Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/LBiu4zyOBBjnlIFMslUIJS4N1fM.roa
File: LBiu4zyOBBjnlIFMslUIJS4N1fM.roa (raw, json)
Hash identifier: /oRIqJe2OZLfYFRcSnQCI/yQjedgu+Xzs+ILnKidiZc=
Subject key identifier: 2C:18:AE:E3:3C:8E:04:18:E7:94:81:4C:B2:55:08:25:2E:0D:D5:F3
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0C0727DB
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/LBiu4zyOBBjnlIFMslUIJS4N1fM.roa
Signing time: Sat 01 Jan 2022 05:04:32 +0000
ROA not before: Sat 01 Jan 2022 05:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42198
IP address blocks: 193.30.32.0/24 maxlen: 24
193.30.35.0/24 maxlen: 24
193.30.34.0/24 maxlen: 24
193.30.33.0/24 maxlen: 24
2a0c:8540:3::/48 maxlen: 48
2a0c:8540:1::/48 maxlen: 48
2a0c:8540:9::/48 maxlen: 48
2a0c:8540:4::/48 maxlen: 48
2a0c:8540:2::/48 maxlen: 48
2a0c:8540::/43 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201795547 (0xc0727db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Jan 1 05:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c18aee33c8e0418e794814cb25508252e0dd5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:9f:26:87:72:1d:be:b2:e2:88:51:3d:98:
70:94:5e:19:b9:0f:d8:a7:1c:65:5a:0e:61:a0:1c:
ea:b3:4a:20:9b:ad:0b:10:e6:43:e3:57:f4:7f:e9:
da:62:da:23:3b:68:5a:03:ec:4f:53:db:bd:38:f5:
90:3b:1e:dd:b3:13:3a:aa:ab:83:e2:19:04:0f:9b:
64:cf:e6:4d:ff:1e:06:4f:7c:f0:62:7b:7f:2f:ef:
4e:dc:f1:e1:51:5d:d8:7d:65:f2:2c:41:8a:cd:c8:
30:a1:0a:cb:07:c5:2b:ba:95:01:5a:79:2e:8b:0f:
8c:28:f7:4b:92:08:7a:d3:fd:5a:c4:fd:29:fb:64:
20:c9:fa:7e:26:a0:e9:b9:83:bd:0f:74:46:56:27:
0a:96:7b:c9:e6:18:88:49:08:1b:40:19:97:de:21:
46:9a:0a:06:78:51:7d:16:98:2a:d3:44:32:db:18:
91:bb:67:56:ac:b6:9e:11:93:3d:24:b9:fd:95:7b:
e4:05:f3:09:75:77:62:a9:8e:34:ce:d7:35:60:27:
46:1b:ef:04:e4:12:cb:10:06:7c:da:9a:96:32:4a:
4d:d5:ec:5e:72:c6:e7:c6:4f:ed:ae:9d:0f:71:dd:
b4:61:48:dd:4d:6b:0e:5c:44:65:5d:b9:32:bf:ab:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:18:AE:E3:3C:8E:04:18:E7:94:81:4C:B2:55:08:25:2E:0D:D5:F3
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/LBiu4zyOBBjnlIFMslUIJS4N1fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.32.0/22
IPv6:
2a0c:8540::/43
Signature Algorithm: sha256WithRSAEncryption
35:c3:fa:fd:f1:99:b1:96:82:bb:26:04:fa:2e:02:5b:90:29:
fa:f0:e0:77:0e:fe:8f:06:b4:0a:08:d3:d9:d9:b9:58:b4:15:
ee:b5:cf:35:0b:fd:78:d4:52:ae:86:58:75:bf:9d:86:79:e3:
f1:b7:ac:9c:8b:7b:08:8d:43:c3:14:f5:59:8f:e5:dd:d6:92:
a6:90:47:8d:a2:9d:71:17:20:37:ab:4e:fa:8d:09:ee:f7:32:
e6:57:26:47:85:0a:6e:8a:90:71:9d:60:3e:3b:11:32:f7:1d:
85:bf:45:54:4e:10:a3:60:74:ba:d8:10:bc:73:7c:ac:23:f5:
06:a1:b9:6e:3f:16:cb:d1:ae:75:86:fb:c9:ce:6e:11:e4:9b:
36:2b:ae:5a:ba:24:c0:91:38:65:e5:4b:7f:58:f6:ef:9d:87:
27:5a:3d:38:e9:d6:6d:37:56:63:fe:14:11:3d:be:7a:0c:1d:
69:8b:69:89:09:d9:85:22:cd:a5:1e:57:d5:cc:6d:94:1d:a7:
22:95:e5:18:65:69:8d:a6:d9:ff:7c:39:71:23:93:38:55:6c:
d3:56:56:86:a2:3f:a9:cf:8a:9d:05:9c:ee:86:2f:60:e3:24:
f0:fb:5a:3c:d8:50:6f:de:03:67:d3:64:c7:85:5f:f5:fb:c6:
9f:96:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:38 2025 by rpki-client