Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/RJq34EK_cbxXdIT9fk8pMStdM50.roa
File: RJq34EK_cbxXdIT9fk8pMStdM50.roa (raw, json)
Hash identifier: tNWqnELUkivYyd5IPVI+XXYVEjlHboctlDsDjbRLwvI=
Subject key identifier: 44:9A:B7:E0:42:BF:71:BC:57:74:84:FD:7E:4F:29:31:2B:5D:33:9D
Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial: 018571277D43E71ECE45106DD7930028BF42
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/RJq34EK_cbxXdIT9fk8pMStdM50.roa
Signing time: Mon 02 Jan 2023 06:24:51 +0000
ROA not before: Mon 02 Jan 2023 06:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212130
IP address blocks: 193.163.149.0/24 maxlen: 24
2a10:af80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:7d:43:e7:1e:ce:45:10:6d:d7:93:00:28:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
Validity
Not Before: Jan 2 06:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=449ab7e042bf71bc577484fd7e4f29312b5d339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:30:45:79:e2:58:ec:e1:5c:fc:6f:05:5f:
a1:0e:97:4b:d3:4e:bc:c6:02:ee:2a:d7:c3:56:2d:
92:9a:0f:54:1d:c5:74:cf:cc:6a:29:a3:64:8a:5a:
a7:ce:8a:5f:b7:35:75:ca:a8:5f:de:5f:62:c9:cc:
f1:6a:50:d6:29:15:56:4c:7a:1c:e5:a7:82:88:a8:
1d:44:b5:4c:03:0d:3e:54:7b:a8:71:94:f3:51:66:
63:75:66:80:23:d5:28:c2:18:34:e2:1b:39:06:20:
de:bf:88:e4:cf:f7:50:7a:ae:64:c7:97:7e:90:12:
a5:58:9a:cd:17:a1:82:7d:8c:9b:51:c6:3f:22:ec:
69:67:c5:65:54:3e:38:d7:b7:26:51:14:66:47:91:
68:62:c3:3b:b3:d9:26:6e:7b:a0:48:45:d7:1b:8f:
a0:bc:7b:46:f1:25:1e:fb:e6:97:44:5b:5c:d9:ef:
c2:56:c4:2b:2d:1c:6b:5e:93:61:b4:15:1f:67:ad:
a6:85:1f:63:84:b6:a7:7d:a9:ce:be:e3:16:34:fa:
75:d5:b8:91:79:dd:56:9d:ae:fa:23:12:2a:6c:ac:
5a:a7:00:16:18:5c:56:f0:0f:54:2c:7b:75:de:33:
ef:d5:ed:c9:53:e2:f0:8a:f5:73:93:95:f0:e2:63:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:B7:E0:42:BF:71:BC:57:74:84:FD:7E:4F:29:31:2B:5D:33:9D
X509v3 Authority Key Identifier:
keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/RJq34EK_cbxXdIT9fk8pMStdM50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.149.0/24
IPv6:
2a10:af80::/32
Signature Algorithm: sha256WithRSAEncryption
7f:c2:27:29:b1:21:f8:aa:ee:73:af:6f:7f:27:f9:96:3b:32:
94:3d:f7:7b:fb:40:42:1c:68:3a:a3:4f:14:17:ba:38:1a:e5:
03:75:c2:41:9c:08:b9:15:b2:85:ad:78:e9:13:2a:2e:01:32:
ea:45:c4:66:ce:07:7f:27:08:ad:98:39:2e:c6:28:78:14:9c:
6c:0b:ae:30:c3:a0:0c:c9:b1:a5:f3:4f:10:bf:90:5c:a4:b1:
f8:8a:9a:96:92:87:80:36:03:0b:8d:16:76:cd:dd:ec:d3:0e:
b8:a5:4e:f8:03:d0:08:d6:c6:42:4e:a8:13:0b:4f:41:be:f0:
fa:44:fa:51:ff:c6:48:54:76:8e:6e:03:97:7c:b8:70:56:9b:
28:e5:d4:46:9a:6a:26:94:61:44:9d:28:7b:7c:78:e8:ad:f8:
67:21:95:87:e2:d6:b7:8a:69:76:54:12:30:7e:25:54:f0:a3:
82:fa:ab:b8:09:4a:0e:61:25:91:11:27:0a:00:ea:1f:7c:dd:
9b:b3:f0:30:62:32:5a:a1:bd:0b:20:fe:25:74:9e:01:4d:d4:
e3:0d:b0:9d:ee:f9:ac:fd:7c:ea:0d:3e:b0:4e:2d:09:c5:a9:
43:23:15:4f:d2:2d:82:e8:80:eb:b6:36:98:60:85:1a:d4:78:
e3:4d:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:39 2025 by rpki-client