Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/3ilXfabDvJz-OPs42uNd3L4Y-gQ.roa
File: 3ilXfabDvJz-OPs42uNd3L4Y-gQ.roa (raw, json)
Hash identifier: ogais8K0PWvb1/wKYT0HfRdWJJjRwPlncf3NLq/IRQU=
Subject key identifier: DE:29:57:7D:A6:C3:BC:9C:FE:38:FB:38:DA:E3:5D:DC:BE:18:FA:04
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 01852E98872A8C3BC53CBCFDB1CF534585DA
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/3ilXfabDvJz-OPs42uNd3L4Y-gQ.roa
Signing time: Tue 20 Dec 2022 08:13:45 +0000
ROA not before: Tue 20 Dec 2022 08:13:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:98:87:2a:8c:3b:c5:3c:bc:fd:b1:cf:53:45:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Dec 20 08:13:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de29577da6c3bc9cfe38fb38dae35ddcbe18fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:88:dc:16:8d:03:20:d2:fe:24:ae:f5:28:
82:42:18:db:2d:3f:ac:cf:e8:c9:f8:91:27:cb:19:
9b:ad:31:37:ac:45:38:d8:c5:ed:a5:ba:32:cd:c0:
fd:57:2f:1b:6a:8a:76:e7:1e:f7:8e:2a:72:a7:cb:
6b:97:ae:8f:7f:cf:fa:ad:d0:9a:85:aa:c3:1a:bf:
8b:b1:74:86:41:ad:98:5f:bb:60:31:ec:ea:13:ac:
9c:32:94:5d:c8:ab:81:df:7a:b0:b6:e9:11:5e:75:
ae:e3:b0:b1:df:31:45:16:ad:b5:4c:67:06:84:4b:
e2:9d:c6:0e:bb:b4:7e:81:39:27:91:b8:3d:c4:4e:
f5:b9:d7:21:f8:da:1e:6d:3e:b5:39:98:50:ff:65:
3f:ad:dc:a1:21:64:7d:5f:c3:f2:e1:be:c7:cc:a4:
18:af:25:f8:e4:12:f9:2e:3f:9b:51:d3:52:96:2f:
22:24:ff:fc:c5:ce:cb:df:e0:26:33:0b:81:eb:80:
04:b9:5b:0c:d0:8f:f3:2f:a8:e2:86:f4:6a:d0:e6:
3e:1e:a2:7e:f8:32:f5:36:29:0b:63:f2:a3:d8:0c:
da:2e:44:3f:9f:3d:61:88:ba:35:7d:98:0e:9b:51:
17:43:b2:c0:f4:08:de:96:c5:ea:06:79:c1:b0:13:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:57:7D:A6:C3:BC:9C:FE:38:FB:38:DA:E3:5D:DC:BE:18:FA:04
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/3ilXfabDvJz-OPs42uNd3L4Y-gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
Signature Algorithm: sha256WithRSAEncryption
07:19:46:58:5e:bd:af:57:87:81:b0:39:bc:8f:0d:68:9d:51:
ea:87:d9:c7:1b:6c:c6:bf:76:61:3c:ef:0d:3d:71:df:e2:51:
9e:f1:ea:b4:5f:6b:3a:42:07:c1:3e:e9:d2:1f:f3:36:91:22:
6e:2b:cc:50:0c:8b:ba:60:16:9b:4f:ef:db:7a:98:d0:f0:cd:
a1:36:9d:2b:74:e6:59:03:5d:6f:f9:20:d4:28:e0:1c:2c:22:
d8:03:b0:a3:3f:cb:09:07:ab:cb:4f:13:7c:d3:86:81:2b:a9:
dd:9d:2b:a3:07:81:35:86:a9:50:07:41:25:67:1e:45:e3:c1:
9c:26:67:22:49:f1:af:6d:8f:cb:99:cc:1c:a8:10:5c:aa:69:
37:ac:83:e5:03:15:59:c1:8f:f3:76:42:37:4a:83:e9:45:0b:
9f:42:f4:eb:a4:ab:99:e8:95:13:f3:c2:0e:16:fb:44:fd:a3:
f7:89:4b:28:ea:11:48:e0:83:32:cb:62:16:18:2c:7f:19:e2:
cd:a5:87:25:0c:f7:d6:38:16:65:5e:c0:87:74:16:54:7f:93:
3a:2b:69:8a:ef:01:03:17:cf:e1:f9:29:4e:1d:e1:ac:78:0c:
ff:51:0a:e8:80:7e:dd:9e:bd:66:fc:12:5e:78:81:b4:6a:8a:
fa:ca:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:36 2025 by rpki-client