Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/isPfcr6ip9kldmeFklUjP-KT6z4.roa
File: isPfcr6ip9kldmeFklUjP-KT6z4.roa (raw, json)
Hash identifier: OELuRYptMGdPn1RIadphRV13nlKft5JmMFMAkADJL+8=
Subject key identifier: 8A:C3:DF:72:BE:A2:A7:D9:25:76:67:85:92:55:23:3F:E2:93:EB:3E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 018BCBF8B9680CB1E389199DB9E2EE36E8F7
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/isPfcr6ip9kldmeFklUjP-KT6z4.roa
Signing time: Tue 14 Nov 2023 03:55:57 +0000
ROA not before: Tue 14 Nov 2023 03:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42198
IP address blocks: 193.30.32.0/22 maxlen: 24
2a0c:8540::/43 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:f8:b9:68:0c:b1:e3:89:19:9d:b9:e2:ee:36:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Nov 14 03:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac3df72bea2a7d9257667859255233fe293eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:d9:64:4a:eb:1b:05:8e:a7:d1:86:98:96:
9c:7d:77:d3:00:56:04:02:aa:a3:c0:de:b8:c9:2c:
cc:10:99:e6:58:c7:39:bd:3d:8e:05:ed:2e:27:61:
dd:3a:27:97:3a:c2:fb:2a:6d:97:bb:a9:a1:54:88:
8e:50:65:80:3d:95:98:00:97:4d:61:65:d6:92:b7:
ca:06:74:1d:22:13:90:1c:c6:0a:9f:57:c3:a7:37:
d8:85:8d:87:e1:d5:a4:ef:c0:30:43:a5:87:63:90:
50:c9:e5:c9:de:ec:d5:7c:46:3c:9b:d9:42:ae:a4:
37:9e:ef:04:93:45:59:25:e8:0b:cf:3c:f0:27:89:
ea:f1:d1:b0:f9:d4:a3:26:08:c2:70:30:1c:2c:bf:
32:77:9a:d1:d7:f7:6e:6a:19:28:25:f3:10:ee:d5:
3f:24:4e:46:55:cd:80:94:bd:07:de:cd:4b:db:77:
84:90:7a:45:32:96:dd:00:db:13:a1:8f:e6:bf:bb:
4b:e3:c9:50:b1:51:bb:4d:29:79:78:3b:9d:e0:71:
24:5a:49:94:97:65:45:d9:76:f9:65:ef:dc:05:6d:
8a:8b:bc:98:49:54:25:d4:08:e3:87:e7:a7:02:59:
60:90:18:a4:cc:cf:c0:49:de:7a:a5:f7:25:71:83:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C3:DF:72:BE:A2:A7:D9:25:76:67:85:92:55:23:3F:E2:93:EB:3E
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/isPfcr6ip9kldmeFklUjP-KT6z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.32.0/22
IPv6:
2a0c:8540::/43
Signature Algorithm: sha256WithRSAEncryption
74:8c:2c:05:a1:52:30:fb:5a:68:14:6d:5f:77:11:f1:2a:58:
be:d2:fa:75:18:bd:d7:cf:82:cb:92:e1:5c:72:9b:be:4d:04:
fb:04:b8:46:a3:3a:ba:49:74:aa:2c:0a:54:4e:33:23:a3:b6:
06:3c:53:04:97:88:16:f2:a6:8c:64:31:38:91:e8:5c:1c:2a:
b1:1e:ae:9f:21:e7:db:7b:ba:88:b8:80:e1:2c:77:de:c4:c1:
26:de:af:5c:e5:1f:a9:f0:6b:cf:9c:95:31:b9:40:76:84:5f:
c8:1e:a4:1a:8a:f9:4c:d0:57:a0:64:a7:78:4a:65:b7:fb:aa:
a5:ca:ff:08:2d:0b:14:fc:8c:4a:51:09:89:27:58:9e:09:c9:
43:04:d9:24:c1:a5:2d:89:f9:be:d9:bc:6e:6f:5a:1e:65:9b:
97:38:f1:72:a8:04:42:37:8b:40:03:11:fd:2e:6c:7e:b7:33:
2f:fb:e7:89:da:c9:9b:97:3f:80:41:1c:c6:22:2a:6f:c7:f6:
5a:97:3a:bf:f5:ac:8d:63:77:89:67:ec:cc:ec:4b:fb:dc:f6:
e3:67:dd:76:ed:e1:a2:7e:79:3c:db:f9:cc:e4:3b:cd:ab:06:
08:f4:aa:2f:ee:59:5e:f9:99:6c:86:b8:83:c3:26:0a:a6:d9:
b1:a3:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:15 2025 by rpki-client