Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/SywZ-ZN46e0ODqNDdLW04wD36X4.roa
File: SywZ-ZN46e0ODqNDdLW04wD36X4.roa (raw, json)
Hash identifier: luibzXK5uecUYJRRldnTGXMoz5pp0RS3F1T+aqUhzrc=
Subject key identifier: 4B:2C:19:F9:93:78:E9:ED:0E:0E:A3:43:74:B5:B4:E3:00:F7:E9:7E
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 010BEA6C
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/SywZ-ZN46e0ODqNDdLW04wD36X4.roa
Signing time: Fri 29 Apr 2022 09:02:59 +0000
ROA not before: Fri 29 Apr 2022 09:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
176.96.136.0/22 maxlen: 22
2.59.132.0/22 maxlen: 22
193.41.226.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17558124 (0x10bea6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Apr 29 09:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b2c19f99378e9ed0e0ea34374b5b4e300f7e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:24:1a:6f:ce:e4:cf:ee:de:a7:a3:ff:6b:
f0:52:ce:b1:ef:5f:e8:0a:f3:d6:c4:1f:d7:fd:48:
62:7f:90:87:fb:c9:84:33:6e:cd:5a:17:44:5f:bd:
03:e4:7b:f7:24:60:26:7c:37:56:f3:15:ec:33:a7:
ae:6d:2a:69:87:ce:47:1c:c3:a1:64:de:f1:e6:cf:
ca:a1:6a:0a:04:c8:c2:5b:7b:51:06:86:83:4f:87:
59:6d:4c:db:43:26:51:cf:f6:f2:37:34:43:a5:e6:
72:5c:83:e0:91:c2:5a:77:e8:fc:08:1d:ae:99:ab:
91:c3:95:63:04:57:bd:ce:83:10:8d:50:0f:b4:4c:
a2:1e:d8:63:57:cb:e0:bb:82:4c:30:77:29:05:28:
d5:88:3e:32:f8:c7:4d:88:67:76:7b:66:96:6f:fe:
c0:82:21:e3:a1:f0:40:1a:3a:89:61:da:e7:11:ff:
57:e1:71:a1:98:87:20:b5:fe:96:55:69:cc:b2:ff:
29:78:0d:f8:05:b6:54:8c:4b:46:37:44:90:1c:d5:
c2:10:df:5a:9c:23:a8:0e:a8:5f:64:a2:65:1d:61:
96:c9:40:0e:81:a3:58:d4:7d:70:bd:1c:93:f9:78:
7a:70:c7:d7:d8:ac:ee:9a:dd:d6:ed:a7:6e:5f:69:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:19:F9:93:78:E9:ED:0E:0E:A3:43:74:B5:B4:E3:00:F7:E9:7E
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/SywZ-ZN46e0ODqNDdLW04wD36X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
94.143.231.0/24
176.96.136.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
IPv6:
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
86:62:d8:0e:b5:fc:7e:49:64:2c:7a:07:7f:00:e1:21:bf:48:
7f:18:36:40:9c:d9:91:70:16:6b:e8:e7:f3:7d:8e:89:ff:d5:
49:78:b3:8d:35:7b:71:32:7e:2d:16:4a:62:97:a7:9f:9f:f3:
8b:bc:7b:f0:ab:f4:7f:0a:c4:7e:a1:16:16:a6:65:40:1c:a3:
e1:97:02:5e:6f:0f:88:fe:9c:07:60:d2:28:53:04:7d:90:40:
53:a0:e8:92:de:19:0f:ca:56:56:88:96:2d:3c:c6:4f:22:01:
36:0d:63:72:2b:a4:7a:2e:4c:8e:1c:60:03:a0:09:a3:35:9a:
e4:99:3f:ff:00:b7:b3:86:6b:fb:04:0a:49:fd:44:11:e4:2d:
1d:5e:e2:3f:d9:ea:a3:ed:ec:a0:55:fa:b9:78:86:09:b3:f3:
22:b8:9f:a1:55:62:62:49:5a:5d:53:48:d8:35:39:12:9b:dc:
5f:e6:fb:54:18:79:4e:7c:85:8d:5b:e6:e6:c8:84:11:30:2e:
c9:58:cc:2b:0d:7c:b2:f2:ef:3f:c4:ef:30:84:4f:90:c8:29:
e4:d4:6b:f7:da:df:15:5b:b7:03:8f:b7:e2:88:39:a5:fb:da:
03:46:37:80:f1:16:4d:a4:db:eb:ea:41:1a:bb:a1:eb:d7:40:
f9:0c:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:34:31 2025 by rpki-client