Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_p1yR7NGgqnkjuMBrS5laDESJ50.roa
File: _p1yR7NGgqnkjuMBrS5laDESJ50.roa (raw, json)
Hash identifier: QO4mOasQ0U0jRD4AAS7sHzX7iyAmDNwlVP4vJ/BcJXU=
Subject key identifier: FE:9D:72:47:B3:46:82:A9:E4:8E:E3:01:AD:2E:65:68:31:12:27:9D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02333585
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_p1yR7NGgqnkjuMBrS5laDESJ50.roa
Signing time: Fri 04 Mar 2022 12:19:28 +0000
ROA not before: Fri 04 Mar 2022 12:19:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36910469 (0x2333585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 12:19:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe9d7247b34682a9e48ee301ad2e65683112279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:08:61:91:19:c9:a8:c0:e9:66:78:52:bf:
a6:d8:2d:2a:6b:4d:fc:e2:aa:0c:60:3a:ef:a6:cd:
35:14:84:c0:e6:2a:7d:db:e3:5d:4d:ab:46:07:b0:
75:42:56:1c:4a:b9:49:a0:34:93:69:0b:4f:ee:ea:
36:4e:b4:49:5b:98:d0:8f:af:ec:a5:bd:d1:dc:81:
53:93:e2:26:ed:a6:08:31:86:23:c7:a4:df:34:40:
6e:0f:fb:b2:91:1c:13:79:01:19:9f:6a:4a:16:81:
2d:de:27:d8:54:ea:7f:b2:20:83:b9:4a:c7:d8:34:
2c:c2:66:60:f6:f8:9e:42:0f:9f:18:96:46:ed:29:
b2:34:67:99:20:0a:c3:a7:60:d6:49:8f:46:6c:b3:
0a:62:54:3f:7a:62:f5:77:cf:3b:f0:e5:78:d8:44:
87:d6:72:98:c8:49:62:78:c0:c7:e3:37:85:83:49:
ba:32:2b:c7:fb:90:ec:96:ff:14:bf:b7:e9:4e:0d:
e4:b6:5d:df:7a:4d:6d:db:ce:5e:ed:5f:fe:7e:f7:
70:c2:dd:e1:33:a2:85:36:8d:33:58:4b:e2:2b:b0:
05:63:b7:1e:9c:c9:67:ec:71:f1:8c:9f:f6:d9:f3:
0a:0a:89:90:4d:8d:51:b7:37:1d:5c:b7:4e:9c:6d:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:72:47:B3:46:82:A9:E4:8E:E3:01:AD:2E:65:68:31:12:27:9D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_p1yR7NGgqnkjuMBrS5laDESJ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
IPv6:
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
bd:1d:23:bd:12:61:54:2d:2f:9c:2a:b9:a9:14:5b:de:de:49:
82:a9:90:a5:f9:47:62:49:00:37:95:bc:70:67:c4:4b:0f:5c:
18:7e:3e:2e:41:44:84:22:e3:66:8d:25:56:f9:b6:fb:b3:01:
c8:c1:66:7f:74:fa:95:96:2a:4e:06:73:bd:f0:ca:df:b0:e2:
d6:6f:03:85:a1:c4:4b:63:83:1c:d5:d4:57:48:5d:c1:2e:e2:
31:ec:af:26:83:f7:67:7a:e1:23:1b:23:b5:b7:08:0e:16:35:
ea:b0:f8:0c:e5:61:a9:9d:58:8e:09:fd:0a:3f:31:e8:49:50:
b0:1c:fa:4e:00:ef:cc:c4:85:67:89:b8:d2:b7:a5:3f:f6:9f:
41:38:a6:0c:be:be:b5:f2:73:2d:a5:ca:81:a9:85:df:b9:d0:
27:bf:9f:4a:43:ca:40:19:e7:3c:98:68:b1:f2:c8:58:fc:7e:
1b:a2:00:5f:19:39:9a:ef:54:37:9d:a3:1f:c6:95:f1:b9:b5:
bc:c0:67:38:89:f2:16:db:cc:11:dc:03:10:af:7d:d6:90:96:
42:75:c2:a6:27:17:12:cd:bd:31:ac:95:b3:7a:89:6e:7c:dd:
30:18:07:83:79:f3:28:22:6f:03:d8:fe:8f:a8:44:bb:e5:ad:
0c:cc:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:18:56 2025 by rpki-client