Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2zddfNF9-ihzR_66NtnqqOBddnI.roa
File: 2zddfNF9-ihzR_66NtnqqOBddnI.roa (raw, json)
Hash identifier: QchHTh7FL2RlmohO3lGzpwp2rQ9nGOEa2FDrlsD2upg=
Subject key identifier: DB:37:5D:7C:D1:7D:FA:28:73:47:FE:BA:36:D9:EA:A8:E0:5D:76:72
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 033DC717
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2zddfNF9-ihzR_66NtnqqOBddnI.roa
Signing time: Mon 23 May 2022 07:55:30 +0000
ROA not before: Mon 23 May 2022 07:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54380311 (0x33dc717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 23 07:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db375d7cd17dfa287347feba36d9eaa8e05d7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:f5:60:02:80:81:54:a9:ea:24:b5:d1:90:
d4:44:fe:6a:91:c2:1c:53:59:dd:2a:27:0b:d9:90:
28:f4:be:3d:a9:f9:82:e2:2b:36:8c:3d:16:33:3f:
87:da:90:28:20:ce:96:bf:59:06:e1:e2:2f:da:ba:
bc:94:76:20:e9:c3:0e:a6:cf:f8:61:1a:11:98:f3:
38:9c:27:47:03:23:00:3b:e5:ed:5c:4f:31:58:f7:
3a:f9:7c:a4:e6:c5:e6:89:bd:71:3d:a2:3d:45:c7:
f5:8a:bc:c5:bc:0b:79:a6:15:33:46:97:7c:a8:b9:
60:d0:1a:99:32:83:41:2b:31:f4:ac:72:01:cd:f0:
0b:88:38:6c:82:a4:74:e7:e4:29:65:ec:ae:93:3a:
f8:09:0e:1b:a9:2a:1c:3b:fe:4c:12:b9:3d:56:2a:
9c:7f:2d:13:e9:ce:83:8f:25:94:e1:bb:4c:bc:a0:
6a:78:32:90:6a:09:30:74:61:31:a7:44:b5:52:ca:
a3:80:6e:bc:04:c6:67:8b:a2:d1:bf:fd:fe:ac:6d:
41:97:b0:79:c2:6c:76:b5:c3:63:28:db:67:b2:f2:
d7:a8:e8:a3:9d:2e:ac:6d:99:23:08:d8:cb:b2:d2:
96:09:f3:00:fd:57:d0:f2:bb:72:2e:c0:31:d4:da:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:5D:7C:D1:7D:FA:28:73:47:FE:BA:36:D9:EA:A8:E0:5D:76:72
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2zddfNF9-ihzR_66NtnqqOBddnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
IPv6:
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::/32
2a0f:3d83::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
41:b3:1d:10:a1:7a:f9:a6:e3:9d:23:84:d4:43:f4:2e:6d:99:
ba:8c:dd:2e:8f:db:4b:c2:16:31:aa:62:ea:6a:ea:f3:cd:47:
2f:a4:a3:67:b9:aa:5c:ae:fc:01:10:58:8c:81:28:da:60:f5:
85:a3:65:36:3d:13:88:31:34:14:8d:bd:42:f3:eb:48:ce:8f:
08:a3:5f:28:79:84:03:85:32:3d:53:28:71:29:99:92:cd:0a:
dd:29:8a:ee:4b:16:4c:90:e5:27:dc:49:48:2e:85:45:f5:e2:
23:54:30:c3:4a:a9:9b:57:14:c1:71:58:48:85:be:5a:e3:93:
cd:22:f8:a2:7b:d8:0c:7c:50:51:b8:54:c9:ae:d5:0b:4b:44:
f0:9f:90:46:c7:a2:ff:c4:e1:20:a4:8d:b5:c9:4d:de:17:68:
13:76:1c:fe:f1:8c:a2:35:f2:00:0f:1a:d8:fa:cd:1a:09:56:
cf:d1:00:10:86:0f:cf:d0:7f:ae:8e:33:23:82:cb:e3:1b:18:
2f:1c:28:8c:9e:c0:5d:9a:b8:75:b1:c7:85:67:ae:c4:39:79:
e2:af:32:c0:86:ba:f9:93:c8:d8:20:c1:0e:d0:31:8c:90:c7:
33:62:ad:2a:32:ef:4f:80:c6:b1:34:bb:88:d1:79:f7:a4:70:
bd:28:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:17 2025 by rpki-client