Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UXlLVImtpuHvn9OlpoQNjuWrFkg.roa
File: UXlLVImtpuHvn9OlpoQNjuWrFkg.roa (raw, json)
Hash identifier: BxsSP3R4QL++pyDibCQWPGna9h1TEL9woJhH6bdcC6U=
Subject key identifier: 51:79:4B:54:89:AD:A6:E1:EF:9F:D3:A5:A6:84:0D:8E:E5:AB:16:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 022CA7AA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UXlLVImtpuHvn9OlpoQNjuWrFkg.roa
Signing time: Thu 03 Mar 2022 08:04:02 +0000
ROA not before: Thu 03 Mar 2022 08:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0e:f201::/32 maxlen: 32
2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36480938 (0x22ca7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 3 08:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51794b5489ada6e1ef9fd3a5a6840d8ee5ab1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:60:c8:31:20:0f:2d:1c:3f:fa:7b:2f:32:
9e:98:7d:80:e2:4e:60:9d:c0:61:cb:43:9c:20:11:
dd:a0:a4:fc:69:af:30:2a:34:90:ea:42:4b:39:b6:
b2:2a:27:81:25:55:ba:51:2d:7f:a8:75:7e:2d:44:
03:b3:09:4c:4e:59:75:e9:8b:b9:bf:42:0e:9e:68:
90:ab:65:7b:a9:bc:0a:8a:6d:94:0b:58:38:d7:c7:
d1:bf:b5:6d:f7:ef:bd:1e:9d:ea:4c:d6:41:08:d4:
7e:92:bc:05:66:08:68:94:df:5a:f0:e1:24:e6:15:
bc:ea:9b:05:36:4a:fb:bf:cb:74:32:54:e3:b4:f7:
80:05:61:54:92:c9:56:d4:01:44:4f:00:59:60:ee:
2b:73:b3:02:c9:f2:40:38:80:05:e6:14:a2:18:02:
ce:2e:21:fa:f6:4f:08:d0:c9:e4:eb:ce:bf:d2:ae:
d7:74:3b:55:b4:a4:cf:4b:1c:9d:7f:82:e8:38:35:
b5:bf:cf:da:ae:52:2d:a7:8c:1f:48:39:cf:f8:0e:
d7:e7:39:1b:c2:cc:33:89:ec:be:97:d8:d8:46:34:
43:05:04:08:20:62:c0:b6:64:6f:18:a4:e5:df:8f:
ce:db:54:5b:bf:0c:b3:c7:8f:37:e3:0e:a3:2d:81:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:79:4B:54:89:AD:A6:E1:EF:9F:D3:A5:A6:84:0D:8E:E5:AB:16:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UXlLVImtpuHvn9OlpoQNjuWrFkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
IPv6:
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0e:f201::/32
2a0f:3d81::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
4e:d4:9a:02:4b:e3:54:f2:c0:ea:44:d3:9b:5d:ec:b7:ef:20:
4b:29:83:f3:65:32:d9:83:5d:3e:b7:50:71:9a:77:b2:a9:58:
19:12:db:ff:a7:bb:2f:33:57:13:a0:e4:4e:7d:35:8e:cf:75:
00:b6:c1:20:a4:34:4c:dd:31:75:89:75:b9:02:32:18:cc:f3:
98:1a:48:d8:f1:40:0f:48:9b:ee:b7:a7:35:5e:03:96:56:71:
be:38:6b:80:59:4f:5a:69:61:4e:ad:3b:96:9d:b9:73:86:43:
86:ac:b7:87:ac:27:b9:20:ec:db:96:86:b3:de:c7:5c:46:3d:
0e:eb:71:de:43:2d:9d:9d:76:58:ee:ee:ba:60:5b:08:a4:a2:
06:32:48:29:03:d7:0b:7c:97:06:da:e8:fb:6e:a0:81:1b:ce:
ab:e6:f9:ae:23:cf:ad:47:aa:12:49:a2:66:48:cc:28:55:d0:
84:1e:f1:bc:8a:f4:18:26:4d:3b:74:1d:94:35:19:b3:48:d0:
40:b7:e1:a0:de:69:99:aa:72:37:d7:c5:19:c9:db:e3:be:a9:
f7:8b:ca:eb:7c:49:cb:d0:86:79:4f:76:89:72:41:07:70:54:
01:50:7f:46:28:c2:ef:f2:22:4d:17:bb:6c:7c:11:0a:4a:ad:
34:76:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:38:03 2025 by rpki-client