Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TubXep0Uowu9Iqzy2RyHlQq4XLY.roa
File: TubXep0Uowu9Iqzy2RyHlQq4XLY.roa (raw, json)
Hash identifier: jFtEhBVpxhApbp2JjyHKshyjO1pXxPOXbGV8dHpOwMA=
Subject key identifier: 4E:E6:D7:7A:9D:14:A3:0B:BD:22:AC:F2:D9:1C:87:95:0A:B8:5C:B6
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01856C0A4B4B3C88EABB3F2B1E7FB5ADA124
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TubXep0Uowu9Iqzy2RyHlQq4XLY.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35057
IP address blocks: 194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4b:4b:3c:88:ea:bb:3f:2b:1e:7f:b5:ad:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee6d77a9d14a30bbd22acf2d91c87950ab85cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:e9:0e:f3:1e:df:d2:bd:50:21:db:52:2e:
f2:dd:cd:cc:66:54:ab:7b:b4:92:07:f0:2a:5f:dc:
54:6d:4f:13:4e:02:d9:55:a7:ea:54:63:ad:70:1e:
3a:35:57:ff:eb:7c:4c:7a:dd:14:9a:20:1a:b0:e1:
e9:56:34:77:52:cf:c3:e3:ea:10:34:b3:5a:4d:64:
99:b7:28:bb:ee:06:78:70:93:db:97:ca:6e:00:16:
56:a8:96:18:55:96:76:b1:7b:cc:ae:3d:5c:98:7b:
ee:68:12:9c:78:6d:1c:17:71:8c:52:df:32:07:24:
fb:48:54:01:c9:7a:8f:e7:c1:91:7b:86:8c:b9:ec:
9c:09:ea:16:65:94:ab:ca:ff:78:78:22:a3:fa:a1:
92:2c:2a:ea:aa:cb:47:e6:ba:68:40:81:f3:b0:3c:
3e:ec:08:70:01:65:3d:7f:0d:9d:a8:0d:f3:5b:7f:
ad:ac:10:50:6d:8c:8c:0a:54:62:92:04:ee:2f:87:
2f:a0:52:06:6d:fc:4c:d5:38:39:1e:53:fd:d5:b4:
37:9b:73:68:f3:f7:e4:ef:93:db:8b:ff:13:cf:09:
56:a7:8e:e2:a6:23:f0:b6:a8:2e:0d:b4:11:ac:a6:
22:02:29:05:88:d7:ab:8b:5f:41:14:0a:94:db:3d:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E6:D7:7A:9D:14:A3:0B:BD:22:AC:F2:D9:1C:87:95:0A:B8:5C:B6
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/TubXep0Uowu9Iqzy2RyHlQq4XLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
96:93:51:34:f4:bc:94:92:b2:50:97:d0:cd:d3:af:4d:7c:32:
2f:a2:22:a7:12:0f:0d:9c:42:86:e7:7e:03:99:d2:30:87:0d:
b6:67:6c:dc:05:60:60:c1:b5:70:3c:74:1d:62:d9:ec:f4:d9:
ba:4b:90:ed:27:c3:cf:c7:7e:d2:ca:44:00:27:b8:f5:68:25:
0d:4a:41:0a:c3:1e:56:d5:e3:44:60:72:ad:e0:ed:90:b9:11:
80:e5:e0:e2:0e:2b:04:18:81:ef:6b:4f:59:dd:38:d6:d9:a7:
b4:29:37:f5:56:39:a2:6b:c4:55:9a:a7:93:cc:2c:3b:08:b2:
65:ad:40:f0:34:fc:56:52:2d:69:82:ed:d3:bd:02:f7:cd:ff:
66:e1:89:0e:23:e5:cd:e9:33:90:95:32:73:b2:ad:a0:d7:06:
e9:70:af:14:31:50:5f:18:77:27:d4:5d:58:32:bd:ad:ce:0c:
0f:cd:3f:d7:86:6c:a9:62:27:fc:2a:73:b6:19:7e:3b:bc:e5:
3a:5b:e1:1c:30:68:b7:b1:67:29:53:36:84:52:f6:1f:70:57:
20:dd:4c:03:25:6a:84:f6:b1:4d:bc:44:e5:52:49:34:ef:4d:
e5:10:21:7d:49:d9:02:bc:db:36:01:9f:0a:e3:a6:1d:52:cb:
d3:98:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:55 2025 by rpki-client