Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/tZDk8wc_XF-lBktmvSnlqKs6lDA.roa
File: tZDk8wc_XF-lBktmvSnlqKs6lDA.roa (raw, json)
Hash identifier: wX09d7JzOfECEIrBVl8xpnPxR9luIfH7FAHM++MCvyc=
Subject key identifier: B5:90:E4:F3:07:3F:5C:5F:A5:06:4B:66:BD:29:E5:A8:AB:3A:94:30
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 1670C783
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/tZDk8wc_XF-lBktmvSnlqKs6lDA.roa
Signing time: Sat 01 Jan 2022 15:05:06 +0000
ROA not before: Sat 01 Jan 2022 15:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6730
IP address blocks: 193.222.192.0/19 maxlen: 19
193.222.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376489859 (0x1670c783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jan 1 15:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b590e4f3073f5c5fa5064b66bd29e5a8ab3a9430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:51:d9:44:b0:8e:5a:9a:3b:47:c8:6d:cd:
d2:1c:db:ac:9e:9e:9e:ad:a8:0a:59:63:1c:b6:5e:
ba:bb:25:40:25:01:d8:91:df:5f:ee:50:5b:96:3e:
39:da:6f:6c:49:a7:b9:2d:f4:d5:f7:41:86:6a:fe:
9c:cb:d5:85:7b:5c:6f:14:4f:d8:c4:43:08:d3:28:
63:9e:66:4d:d6:33:ea:e1:f7:2e:6d:6f:9e:53:6e:
cd:73:e3:b2:ed:f7:6b:5e:dc:3d:1d:8d:7b:9e:b9:
38:01:79:be:a9:4c:79:53:a5:73:0c:9b:53:69:ca:
b6:0e:5d:a6:f4:08:e0:34:22:ff:de:b5:3d:b7:e3:
b3:75:21:29:22:71:89:e0:ae:5c:1e:26:3f:f2:ea:
b2:2b:7d:4a:c6:44:ea:18:72:4e:4c:99:bf:3a:1c:
16:ab:a4:48:13:3e:8e:2c:9b:ef:01:54:e3:15:ae:
f0:6a:ed:7f:c2:d0:f5:b2:23:74:b9:bc:ad:6e:6a:
2b:1d:29:96:a8:f4:7c:ea:64:85:ba:37:50:f8:5f:
7c:3f:05:76:1c:6f:bc:75:40:89:fb:a3:5b:7a:3c:
e5:5d:1f:98:79:c8:f4:8e:4b:38:f6:1c:d8:38:1d:
6e:02:eb:4e:b9:85:fa:82:83:7c:3e:f0:4f:17:d8:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:E4:F3:07:3F:5C:5F:A5:06:4B:66:BD:29:E5:A8:AB:3A:94:30
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/tZDk8wc_XF-lBktmvSnlqKs6lDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.192.0/19
Signature Algorithm: sha256WithRSAEncryption
12:9d:67:f9:6e:e2:d0:1a:7c:66:c5:fe:2c:4c:26:fa:8b:0d:
a7:c7:f8:33:fc:1a:4c:5d:d1:49:ba:cb:12:52:7e:cc:be:5e:
ae:b9:3c:d8:8f:da:b3:e9:5c:38:b2:2a:6a:56:e4:72:94:44:
c1:68:f5:7d:55:21:34:54:ab:e0:87:10:b3:73:d9:a5:e4:86:
51:e7:f7:70:dd:97:d1:8d:5e:19:45:91:9c:1a:eb:14:52:a7:
8e:95:2c:e7:de:42:06:f6:6e:01:b9:ef:e4:06:e2:8f:a1:d1:
b6:33:64:da:c4:b4:a6:dc:0c:5c:6b:1e:77:b5:9d:1c:a2:4f:
a7:61:e2:a8:c2:9e:ab:99:55:40:cb:31:04:ba:58:1d:6b:55:
82:3b:9e:d9:3b:65:a4:d4:52:29:da:48:08:16:41:43:60:95:
36:d9:66:3d:0b:90:8b:d6:72:5a:10:c6:a4:ae:a0:c5:cd:57:
dd:b2:13:ef:00:44:f8:f6:00:e6:74:6d:cd:36:b1:3c:dd:cd:
6b:dd:f6:98:7a:9a:1d:7a:f4:ca:f5:fe:6e:8a:99:a9:e3:c5:
29:67:a1:43:a4:3e:af:c3:40:5f:d4:c6:df:6d:07:a0:99:97:
54:67:82:0e:46:1c:1b:15:0f:91:af:d3:2a:d1:06:f5:4f:1e:
48:05:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:06 2025 by rpki-client