Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/SNJj-xWFC-GcAaAP8ypX8uejxKI.roa
File: SNJj-xWFC-GcAaAP8ypX8uejxKI.roa (raw, json)
Hash identifier: e254McxN88+w2eI+NH0CuvGnWhlYCVBeA8ae6OUaV0A=
Subject key identifier: 48:D2:63:FB:15:85:0B:E1:9C:01:A0:0F:F3:2A:57:F2:E7:A3:C4:A2
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 018572F12060553AAE5BAFBA6EFE71DCC9D6
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/SNJj-xWFC-GcAaAP8ypX8uejxKI.roa
Signing time: Mon 02 Jan 2023 14:44:43 +0000
ROA not before: Mon 02 Jan 2023 14:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48362
IP address blocks: 92.249.20.0/22 maxlen: 24
2a13:62c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:20:60:55:3a:ae:5b:af:ba:6e:fe:71:dc:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Jan 2 14:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48d263fb15850be19c01a00ff32a57f2e7a3c4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:bd:fc:0a:33:c6:23:6b:bd:c0:56:ad:c0:
39:34:9a:c4:22:d9:ae:c4:a3:19:78:07:23:44:0f:
4f:40:60:3e:4a:5c:c1:ce:91:65:01:e4:a1:de:ef:
03:1f:13:8a:ad:6e:0b:2f:91:50:aa:8f:47:28:10:
cd:e0:64:28:14:c7:fe:82:f2:69:6b:7f:0c:18:2e:
2e:20:99:df:05:96:c6:f0:dd:6e:09:64:88:1f:ac:
a8:e5:ff:85:89:9a:48:ef:8c:36:d3:6d:09:bd:66:
8d:6a:1e:6b:61:ac:00:50:b9:81:b2:11:0a:1d:e7:
ff:e1:1f:77:30:25:33:d4:ac:4f:0e:67:b6:01:92:
05:98:2e:5a:0f:48:42:51:94:f4:95:24:c8:3d:73:
8c:dc:27:57:4f:57:90:e1:e6:b9:42:ca:06:36:50:
73:61:28:74:18:b4:e0:cb:27:41:40:d4:50:dc:c8:
d6:b2:75:2f:da:5c:c5:4f:31:05:80:83:e2:93:53:
9e:58:b3:18:a3:e9:8f:7e:ce:1d:1f:3a:4c:04:e1:
b2:6e:35:5e:bc:cf:10:fb:5e:bf:96:8a:ba:5a:16:
36:3b:53:f8:75:9c:cd:d4:d1:eb:d0:2b:39:a4:29:
89:bd:dd:97:d3:89:7e:98:0e:1c:2d:7d:32:ba:73:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D2:63:FB:15:85:0B:E1:9C:01:A0:0F:F3:2A:57:F2:E7:A3:C4:A2
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/SNJj-xWFC-GcAaAP8ypX8uejxKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.20.0/22
IPv6:
2a13:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:87:b2:56:4c:1b:1d:2f:92:55:19:49:50:62:2f:21:e7:2a:
9b:c7:2e:02:3f:25:d4:d2:bd:3a:a7:ac:8c:fd:3b:98:74:3e:
9a:89:d8:1d:fc:6b:5f:3e:8f:c2:e5:fd:e7:8b:23:58:4c:d2:
51:f3:58:2f:12:4d:52:9a:fe:1a:ca:31:f7:a4:35:10:3f:f5:
66:c4:bf:69:f8:60:dd:ae:15:e4:33:27:75:24:30:6d:07:b7:
d9:5f:a2:2e:3d:5e:1a:06:d5:ac:c6:c0:07:7c:49:02:2b:c8:
c9:f4:99:d3:92:0e:ea:14:76:89:5f:a7:f5:1f:f8:5a:fd:1f:
b9:cd:01:4c:e5:38:bb:71:36:0b:8d:f8:1c:df:49:1a:bf:f8:
58:65:b8:0b:79:b5:bb:cb:f0:41:42:47:74:1d:e5:77:83:15:
6f:0c:71:47:98:bf:ee:c7:9c:0b:c4:31:4b:81:da:33:f8:31:
65:e9:32:e0:9b:62:8e:7f:b0:b2:87:6a:c7:e5:40:90:14:e8:
5c:ee:0f:70:bc:bc:b7:b5:06:7e:85:9f:f4:28:e4:5b:c6:0b:
e6:2e:33:57:28:b6:1c:31:7e:18:ff:c8:50:1f:11:46:f2:dd:
ef:0f:4a:ef:90:ea:ee:89:1e:19:55:50:76:4b:98:7d:dc:08:
d7:8d:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:23 2025 by rpki-client