Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/v-o-gD8AsqiobgngU1_LApJZY70.roa
File: v-o-gD8AsqiobgngU1_LApJZY70.roa (raw, json)
Hash identifier: NHdLcKG7LdbGjkVU6m3aGdBRce3lfPdPcfcyE8c2TFE=
Subject key identifier: BF:EA:3E:80:3F:00:B2:A8:A8:6E:09:E0:53:5F:CB:02:92:59:63:BD
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 07FD263F
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/v-o-gD8AsqiobgngU1_LApJZY70.roa
Signing time: Sat 01 Jan 2022 15:01:29 +0000
ROA not before: Sat 01 Jan 2022 15:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 193.222.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134030911 (0x7fd263f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jan 1 15:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfea3e803f00b2a8a86e09e0535fcb02925963bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:ef:f9:96:c0:35:90:23:ad:c9:f9:2b:c6:
16:ec:0b:3c:98:61:2f:bc:ed:b6:9d:83:b8:4d:7f:
fb:a8:c5:fc:8e:5c:68:92:6f:f2:0e:49:08:68:df:
2e:62:d3:50:3f:59:c6:03:ff:70:b6:91:42:32:39:
93:e1:6c:dc:90:19:03:9f:eb:44:6c:bc:99:5c:5e:
05:62:fb:19:b5:3d:d5:53:f0:32:24:66:2f:3e:70:
a4:10:b0:f2:03:a2:9d:51:24:60:89:23:81:87:ff:
5f:78:58:3c:1d:ab:70:6c:c2:17:24:ea:10:a7:57:
2a:53:2f:4e:0c:1b:d1:95:e2:75:91:f9:24:b6:d9:
e5:32:41:7b:93:01:b3:f3:44:5c:dc:bf:0c:12:47:
a7:de:d6:57:6c:bc:b4:6f:7b:1c:cc:61:d0:28:57:
43:d5:ce:5b:83:63:97:b5:98:0c:f6:23:f8:f6:0e:
a8:29:50:a5:c9:13:ba:d7:5b:bb:35:70:91:2f:ae:
8f:11:69:83:04:de:d1:48:3e:46:c2:9e:e0:07:b7:
25:49:03:80:16:ff:b5:2a:4f:06:31:ce:dd:00:f2:
35:b7:95:9c:5c:6b:53:ff:d7:8b:f4:2a:57:da:da:
0d:b6:c6:d5:b9:6d:98:b6:7d:25:2c:59:94:fe:0f:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:3E:80:3F:00:B2:A8:A8:6E:09:E0:53:5F:CB:02:92:59:63:BD
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/v-o-gD8AsqiobgngU1_LApJZY70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.190.0/24
Signature Algorithm: sha256WithRSAEncryption
66:eb:83:9b:88:8e:3f:83:c2:db:12:be:b4:3b:d6:d9:2e:46:
26:2e:24:f2:0b:eb:a9:7a:ed:0f:3e:75:0d:e9:76:55:b4:c1:
fe:25:82:b1:1c:a1:61:9c:a0:23:39:e8:1e:e7:77:24:6b:e8:
02:f0:cf:c1:dd:05:e3:a0:db:d0:b4:35:7c:27:ed:10:2e:6e:
9a:d8:c9:43:21:70:cb:f1:c4:00:41:31:74:1b:1c:f5:7b:b8:
21:32:ea:97:fd:d9:5e:40:fc:46:9a:e5:bc:78:b3:62:ee:ce:
08:bc:bd:1b:c7:84:43:d8:27:8f:e5:f1:7a:47:e5:54:08:e3:
df:cb:5d:1c:d6:eb:f4:6b:b0:9c:23:11:0f:4d:a5:7d:d7:2a:
94:c6:c9:70:8e:43:88:99:e4:48:7a:f7:d8:14:44:55:5f:95:
91:0b:4c:7a:ca:01:f4:90:14:de:77:65:19:cd:fd:5b:b5:72:
15:c1:ae:b2:69:61:e5:59:1d:de:ee:46:ae:59:25:3f:58:ab:
18:e2:8c:e7:4c:67:85:e2:4a:99:94:7b:e5:52:02:18:2e:89:
08:d6:fd:95:2a:ce:cb:0c:1a:35:b1:f4:5d:99:00:29:db:44:
c6:df:f8:f5:a6:16:7a:ea:2d:1e:4d:90:c8:2a:42:7c:cd:3c:
54:1a:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:02 2025 by rpki-client