b:
50:d8:7e:ec:1f:aa:8d:0f:e3:95:ab:4b:5d:c2:62:
b4:c3:81:ed:4f:57:75:d5:a1:6e:e9:b1:e0:86:5a:
b5:a3:ba:bb:23:c6:d1:4c:bb:20:9e:d3:af:59:28:
b6:bb:bf:ee:21:e0:a9:e9:37:53:a1:4c:05:1f:54:
08:86:1e:c5:9a:cc:09:12:d4:31:ac:ac:91:bc:a4:
48:c0:4a:a6:70:41:c1:40:77:e1:5f:cf:81:c5:58:
77:bd:9d:cd:4e:36:04:cd:7e:1c:52:59:fc:68:c6:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:35:7D:F1:6B:A8:DB:56:86:B1:20:6F:8A:37:AF:89:18:3C:31
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/myE1ffFrqNtWhrEgb4o3r4kYPDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.29.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0c:8b:79:27:72:35:7d:92:e1:76:4b:dc:82:09:05:a3:e5:
c9:02:00:c3:01:53:7e:35:58:d4:6a:96:2d:7e:2c:61:a1:3f:
42:d4:f9:a4:ee:df:91:65:40:21:8d:f5:63:70:7a:9a:81:7c:
0f:a4:39:df:cc:2f:47:0a:f3:f2:2d:3d:c5:61:29:58:0c:26:
b3:a3:0e:5f:d6:32:af:73:ca:a1:b9:eb:91:9b:5a:11:b2:7c:
ca:91:b0:48:42:2e:7c:c2:04:a8:fc:b2:c0:ba:63:12:99:43:
d4:1c:ba:6b:25:df:03:46:a5:15:69:2c:61:e7:ec:0c:cf:99:
74:3a:ad:71:df:82:b9:c9:65:90:a0:b4:3c:bc:a6:85:7d:cc:
37:b0:a8:0d:b6:4d:d8:c2:00:f0:2f:2b:ac:d9:4a:71:e1:c7:
72:c8:9b:cf:fc:f1:95:0e:c6:51:bd:ea:f1:a2:56:40:37:1c:
e4:d2:8a:7f:c3:ee:8b:de:7f:25:dd:d9:86:cb:33:6d:32:d3:
79:a0:1d:c2:d8:b2:a9:bc:12:0f:b9:9b:4a:2b:53:2e:8d:b5:
73:dc:02:d1:ca:ca:7a:75:cd:62:02:4d:2b:cd:04:57:f1:eb:
d7:2f:cc:02:9f:7c:fe:55:df:63:8d:e1:f4:25:e4:11:b7:e1:
3f:2c:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:06:38 2025 by rpki-client