Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/JOnb982EVW_g_dQq6uJ9FuXQUo4.roa
File: JOnb982EVW_g_dQq6uJ9FuXQUo4.roa (raw, json)
Hash identifier: sLujk3yzdb7dP6lx6tTE6eieqaUNTxDz4pyV4jTuahs=
Subject key identifier: 24:E9:DB:F7:CD:84:55:6F:E0:FD:D4:2A:EA:E2:7D:16:E5:D0:52:8E
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 058BF2B2
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/JOnb982EVW_g_dQq6uJ9FuXQUo4.roa
Signing time: Sat 01 Jan 2022 11:03:09 +0000
ROA not before: Sat 01 Jan 2022 11:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 193.138.212.0/22 maxlen: 22
2001:67c:18c4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93057714 (0x58bf2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jan 1 11:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e9dbf7cd84556fe0fdd42aeae27d16e5d0528e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:32:2b:9f:6c:d1:e6:fb:83:70:9e:03:c9:
3f:22:52:c0:79:3f:3e:cb:33:70:41:3f:41:85:3f:
e9:11:d9:dc:7a:e4:94:2b:f8:90:9c:da:97:a7:84:
0f:71:c8:3c:bd:79:92:b0:5e:99:1a:9a:f6:b9:e3:
db:8a:74:c7:18:af:12:c5:7e:11:a9:7c:3d:65:34:
20:fd:7d:e0:aa:23:09:10:92:c3:12:04:62:87:88:
46:0c:f2:fe:ac:ca:b6:c9:0e:7d:c8:7e:34:d8:0c:
86:03:51:8f:a4:48:ff:85:02:19:22:dc:0b:1b:d5:
fc:9f:bf:4c:c0:b8:46:d8:23:cb:a5:90:4c:b2:04:
23:76:ad:4b:26:67:06:e2:71:6a:59:ef:0e:3e:95:
ab:95:dd:1d:fd:03:fe:3d:64:22:cb:90:34:b7:42:
d0:a8:f5:b4:6e:77:99:e9:ed:70:11:4b:0b:25:96:
b1:f6:58:df:92:73:ce:d9:e6:df:43:33:0b:7a:4d:
30:08:31:97:59:08:82:60:70:f4:45:c1:04:94:53:
e8:8e:7b:58:6f:eb:0d:42:3d:9e:4c:77:51:21:c2:
17:cb:03:36:53:53:5f:ac:87:b4:0e:df:fc:9a:ec:
be:44:f7:0c:80:c0:dd:0f:4b:00:3b:e4:c2:e3:cc:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:DB:F7:CD:84:55:6F:E0:FD:D4:2A:EA:E2:7D:16:E5:D0:52:8E
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/JOnb982EVW_g_dQq6uJ9FuXQUo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.212.0/22
IPv6:
2001:67c:18c4::/48
Signature Algorithm: sha256WithRSAEncryption
43:1e:77:a9:d5:20:cc:93:1e:e5:c5:8d:fc:f9:6d:1a:ab:ff:
dd:3c:1f:f3:54:af:47:b4:6f:77:5f:ce:13:c6:d9:a8:1f:b5:
0b:9f:89:59:21:9f:1c:c0:b1:70:e8:85:24:38:ed:31:cb:7d:
3d:17:29:b9:bb:1b:8c:59:58:2c:13:29:e3:f2:71:db:57:da:
c7:06:32:2d:ca:03:60:93:ba:62:36:86:38:29:97:d8:57:0b:
fa:6e:bd:71:f0:4d:80:73:58:9c:fe:8e:ad:df:5b:57:61:5c:
81:d8:94:fc:99:7c:1b:7e:7d:76:56:b2:89:12:25:1c:a8:8e:
65:38:66:85:42:8e:76:c5:1f:ee:3e:d0:90:5e:a5:55:0b:7f:
a8:ec:0e:86:44:3d:bf:5b:12:b8:fb:14:8e:40:4a:44:16:d7:
50:f8:c0:ba:62:28:6d:e4:18:dc:59:4c:d8:68:14:90:ec:52:
99:8f:df:cc:e2:d1:38:9d:93:b9:d9:bc:d4:ff:72:5b:77:dd:
d4:c3:fd:2c:a1:e2:23:49:af:1c:14:36:f1:76:34:aa:67:76:
1f:f5:6d:10:6f:a3:a3:79:cf:fc:1e:20:db:4b:7b:ce:18:34:
3e:9d:a2:28:11:88:1c:37:ca:6d:42:db:ad:71:a4:12:07:1b:
a5:6e:84:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:17 2025 by rpki-client