Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGKEKYCAUDdaz3_Z2VcNzK2hWTI.roa
File: JGKEKYCAUDdaz3_Z2VcNzK2hWTI.roa (raw, json)
Hash identifier: 4EdG300xaU54kle1C+ttfSV4P+lGEToV7xxT1oEpjss=
Subject key identifier: 24:62:84:29:80:80:50:37:5A:CF:7F:D9:D9:57:0D:CC:AD:A1:59:32
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018595EF8C95CB61F73F305AC0DD9ED2FEF8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGKEKYCAUDdaz3_Z2VcNzK2hWTI.roa
Signing time: Mon 09 Jan 2023 09:49:42 +0000
ROA not before: Mon 09 Jan 2023 09:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ef:8c:95:cb:61:f7:3f:30:5a:c0:dd:9e:d2:fe:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 09:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24628429808050375acf7fd9d9570dccada15932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:9e:b9:78:0a:9f:53:05:7f:64:86:85:4b:
88:70:a2:c6:ca:b2:6f:a9:31:49:7c:34:b2:ee:3c:
6f:97:ad:8f:a2:6e:55:21:96:7e:ab:9f:21:30:b0:
82:5f:56:ce:ee:3a:50:00:ab:18:ee:9b:0b:f1:ff:
91:2d:2a:70:48:50:9d:9f:40:ba:03:bc:f1:87:4a:
b4:34:06:a4:3b:5b:b8:f5:13:3f:a9:ea:2d:9a:4d:
b5:be:96:55:62:2a:7a:56:34:a8:83:09:8d:96:95:
d2:af:22:5d:4d:be:d6:01:58:ab:a3:94:56:b6:5a:
d5:37:68:d0:d3:b1:86:63:e9:b8:9e:66:36:ff:89:
bb:58:20:e5:ab:2c:2c:ae:ff:07:e2:aa:3a:29:2e:
cb:5a:ad:3a:80:4f:2d:83:87:77:07:61:aa:4a:a4:
aa:fc:ee:52:db:b9:6c:bc:36:b7:b8:38:e8:9b:93:
1e:36:a8:52:97:df:23:b7:05:9b:a5:e1:45:71:29:
1c:c4:06:9f:c6:3c:06:e9:d2:35:72:c3:a6:ca:d5:
64:58:a7:e1:df:9b:2e:ad:5c:5f:b1:5e:25:08:c3:
5f:3d:49:83:97:f5:7d:96:2c:14:1a:fb:8e:6e:eb:
55:2d:ae:1a:15:74:e4:d0:8d:d3:a4:18:88:17:ab:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:84:29:80:80:50:37:5A:CF:7F:D9:D9:57:0D:CC:AD:A1:59:32
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JGKEKYCAUDdaz3_Z2VcNzK2hWTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
88:79:5c:8c:61:8f:37:ed:5a:2f:6e:82:0d:c5:64:2f:47:b5:
bf:4f:8c:ad:15:73:b7:d8:7f:5a:1b:f3:87:27:b8:74:74:11:
3f:71:a2:b3:90:32:9e:7f:9a:3f:db:27:61:13:d6:f9:c9:1b:
63:a4:d2:78:b4:d3:f9:74:1d:41:72:d4:1f:c6:9b:6d:dd:31:
f9:ff:71:0c:e4:73:fe:60:01:00:d7:81:de:65:cb:81:24:73:
3a:90:46:01:b2:ee:53:ac:9a:f4:2b:d4:50:2a:be:9b:df:ff:
a3:94:ad:a8:45:aa:81:ef:4e:61:71:00:ea:6d:78:07:cd:45:
a2:90:c8:b3:c2:a4:ea:46:9e:4a:52:8b:a1:61:e6:99:c8:d5:
6c:42:d6:4d:22:20:0a:c6:52:f2:b9:c6:57:a6:76:e3:53:2f:
c3:96:05:91:d8:8a:f4:cb:d7:7a:3c:f0:57:1c:e4:3d:ce:52:
11:9c:3f:27:85:34:41:a3:f1:55:91:9c:86:f7:f0:ba:de:45:
de:65:37:1b:bf:79:17:7d:fb:23:c3:94:22:27:c4:22:dd:20:
51:a1:4c:fe:ab:82:57:dc:a2:60:95:1e:58:57:ce:c4:e9:69:
3b:e9:d4:61:8d:1c:4f:5b:e7:f2:28:cf:d5:b1:9f:49:88:de:
d8:5c:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:58 2025 by rpki-client