Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa
File: jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa (raw, json)
Hash identifier: /S+O35zjhg0hCSo+bHRQ7ROJGLVPCueDx376DNA5j+Q=
Subject key identifier: 8E:F3:26:D8:20:36:C4:28:F1:97:5A:E9:4F:2C:E5:0C:5E:32:C9:8D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018C266BB325562A9EA276442622A434EB89
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa
Signing time: Fri 01 Dec 2023 17:27:21 +0000
ROA not before: Fri 01 Dec 2023 17:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47122
IP address blocks: 193.22.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:6b:b3:25:56:2a:9e:a2:76:44:26:22:a4:34:eb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Dec 1 17:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ef326d82036c428f1975ae94f2ce50c5e32c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:66:94:36:7e:1b:f9:32:ce:1a:95:8e:a9:
0b:d5:8c:16:62:7e:c8:ae:9f:40:d3:48:c0:ee:f1:
f4:03:cd:71:80:45:c8:04:5b:68:a8:ab:d9:22:cb:
68:89:9d:4e:18:63:a5:9b:1a:73:9f:80:3b:4e:67:
b2:d4:fe:bd:63:1f:80:3a:2b:ec:cb:ed:ff:ff:bc:
14:61:cd:75:d0:f7:79:5a:66:fd:df:4e:90:94:fe:
3b:c9:7f:8d:5c:0d:bb:fa:f3:b6:fa:e3:c2:29:0d:
9c:13:4a:7b:bb:02:3d:03:3b:5d:e8:a0:0e:e8:2b:
aa:8f:89:ae:eb:cc:73:e5:ec:6c:3e:0c:8f:80:a3:
6d:37:05:23:30:c2:b4:88:04:1a:38:22:96:bc:2b:
6a:00:f1:6e:d4:dc:bf:89:a5:90:eb:3b:45:d6:13:
e3:af:c6:7f:b1:77:aa:1c:15:f5:99:2a:64:2e:c9:
84:e2:04:b3:8b:5a:4e:ab:f8:f1:b1:50:1e:d9:9a:
7b:b1:80:0d:de:b8:44:e6:7a:6f:81:e2:5b:a0:5e:
b4:b9:4a:30:e7:c5:ba:8d:f7:37:b0:fe:fb:6c:ed:
ce:7d:c3:e5:99:b4:6a:bb:ce:b8:5f:7c:d3:a5:3a:
ea:9e:56:00:d2:4b:02:7c:20:e9:d5:d9:e3:87:24:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:26:D8:20:36:C4:28:F1:97:5A:E9:4F:2C:E5:0C:5E:32:C9:8D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:5c:56:06:d4:3c:83:87:e3:9b:f1:1f:71:c7:15:aa:32:
f5:f7:93:81:ee:11:48:c8:d0:73:2d:3d:ef:e0:33:93:59:d7:
57:48:de:9d:28:39:b3:4d:e6:a9:6b:85:41:09:cb:ce:61:ac:
1d:52:67:9a:ab:13:8c:90:56:3b:f2:1f:44:c9:cb:fd:f9:57:
ea:b4:06:f7:57:f5:47:60:e0:3b:b9:bc:d6:38:1a:5b:c3:66:
22:56:b8:4a:e3:d2:63:52:0e:59:9c:cd:cb:ce:1d:a5:e6:d4:
df:6c:1c:c4:dc:6f:c3:a4:a2:a5:4e:8b:a2:1c:1c:e8:98:59:
c9:86:99:ca:b4:12:d0:30:bb:31:56:88:4f:f4:d1:3d:29:c0:
6d:a6:60:61:be:7a:c8:2e:09:4d:89:a0:11:7a:7c:a9:c9:cc:
a7:ec:a1:e7:2d:fd:14:f0:27:cf:a4:d8:19:cd:bf:fd:ec:ad:
3b:09:af:93:a6:7a:69:68:c1:b7:59:ca:cd:73:9c:ac:86:56:
6c:ce:c4:46:8c:94:71:15:b4:46:3a:3e:ab:f0:7b:3e:b9:f1:
d0:c0:df:1f:9e:4f:e3:37:95:7d:8d:50:17:84:55:a7:e3:01:
53:71:14:27:c1:bb:b8:0a:59:8e:d1:57:d1:e6:0d:73:18:85:
b5:93:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:52 2025 by rpki-client