Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/f2xT9-F1RHxs81YWOTXmW5xbR9M.roa
File: f2xT9-F1RHxs81YWOTXmW5xbR9M.roa (raw, json)
Hash identifier: dJxl71+V8sq2R0JHVQF1eLpGdc9WxRfLOKs2X7lpabE=
Subject key identifier: 7F:6C:53:F7:E1:75:44:7C:6C:F3:56:16:39:35:E6:5B:9C:5B:47:D3
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 018573BA98B59CB74F7332C4D314E878BFA7
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/f2xT9-F1RHxs81YWOTXmW5xbR9M.roa
Signing time: Mon 02 Jan 2023 18:24:46 +0000
ROA not before: Mon 02 Jan 2023 18:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198340
IP address blocks: 193.57.241.0/24 maxlen: 24
193.57.244.0/24 maxlen: 24
193.57.245.0/24 maxlen: 24
193.57.247.0/24 maxlen: 24
193.57.219.0/24 maxlen: 24
193.57.218.0/24 maxlen: 24
193.57.218.0/23 maxlen: 23
193.57.220.0/23 maxlen: 23
193.57.220.0/24 maxlen: 24
193.57.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:98:b5:9c:b7:4f:73:32:c4:d3:14:e8:78:bf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Jan 2 18:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f6c53f7e175447c6cf356163935e65b9c5b47d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:73:7d:c9:42:55:48:f1:d0:2d:c5:23:e1:
df:0c:34:65:6e:d0:04:a1:5b:7b:d3:c7:38:b4:c2:
90:76:b1:4c:23:d2:26:1d:0b:89:71:e2:94:93:6c:
1f:96:26:78:fc:26:cf:a4:38:89:50:c9:14:12:ae:
d3:47:3d:bb:1c:94:75:fb:8a:e1:3f:62:7c:51:e4:
c7:16:10:34:11:4b:3c:89:d9:26:e0:52:2b:80:c9:
5b:2d:e0:b6:6f:89:ff:2c:8b:b9:0c:ad:1c:cd:66:
a4:79:b8:50:7f:71:c3:f1:8b:0f:9f:02:53:3e:bf:
0d:f8:b5:71:3b:63:d5:9f:e1:db:32:d7:81:d5:bb:
cb:c5:ba:6e:33:24:4a:8e:22:63:86:f9:fe:c9:49:
87:3c:37:1b:9f:c8:fc:c8:ac:ab:12:2c:ab:3c:ab:
85:1c:2f:d3:3e:37:22:86:7d:ad:00:c3:fd:15:16:
bb:3f:c2:37:70:24:66:5d:53:15:e3:42:8a:f3:f6:
00:0a:b1:99:af:a2:2d:49:e3:15:01:c4:d1:8a:bf:
81:03:45:8f:4f:c5:67:6e:b8:fe:0e:c0:e5:79:ba:
90:62:04:b1:c1:ca:42:62:ba:6b:38:49:53:9d:b1:
ae:f1:37:14:bc:12:2e:a7:8f:8a:87:fd:48:88:ca:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:53:F7:E1:75:44:7C:6C:F3:56:16:39:35:E6:5B:9C:5B:47:D3
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/f2xT9-F1RHxs81YWOTXmW5xbR9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.218.0-193.57.221.255
193.57.241.0/24
193.57.244.0/23
193.57.247.0/24
Signature Algorithm: sha256WithRSAEncryption
81:11:84:7f:bd:d5:19:a6:83:40:07:46:ae:5a:1a:c8:77:75:
fb:30:ef:63:42:24:11:5d:11:b7:b5:d1:0f:4a:cd:6c:d8:f6:
4c:95:d1:51:70:92:96:66:e9:c9:ab:e5:7c:30:dc:37:77:d0:
1c:79:9b:44:7b:31:e2:a1:1b:ca:c6:53:b5:d0:4f:8f:94:ac:
f7:52:e2:31:8a:72:eb:74:88:e7:be:12:9c:b7:9e:50:e0:f4:
84:7d:70:74:bb:14:94:48:79:55:42:d6:1b:15:41:d3:47:46:
42:cd:6c:e7:cb:9c:aa:01:68:b2:6a:ec:9a:43:c9:4a:6b:da:
2d:ba:7e:73:f0:9c:2b:e7:be:4b:07:d2:3a:fa:71:89:ea:22:
12:bf:75:e2:95:8c:81:3f:eb:5e:50:a2:53:9f:8a:e4:2b:51:
de:bc:de:49:fb:8d:0a:f4:df:60:28:a9:d6:48:b5:52:57:bb:
c3:0c:40:0e:9d:7f:c3:6f:1c:0f:97:f5:5d:cb:b0:0a:e2:7a:
60:ed:c4:c9:49:05:14:37:6f:22:7b:24:de:fc:82:95:07:2e:
b3:ba:59:c5:ca:5c:bd:ee:e2:af:0f:6e:ae:5c:6e:db:6c:c2:
9f:33:d4:13:1c:9a:8a:bd:54:28:4e:90:a4:65:e6:4a:d7:8e:
0b:d1:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:21:32 2025 by rpki-client