Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/F8XTq5kUEvFjmUlXPZgWHMwTEAg.roa
File: F8XTq5kUEvFjmUlXPZgWHMwTEAg.roa (raw, json)
Hash identifier: pe9s9dYiEXT+3dzUfOvEfy8PzVJ0aaTFrtUpWiW0tYw=
Subject key identifier: 17:C5:D3:AB:99:14:12:F1:63:99:49:57:3D:98:16:1C:CC:13:10:08
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 54681F
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/F8XTq5kUEvFjmUlXPZgWHMwTEAg.roa
Signing time: Mon 06 Jun 2022 14:50:20 +0000
ROA not before: Mon 06 Jun 2022 14:50:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62563
IP address blocks: 192.166.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5531679 (0x54681f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jun 6 14:50:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17c5d3ab991412f1639949573d98161ccc131008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:3e:f7:6d:b1:dc:3d:bc:35:53:79:a6:f4:
be:55:7a:74:95:a4:bb:65:27:e6:e0:37:0c:83:10:
41:c4:4e:31:e2:15:b9:6d:92:f5:31:11:8b:8a:e1:
b4:33:a7:c5:0a:b5:ff:8f:35:66:e8:e4:2a:8c:41:
3f:dc:ff:c1:b8:d2:18:20:cf:79:7d:b4:ad:de:41:
cd:54:13:bc:e9:7a:03:ee:f2:4c:f3:a1:71:70:75:
fe:ab:b4:d9:c6:74:c7:21:c8:db:09:09:5c:ad:9e:
72:f3:db:f9:c0:68:f0:43:05:1e:bb:15:d9:06:9b:
e1:f9:a0:e9:32:4f:f8:13:d2:25:c3:87:b8:e9:fe:
61:e7:99:a6:dd:b8:1e:ed:50:5e:e8:2f:43:4d:db:
16:be:12:32:a1:45:3a:cb:46:49:82:04:0b:5c:9d:
ad:32:4f:93:3e:18:ef:a3:ae:05:5f:a2:8e:0c:00:
28:65:eb:d3:02:e9:16:c6:27:a8:65:be:38:4d:c6:
4b:a5:75:5d:99:50:23:a0:69:64:40:38:34:0b:97:
3a:ea:a3:f6:42:13:12:bc:78:0b:b9:1f:20:ff:c9:
2f:cf:44:73:63:e1:ff:51:a7:b8:3f:a6:17:07:fb:
a6:e0:de:32:58:96:65:c2:e6:fa:32:7c:eb:5a:8e:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:D3:AB:99:14:12:F1:63:99:49:57:3D:98:16:1C:CC:13:10:08
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/F8XTq5kUEvFjmUlXPZgWHMwTEAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1f:d5:1b:7e:38:b9:60:c2:ff:61:bb:0b:98:73:f6:4a:7d:
52:82:34:54:15:b2:50:d4:13:a6:42:5d:86:13:47:22:c9:3d:
56:2d:80:c1:1e:80:9e:1f:5c:b4:d8:9c:1f:d1:1b:4f:e6:ff:
c6:f7:dd:71:b4:99:e3:fa:a1:52:47:c5:b6:97:2f:4f:85:2b:
2e:18:d1:c8:da:c4:44:9c:40:39:63:9f:f4:22:bc:40:de:50:
e1:5a:42:9b:ab:10:5d:39:41:de:55:a0:74:7e:40:9c:15:c8:
b0:e0:09:d2:16:29:8a:ca:6e:a8:72:4e:30:40:0d:91:50:cc:
55:0c:f1:2c:b8:3a:2e:c4:ad:fa:28:1d:6a:b9:91:06:9a:af:
33:70:e6:7f:e2:cb:c8:5e:d0:af:64:7d:3b:1e:12:dc:0f:3e:
f0:3a:4e:60:85:5c:a8:8e:4d:a3:f7:68:b2:53:fc:2c:bc:74:
c3:ae:0a:62:05:3c:2e:ba:bc:11:bb:91:f2:0b:ac:ce:45:f5:
7c:ee:31:46:da:0a:1a:8e:24:a7:d4:2a:e0:4d:10:c8:1c:b5:
a5:04:3e:62:da:06:23:1e:87:9e:6f:1c:c6:ba:10:74:a4:03:
93:bf:6e:69:5c:0e:f0:ae:b5:be:d3:f1:2d:06:97:2c:75:29:
9f:ca:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:49 2025 by rpki-client