Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/EtW3iyqWXuRDLOsfnSKfDTziz30.roa
File: EtW3iyqWXuRDLOsfnSKfDTziz30.roa (raw, json)
Hash identifier: AW6deCUcOh55EJ7tlfEp2Zk4y4a335ZMJgXFSHeJpXk=
Subject key identifier: 12:D5:B7:8B:2A:96:5E:E4:43:2C:EB:1F:9D:22:9F:0D:3C:E2:CF:7D
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 79A510
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/EtW3iyqWXuRDLOsfnSKfDTziz30.roa
Signing time: Wed 26 Jan 2022 21:27:13 +0000
ROA not before: Wed 26 Jan 2022 21:27:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24879
IP address blocks: 193.111.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7972112 (0x79a510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Jan 26 21:27:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d5b78b2a965ee4432ceb1f9d229f0d3ce2cf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:1a:db:06:eb:49:9d:a2:bb:06:81:7d:42:
21:67:c0:67:b7:af:f6:cf:13:47:5a:30:29:ae:fd:
59:ba:04:ef:5e:2d:8d:a3:01:ed:1e:9c:f0:86:8c:
dd:d5:fc:8c:7c:98:89:23:d9:0c:24:0b:61:5a:7d:
f7:5f:b7:fd:06:de:63:03:57:79:1a:3f:a0:6b:1f:
bc:32:78:df:67:f7:a2:9a:c3:1c:9b:77:c8:8c:6c:
c1:cc:2a:46:a3:f8:bb:95:01:17:57:b8:63:fa:ec:
5f:40:fc:2a:1d:a4:79:18:25:92:ff:fb:df:96:24:
05:9a:62:cf:15:8d:e0:f0:3d:2b:4e:52:9c:3c:52:
84:29:44:13:b8:d2:e1:a3:81:2c:e8:35:9a:59:5c:
95:79:8d:84:f3:88:a1:64:c7:4f:68:08:aa:63:90:
9d:c4:9f:5a:e8:fa:38:34:a2:3b:da:d2:f9:54:92:
f4:f2:ca:45:03:a2:88:5c:c5:64:f9:0d:d8:6c:a9:
88:4f:a5:79:aa:d1:a8:26:ec:f9:10:08:46:be:63:
83:87:5b:9a:84:c5:5a:3d:77:6c:89:df:39:a0:cc:
35:ef:07:0f:13:81:47:7e:07:e8:01:2d:b0:6f:36:
18:fb:bd:03:65:31:ad:66:6e:ef:48:6b:c0:e1:a3:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:B7:8B:2A:96:5E:E4:43:2C:EB:1F:9D:22:9F:0D:3C:E2:CF:7D
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/EtW3iyqWXuRDLOsfnSKfDTziz30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.166.0/24
Signature Algorithm: sha256WithRSAEncryption
22:86:e7:dd:3d:b8:61:8a:00:bf:4f:1f:0b:7c:e4:d5:99:16:
9a:93:7a:12:fe:0c:90:55:69:2b:79:57:04:0a:a3:18:f1:65:
8b:56:b1:2a:3d:c6:96:2e:84:12:a9:7c:ed:f9:f1:5e:50:a1:
e1:31:3f:fa:d8:e6:b1:0a:7f:b4:4e:10:df:10:40:7e:d5:44:
2b:d1:ab:d0:fe:48:0e:69:6e:e6:37:8a:7e:96:ce:05:51:7f:
a4:09:6e:55:27:d0:45:2d:4b:6e:be:3c:41:23:65:4c:2d:bd:
96:78:61:b1:bd:76:75:38:f4:f3:4a:e9:55:1c:99:bc:5b:68:
58:0c:5b:99:8c:0d:7a:bc:d2:ae:22:1c:cb:bd:6f:10:0d:9c:
fc:6c:bd:bb:16:7e:7e:09:8c:64:e4:cb:d8:91:44:b0:89:46:
2d:fb:42:3c:cf:36:37:f7:02:62:fb:21:ae:14:4a:25:7b:c8:
1e:e4:e6:d9:b1:33:83:fc:95:99:8f:87:15:bc:1e:c6:3e:50:
eb:b4:d9:5d:65:51:19:e7:05:89:70:0f:53:8d:cc:40:8a:29:
e3:61:f3:40:39:63:d0:ca:a5:3e:ae:41:f6:ed:37:04:13:24:
fc:d4:25:0e:77:f3:f3:4c:1a:3f:de:21:cc:b6:9b:83:7f:5f:
be:3d:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:45:19 2025 by rpki-client