Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/lSG_QLG3Cjr5882SJhSZFvZ_2Aw.roa
File: lSG_QLG3Cjr5882SJhSZFvZ_2Aw.roa (raw, json)
Hash identifier: Cfu0Ro4ixGQakuRg61QjxntLtXa93lMdI0+BYz1hpNg=
Subject key identifier: 95:21:BF:40:B1:B7:0A:3A:F9:F3:CD:92:26:14:99:16:F6:7F:D8:0C
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 01856C1CAF51716E618A869DC426BAD37244
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/lSG_QLG3Cjr5882SJhSZFvZ_2Aw.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 193.46.250.0/23 maxlen: 23
193.46.232.0/23 maxlen: 23
2a0f:ba80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:af:51:71:6e:61:8a:86:9d:c4:26:ba:d3:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9521bf40b1b70a3af9f3cd9226149916f67fd80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:fa:48:74:1d:80:04:45:e2:11:d4:f8:ab:
c4:96:e6:62:89:82:e6:51:0d:99:5b:70:59:f9:10:
3b:4d:a2:9c:71:0a:6a:26:b2:08:ac:d1:70:f1:ef:
62:80:ae:fe:1d:e3:65:0e:e5:95:d0:36:1f:ca:5b:
88:3b:9d:98:f7:f4:62:f2:54:47:71:24:44:47:15:
47:48:92:1f:d2:de:e0:80:b0:d8:7e:28:15:90:26:
9b:4b:8c:1f:9f:06:be:b7:1e:33:8f:d8:3f:bf:88:
70:9a:0e:37:1c:05:42:29:43:44:2d:38:a2:f7:03:
90:89:96:72:b0:e0:6d:fc:07:81:1c:1c:78:2d:fc:
1d:d6:52:c8:9b:75:a2:25:78:c2:6b:fd:52:f9:e5:
ce:67:49:a5:3c:9f:b4:57:f5:e2:1c:0f:52:57:8b:
4d:c0:1e:69:fe:45:de:ae:16:4e:cc:55:12:91:4f:
47:1d:c9:be:82:29:c6:ad:47:df:53:a2:69:a3:70:
c1:a6:87:91:ee:a2:e9:17:4d:63:84:51:04:12:8a:
57:89:aa:50:d5:26:5a:aa:c5:e6:25:17:2a:9d:5b:
00:2f:45:17:9f:02:2c:f2:5e:9c:45:e5:9e:ae:f3:
7d:45:9a:01:0a:58:7b:cf:a3:ed:a5:db:df:4b:b4:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:BF:40:B1:B7:0A:3A:F9:F3:CD:92:26:14:99:16:F6:7F:D8:0C
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/lSG_QLG3Cjr5882SJhSZFvZ_2Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.232.0/23
193.46.250.0/23
IPv6:
2a0f:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
76:e5:83:6c:81:26:92:9d:62:9c:a9:5c:15:67:5c:64:ce:66:
a6:5f:90:47:36:d4:ec:8d:ce:04:7f:60:a4:4b:a4:54:2c:b0:
0c:77:02:d3:e7:03:2a:12:a0:87:92:38:a5:7a:f9:01:df:e9:
88:a5:62:5d:2f:ee:7e:2d:76:35:3d:61:80:75:07:ae:cd:53:
06:96:22:8c:58:2a:d6:36:58:db:f9:10:3b:35:a4:5a:e0:8e:
c2:61:01:ae:cc:d3:09:84:16:6e:f4:e6:a3:2f:9d:12:30:72:
d8:24:c4:10:37:b5:1e:64:71:4e:6d:6b:28:cb:6b:8a:f5:6d:
19:32:f6:f5:f1:3e:2d:e8:b5:e7:e9:ba:e9:5b:0a:42:d0:21:
d1:c4:c5:28:12:04:e8:45:9f:14:b7:a9:08:9e:8f:38:02:53:
b4:d0:85:a9:2d:99:cf:43:a4:ed:9c:33:73:c6:06:24:4e:87:
bc:6b:44:3c:b0:20:84:f4:49:ac:8c:11:5e:f1:28:bd:6a:66:
cf:26:f0:2c:e0:fb:c0:d0:86:31:2a:e1:67:f3:d2:4b:17:69:
cf:a8:c1:78:17:2d:ec:57:63:e8:26:95:74:18:aa:bf:16:ac:
f6:70:30:3c:f6:9b:b5:4b:1d:92:2d:c0:3f:e6:00:15:c6:c4:
6a:1f:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:31:17 2025 by rpki-client