Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/mdK5f1RmigrjZZcWul6y2gFEXws.roa
File: mdK5f1RmigrjZZcWul6y2gFEXws.roa (raw, json)
Hash identifier: VYNyb5cy1jBEgAxuPuVYUWzbp7VYeLI4ZrDhWwfGLaQ=
Subject key identifier: 99:D2:B9:7F:54:66:8A:0A:E3:65:97:16:BA:5E:B2:DA:01:44:5F:0B
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0A326509
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/mdK5f1RmigrjZZcWul6y2gFEXws.roa
Signing time: Sat 01 Jan 2022 12:54:55 +0000
ROA not before: Sat 01 Jan 2022 12:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.136.52.0/24 maxlen: 24
192.92.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171074825 (0xa326509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jan 1 12:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99d2b97f54668a0ae3659716ba5eb2da01445f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:31:6e:c0:bd:c3:82:19:f8:ca:ec:1f:42:
bd:6b:ce:9b:06:85:16:e6:28:1c:82:64:5d:6b:a3:
77:55:1c:bd:a1:7e:77:02:9c:ad:08:2d:4b:3f:d4:
f9:8e:e6:90:e2:f4:e5:f5:76:f3:f2:cf:ef:a4:18:
d2:3e:5b:61:2e:af:db:24:83:7c:8c:a1:59:7f:88:
c7:3f:b7:00:9e:2e:1b:ee:b6:d0:db:3f:16:d4:3b:
53:1e:f9:12:9f:06:84:7b:10:4b:f0:d4:82:56:49:
48:26:b0:1c:02:9b:cb:68:f2:0b:96:d9:71:7e:09:
29:5d:10:48:fd:e1:d2:ac:c8:6d:87:f8:74:f5:ce:
bb:d1:a0:dc:f8:ff:2d:b0:d3:4d:ba:ad:d8:76:7a:
59:a3:72:2e:24:db:fb:d0:c8:38:6d:86:43:ad:a7:
f7:c6:7f:57:f8:65:0d:02:d8:31:cf:b2:f9:db:83:
ab:b5:8f:ca:8a:43:17:cd:99:ba:b4:36:75:5d:1b:
69:26:54:96:a0:19:77:11:21:05:43:af:cc:0f:da:
c7:62:7f:46:1b:9a:cf:a1:ab:48:8d:d0:6b:23:8c:
c3:e3:39:98:0d:61:55:b2:17:20:7d:80:ac:9c:8f:
02:1f:30:10:a6:42:19:68:13:69:8a:e9:a4:3c:b0:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:B9:7F:54:66:8A:0A:E3:65:97:16:BA:5E:B2:DA:01:44:5F:0B
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/mdK5f1RmigrjZZcWul6y2gFEXws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.133.0/24
192.136.52.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ea:3f:94:3f:4a:bf:a6:43:58:b8:f7:a9:66:36:17:23:0d:
df:ea:25:33:a7:d1:e9:6c:e2:53:92:e0:4c:7d:8c:50:95:cb:
9b:2e:24:56:f9:9a:57:90:78:ea:db:70:2d:fb:ad:23:69:f5:
36:ad:76:32:f8:88:5e:48:6e:bc:e2:09:24:d2:15:72:f4:b2:
05:a0:e5:83:9c:f9:10:f9:f1:f9:9e:fd:e8:7c:b9:45:38:4d:
ea:97:7e:a0:ef:12:f5:a7:d9:9a:b0:2f:c1:72:01:16:0e:af:
89:4c:d8:8c:f7:48:b3:87:e3:87:c8:64:7f:aa:8a:3e:7a:27:
ea:0b:30:05:ba:d5:c0:fc:49:e9:ab:9c:a9:8d:49:06:5e:fe:
ce:42:45:ff:38:ed:ed:06:b2:c9:ee:86:be:fb:cc:89:bc:2e:
81:0d:6e:9c:b0:bf:62:52:38:b4:70:62:42:56:8f:c3:d2:af:
13:80:d9:fb:af:03:c5:85:66:a0:0c:fe:00:c3:63:38:ce:b5:
d3:ce:0d:bb:cb:1e:44:9b:37:e1:73:16:6a:96:ae:38:c4:3f:
0e:7d:4f:61:7f:19:0f:e1:d4:e9:55:e6:32:d9:8c:0d:2c:f2:
16:09:fd:bb:3d:b5:97:9a:c4:55:99:b3:50:d7:14:e2:05:4a:
7d:f9:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:53 2025 by rpki-client