Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/BI7KKuy6seVDoS4FJUgmSpi4C0g.roa
File: BI7KKuy6seVDoS4FJUgmSpi4C0g.roa (raw, json)
Hash identifier: Ftl1ENMs+a6rjTpPb9XwgsOvhtyvzQ7Zuu+9jNFgAm0=
Subject key identifier: 04:8E:CA:2A:EC:BA:B1:E5:43:A1:2E:05:25:48:26:4A:98:B8:0B:48
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0C8ABC
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/BI7KKuy6seVDoS4FJUgmSpi4C0g.roa
Signing time: Mon 17 Jan 2022 13:13:20 +0000
ROA not before: Mon 17 Jan 2022 13:13:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198340
IP address blocks: 193.57.241.0/24 maxlen: 24
193.57.244.0/24 maxlen: 24
193.57.245.0/24 maxlen: 24
193.57.247.0/24 maxlen: 24
193.57.219.0/24 maxlen: 24
193.57.218.0/24 maxlen: 24
193.57.218.0/23 maxlen: 23
193.57.220.0/23 maxlen: 23
193.57.220.0/24 maxlen: 24
193.57.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821948 (0xc8abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Jan 17 13:13:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=048eca2aecbab1e543a12e052548264a98b80b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:e2:6b:a8:20:ea:6e:9c:1a:11:63:3c:01:
40:c1:5d:8a:9f:9f:af:65:08:33:d2:02:cb:32:38:
4b:ad:71:4d:53:82:15:b0:67:b2:e5:ab:70:98:12:
a5:e4:a2:f5:c0:e1:c9:0a:d1:ab:6f:aa:58:44:64:
3d:ab:e9:42:dd:a6:cc:e9:87:c5:0f:a6:52:90:24:
97:52:34:c6:d1:18:e2:ad:06:e5:de:8a:24:d2:61:
95:5f:89:27:e3:24:4f:7f:0e:95:7b:a7:87:12:a1:
57:fb:ce:bf:89:26:96:af:8e:ea:df:87:d5:f5:3b:
4d:d2:f7:55:63:9f:ed:6b:95:9e:7b:59:c0:42:00:
23:fc:ad:32:3c:18:89:85:ce:49:5a:70:de:79:37:
cb:9f:9a:ba:94:ae:e6:0b:37:39:ae:0d:93:0e:de:
7a:2e:29:dd:80:8e:8b:e9:d4:f2:c8:75:b2:56:89:
b3:72:e5:fb:3a:b8:66:1f:e4:59:47:e7:42:c6:00:
69:5e:14:fc:8e:b0:3d:2d:53:97:9b:37:92:5b:bb:
38:ca:38:38:82:49:f6:43:69:97:ca:2a:0f:6a:48:
88:f2:b3:9f:f6:b4:59:fb:ab:b8:9a:1e:06:45:74:
a6:a9:94:d5:35:6b:97:f7:38:cd:c1:ee:07:22:12:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:CA:2A:EC:BA:B1:E5:43:A1:2E:05:25:48:26:4A:98:B8:0B:48
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/BI7KKuy6seVDoS4FJUgmSpi4C0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.218.0-193.57.221.255
193.57.241.0/24
193.57.244.0/23
193.57.247.0/24
Signature Algorithm: sha256WithRSAEncryption
29:83:61:4e:5a:40:a2:4f:96:0d:b3:b8:e7:f2:62:4b:d1:98:
59:5a:29:08:53:6b:18:84:6c:4e:a4:6e:6b:e1:93:d1:32:17:
13:4c:eb:f4:51:a9:f9:e6:1c:e7:21:5a:10:de:77:1b:b4:dc:
67:c5:bd:42:9f:11:d2:7b:e6:35:f6:5c:94:94:17:5d:bf:19:
ac:82:c5:e0:d6:d9:bb:2b:12:09:f8:47:f5:05:4c:bf:93:8f:
84:be:55:0a:90:62:ae:a4:5c:60:1b:9a:95:4d:8a:a0:6c:a9:
98:bb:8d:3c:a4:23:84:89:09:4c:31:be:4b:fa:6b:33:4c:a0:
f5:17:f8:a8:fb:a2:36:13:41:33:b6:88:e7:60:18:60:8f:27:
b4:cf:1d:66:99:98:ad:66:c4:07:d2:dc:04:62:d0:31:e5:38:
01:f3:be:bb:a1:03:1e:93:cb:19:66:c6:9a:31:2b:ee:e3:a5:
95:6c:12:16:9c:8e:a5:92:ca:3a:c1:05:58:11:54:d6:83:4c:
9e:c7:6c:02:78:83:e1:9e:ca:5e:5b:50:d7:f0:38:cb:ac:f2:
9d:0e:9a:3f:b7:74:d5:7c:45:a3:1e:1b:f1:c3:21:08:4a:e9:
45:db:37:13:1d:e1:78:12:12:45:5f:9f:fd:38:b7:e4:2c:09:
be:6f:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:05:13 2025 by rpki-client