Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/C5w34OvFghmHhQQwjvOdmRhpRHo.roa
File: C5w34OvFghmHhQQwjvOdmRhpRHo.roa (raw, json)
Hash identifier: QS7PBuQ2Bo0m24V4HhTt2TgGtIKj4VN1T5yHIifcmIg=
Subject key identifier: 0B:9C:37:E0:EB:C5:82:19:87:85:04:30:8E:F3:9D:99:18:69:44:7A
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0CDD613E
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/C5w34OvFghmHhQQwjvOdmRhpRHo.roa
Signing time: Wed 30 Mar 2022 01:53:10 +0000
ROA not before: Wed 30 Mar 2022 01:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42198
IP address blocks: 193.30.32.0/24 maxlen: 24
193.30.32.0/23 maxlen: 23
193.30.35.0/24 maxlen: 24
193.30.34.0/23 maxlen: 23
193.30.34.0/24 maxlen: 24
193.30.33.0/24 maxlen: 24
2a0c:8540:3::/48 maxlen: 48
2a0c:8540:9::/48 maxlen: 48
2a0c:8540:1::/48 maxlen: 48
2a0c:8540:4::/48 maxlen: 48
2a0c:8540:2::/48 maxlen: 48
2a0c:8540::/43 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215834942 (0xcdd613e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Mar 30 01:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b9c37e0ebc58219878504308ef39d991869447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:f0:a3:40:3c:de:8a:19:e9:8f:0a:7a:58:
3f:9e:59:95:32:a2:53:ef:c0:c6:68:78:29:14:37:
db:03:22:52:3e:8a:7e:e1:8b:af:9f:7b:9e:ea:a4:
7d:1f:47:89:34:de:56:d1:28:ce:ff:36:4a:be:4f:
c2:0d:b4:77:40:72:4e:a8:e5:8b:11:1e:2b:be:3f:
26:7b:a4:1c:3e:a0:5e:52:f6:0f:e5:3d:e1:35:51:
c3:c7:1f:25:01:7c:b7:56:99:0d:10:58:26:80:36:
d6:4b:3b:87:42:af:a1:92:9d:8e:d2:4c:b6:60:d7:
90:11:7b:94:24:ee:bd:b2:72:84:ff:86:94:ca:87:
40:f0:70:70:08:fe:7f:43:2b:f2:bf:08:d9:7a:48:
d3:61:54:33:96:bc:83:3a:6b:bb:40:40:3c:22:92:
10:9e:9e:ec:78:54:ae:6c:d4:f3:30:98:7c:a4:41:
bd:09:6a:f5:06:3d:29:c9:7f:71:36:be:ee:a6:2f:
7d:7c:ec:53:57:22:f7:b9:bd:3e:76:63:74:0f:6a:
8e:22:e3:0f:2c:00:0c:26:f6:47:46:c4:06:e5:8b:
1c:c2:f0:71:cc:41:cc:bb:e7:b5:b5:68:d7:9e:a8:
cf:60:29:3f:17:6c:1b:26:4a:94:26:75:81:71:36:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:37:E0:EB:C5:82:19:87:85:04:30:8E:F3:9D:99:18:69:44:7A
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/C5w34OvFghmHhQQwjvOdmRhpRHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.32.0/22
IPv6:
2a0c:8540::/43
Signature Algorithm: sha256WithRSAEncryption
15:54:f9:aa:6f:52:aa:2f:17:c0:4a:b3:d3:a6:31:05:da:05:
a4:ed:80:0f:80:85:96:85:e2:a7:9a:0b:e1:e9:c7:d4:fc:06:
17:87:ba:c8:ae:b2:b7:be:de:ef:8a:d3:3d:90:fa:ad:76:23:
c8:b3:bd:7b:1a:79:e6:a4:86:b6:6f:7f:31:a9:2a:e2:60:a7:
87:16:2e:73:63:30:e4:d1:1e:cb:cf:a9:4a:c8:26:be:45:9b:
e8:10:00:95:23:9e:38:26:76:8e:02:1c:2b:d8:f3:d7:d4:e0:
8d:d2:0b:e3:60:97:f4:83:46:84:37:74:d6:5c:65:cf:a4:b9:
23:8d:b1:d4:b3:f1:5e:da:7c:9d:3b:32:b5:5c:f2:f3:0b:a8:
e0:18:da:c5:66:f6:ec:a3:b1:31:aa:74:47:67:90:f2:0d:b9:
2f:5a:61:b1:a7:b2:12:f3:f8:30:f8:10:dc:a9:d5:18:12:33:
43:9c:f6:ec:e8:7d:3a:50:1e:ad:d2:ba:0d:2b:bc:fc:0a:a5:
03:2b:66:80:ec:da:ef:03:c0:77:6f:e5:d5:84:19:f2:05:a0:
e4:70:0d:e7:b6:73:e8:76:77:26:4b:45:c8:7b:f8:f8:fb:83:
d2:b8:4b:75:66:14:d9:6e:d9:97:22:2e:da:fd:04:cc:50:2c:
4d:50:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:17:21 2025 by rpki-client