Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/CIM8Jc46i8r8NvK1Qwlk3K_5JXA.roa
File: CIM8Jc46i8r8NvK1Qwlk3K_5JXA.roa (raw, json)
Hash identifier: d9XjkgzmXTp4ujQ9VNfiuzwbOw6mjXosFoODURptCoE=
Subject key identifier: 08:83:3C:25:CE:3A:8B:CA:FC:36:F2:B5:43:09:64:DC:AF:F9:25:70
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: D7061F
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/CIM8Jc46i8r8NvK1Qwlk3K_5JXA.roa
Signing time: Mon 04 Apr 2022 18:20:21 +0000
ROA not before: Mon 04 Apr 2022 18:20:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14091807 (0xd7061f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Apr 4 18:20:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08833c25ce3a8bcafc36f2b5430964dcaff92570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:32:3a:e1:a1:1d:73:3a:e4:d2:ab:d3:c8:
19:7b:d7:04:04:27:1e:25:fc:ef:26:83:a7:83:75:
e9:94:14:e4:f3:bb:3a:06:12:1d:09:55:5c:ff:4d:
af:f9:60:7b:c4:80:90:44:f9:58:4a:77:67:21:34:
71:43:aa:1b:ba:f7:d3:e3:01:45:6a:4d:f0:e9:ba:
11:b6:50:7a:90:85:7b:b0:d7:66:b2:49:a0:20:44:
2d:04:ac:82:8c:8c:39:5b:3d:6b:a9:48:7c:dc:24:
48:a5:be:12:39:d7:9f:34:20:b8:1c:b4:d4:67:e5:
9e:8f:4c:73:85:a5:0d:ce:58:86:4c:d2:40:2c:21:
20:bc:c6:3d:ad:e7:ab:7a:00:72:38:e5:d1:c4:d2:
dc:8c:b9:44:57:8c:30:a6:b6:17:e8:de:aa:60:6b:
4b:a1:ee:dc:65:28:08:50:0b:b6:04:64:0b:57:e4:
1f:1a:8b:e8:83:93:5c:c0:70:53:b7:43:3f:fb:35:
3d:be:70:02:65:fb:0e:f7:82:cf:97:44:9c:d4:92:
df:84:21:50:b9:ae:9b:a1:50:bb:ee:76:8a:35:d5:
7c:36:dd:18:e4:13:31:d9:03:0f:59:17:34:6d:94:
fa:81:55:30:93:2e:c2:a1:8d:7f:37:ac:8f:90:8b:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:3C:25:CE:3A:8B:CA:FC:36:F2:B5:43:09:64:DC:AF:F9:25:70
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/CIM8Jc46i8r8NvK1Qwlk3K_5JXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
176.96.136.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
IPv6:
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
b7:6d:4f:0e:39:65:0a:04:89:e1:7e:ff:45:f7:7a:e2:97:f6:
7e:74:bd:97:6f:8c:46:27:b3:3d:30:be:15:f0:7c:ff:cb:eb:
b0:0a:37:aa:59:2b:82:47:59:01:d8:e3:53:ca:0d:55:74:50:
77:c4:08:63:36:5d:b1:8f:41:94:cc:f1:bf:21:f2:68:5a:a5:
0e:e5:4b:a1:d9:23:12:bd:92:20:f0:c7:53:0b:cf:d3:b4:f5:
24:2b:32:45:1a:d8:b3:e1:ea:21:67:fe:d5:9c:1a:d8:93:a7:
44:b3:1e:5a:4f:c3:92:06:c1:c7:fc:19:cd:ac:c7:e9:6a:80:
da:db:08:aa:91:8f:ca:12:21:c3:0f:d0:a5:64:de:01:66:e8:
76:b1:32:61:c3:52:41:44:32:9a:08:fd:9b:64:b7:3d:52:05:
9f:40:cb:42:6c:6b:17:93:15:ae:6e:6c:7f:d2:55:5e:cd:37:
6b:f8:3d:57:3e:f1:c2:8d:a3:fe:e5:fb:a7:35:45:7f:77:f6:
32:af:9b:ab:35:7f:6a:f2:91:b3:f6:fd:54:0a:05:a1:fe:2a:
8f:2a:31:a5:33:57:3f:44:e9:24:7d:17:d6:f6:09:58:61:97:
7c:10:17:54:30:ac:16:35:1c:02:c2:4d:b3:0b:47:74:16:e3:
4f:a4:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:25 2025 by rpki-client