Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad_iKaJZwbLR2UAARZZ20LyOnvg.roa
File: Ad_iKaJZwbLR2UAARZZ20LyOnvg.roa (raw, json)
Hash identifier: 9xQlpMUdH7FphkQ/Y/c2b+tm6lmRFiDyCjUqDOBV0DE=
Subject key identifier: 01:DF:E2:29:A2:59:C1:B2:D1:D9:40:00:45:96:76:D0:BC:8E:9E:F8
Certificate issuer: /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial: 024ABFEB
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad_iKaJZwbLR2UAARZZ20LyOnvg.roa
Signing time: Sat 01 Jan 2022 14:58:45 +0000
ROA not before: Sat 01 Jan 2022 14:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48037
IP address blocks: 193.176.225.0/24 maxlen: 24
193.176.224.0/24 maxlen: 24
193.176.223.0/24 maxlen: 24
193.176.222.0/24 maxlen: 24
193.176.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38453227 (0x24abfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
Validity
Not Before: Jan 1 14:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01dfe229a259c1b2d1d94000459676d0bc8e9ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:bf:c1:22:a6:b1:31:81:57:b9:26:7b:fd:
a5:32:f7:66:2f:9a:68:91:a6:d4:a4:4e:04:c1:86:
51:25:ce:1c:1a:0e:c1:d1:0f:f4:37:0c:ce:af:75:
20:f2:d2:c5:f4:b2:b0:95:24:8e:7b:40:fa:cd:7c:
b0:cc:dd:ca:b5:65:3c:c9:67:bd:68:e9:8c:50:4c:
5d:3d:3b:63:9b:99:55:0d:34:7e:42:67:d7:36:a3:
fe:02:3f:c4:0b:da:42:ec:60:ec:1b:69:9c:52:df:
f0:c1:12:b7:29:36:75:4d:22:41:bb:cd:13:0d:96:
bb:58:b6:34:6d:47:bc:14:4d:13:70:2e:d6:f4:57:
0f:70:d5:22:9a:b5:57:7a:8e:84:69:fa:5e:6e:ba:
09:4b:9c:0e:07:2f:1c:16:fa:3b:e5:09:59:51:b8:
e9:ef:05:a1:66:43:fc:d0:98:79:dd:f9:3f:2d:96:
87:8f:a9:8f:9d:77:0b:8b:57:94:e6:b4:ca:86:cc:
b0:59:31:b4:02:ea:c6:8a:22:86:a8:13:a3:7a:71:
7f:6b:4f:3c:42:ce:03:1b:1d:da:38:56:b7:37:18:
71:a2:a7:27:d6:a5:d6:e1:90:9f:87:5e:80:16:dd:
78:ba:af:c8:9e:bc:dc:11:44:6b:ba:fc:e9:d0:a2:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:E2:29:A2:59:C1:B2:D1:D9:40:00:45:96:76:D0:BC:8E:9E:F8
X509v3 Authority Key Identifier:
keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad_iKaJZwbLR2UAARZZ20LyOnvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.222.0-193.176.226.255
Signature Algorithm: sha256WithRSAEncryption
42:bd:6f:6c:e9:46:b3:60:28:6c:c8:70:31:4b:c5:47:d4:0d:
1f:49:0e:a1:57:69:21:54:09:ae:f3:57:21:98:20:b5:ce:9c:
fa:2a:91:d2:46:63:ed:68:c2:a2:32:fd:01:5f:62:bb:04:3b:
0f:04:9a:a6:9f:cd:04:e4:5c:c6:6f:38:76:a9:df:d0:1e:47:
fc:d3:ad:56:dc:75:9f:94:6e:51:d9:f9:92:fd:d8:c1:40:bd:
af:57:b4:92:8b:fb:63:f7:16:f5:df:47:ca:87:71:fa:5f:90:
e0:6f:43:e6:f9:09:de:4a:7b:c4:ab:e2:cc:bb:f9:b5:3f:e6:
82:19:58:43:5e:1b:f0:94:18:e0:f4:0a:88:ba:1b:a6:00:69:
d7:b7:60:e4:d3:67:65:c9:fa:cf:7d:e5:0c:f9:04:78:0a:40:
8d:1f:84:93:4f:c0:96:fd:0d:c3:42:66:1a:16:5c:64:ef:9a:
f9:e3:5f:fc:40:4e:d3:db:79:88:e9:94:67:52:cd:0b:d4:bf:
69:f2:ac:8d:ae:77:e9:f0:0c:04:fc:46:d2:d2:d8:2d:12:93:
0a:af:c6:c8:04:10:ee:7f:e2:59:b6:74:91:1c:59:3d:74:f8:
f8:18:03:21:83:51:0d:ee:b3:4e:74:f1:18:13:32:37:3c:44:
a5:95:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:56:27 2025 by rpki-client