Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mkj7IuH4oo45oJjGXkYw1g1t1lE.roa
File: mkj7IuH4oo45oJjGXkYw1g1t1lE.roa (raw, json)
Hash identifier: 7ulG/CpjUaz/GGG83CEdeQkxInKKYnJ/zdMZn++Oy2E=
Subject key identifier: 9A:48:FB:22:E1:F8:A2:8E:39:A0:98:C6:5E:46:30:D6:0D:6D:D6:51
Certificate issuer: /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial: 01AC30C5
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mkj7IuH4oo45oJjGXkYw1g1t1lE.roa
Signing time: Sat 01 Jan 2022 13:56:39 +0000
ROA not before: Sat 01 Jan 2022 13:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52183
IP address blocks: 193.5.117.0/24 maxlen: 24
193.5.116.0/24 maxlen: 24
193.5.118.0/24 maxlen: 24
193.5.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28061893 (0x1ac30c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Validity
Not Before: Jan 1 13:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a48fb22e1f8a28e39a098c65e4630d60d6dd651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:a3:de:cd:f8:00:c0:8f:9e:cc:32:35:09:
e1:2c:a3:78:49:87:6d:38:39:b9:84:a0:e2:0b:6f:
48:eb:35:3a:4f:71:6b:d4:6e:a3:45:73:5f:9d:04:
dc:9e:e2:ec:c2:6e:ad:17:f0:16:c9:27:72:bf:6c:
e7:12:e8:5f:64:c5:28:7d:5e:d7:2f:c3:5d:9a:48:
bd:ff:42:b0:8f:53:0b:26:cf:04:b4:45:12:aa:c0:
85:26:2d:f1:4b:28:79:7a:4d:82:1e:d8:1a:62:d5:
10:93:98:c0:c1:57:ab:93:d1:1e:01:7a:ed:47:e0:
16:ef:21:20:77:a2:ba:d7:5c:b0:56:b7:a2:e3:95:
fd:8e:b8:e6:2c:1f:4d:76:2c:b4:67:16:ac:87:18:
fc:11:bb:b2:ef:ed:fc:6c:99:0b:02:e6:96:a2:28:
3b:f2:f8:97:c3:ca:ae:b5:7c:7b:73:18:2b:6b:ac:
0e:19:84:cd:79:13:4d:7c:a2:db:44:5d:9c:30:4f:
99:d1:53:5f:bf:ca:61:1b:84:8d:8a:bd:22:4d:c2:
cf:e2:08:a6:3c:fc:33:dd:64:f4:85:85:89:59:58:
d4:07:c4:f3:a4:62:ed:67:93:b0:32:54:00:09:e8:
f7:0e:14:85:ca:60:84:fa:4e:2a:75:87:b8:c3:97:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:FB:22:E1:F8:A2:8E:39:A0:98:C6:5E:46:30:D6:0D:6D:D6:51
X509v3 Authority Key Identifier:
keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mkj7IuH4oo45oJjGXkYw1g1t1lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:4a:e0:83:2c:ad:7a:e1:59:54:8f:61:75:56:b8:ed:62:e9:
f8:7c:e4:89:4b:b9:6b:7c:76:fa:f7:58:4c:3a:c6:45:57:23:
00:30:71:b2:50:c7:0b:18:3a:e3:53:05:0b:44:15:b3:6e:99:
39:ee:45:ce:b0:31:c3:4e:ca:ae:a0:21:2d:cd:50:ac:c6:f6:
93:5a:e8:48:0a:74:82:e5:81:ff:0a:d1:df:27:dd:97:32:c8:
eb:e2:eb:7e:1f:11:46:ec:44:a1:ba:06:d4:a1:15:53:80:64:
2e:07:90:4d:3c:3f:b8:aa:81:e1:f8:06:9d:c2:8a:d9:36:15:
18:57:27:16:68:8c:26:8f:80:25:17:65:4e:55:de:d4:e6:9b:
45:ee:e0:9c:9f:f7:73:b6:4a:0c:8d:df:bf:f2:78:cc:83:10:
cb:80:5c:bf:3f:57:a3:84:ca:dd:10:a4:5a:84:87:7d:59:32:
df:5d:a8:33:6e:f6:db:5f:75:f4:b5:06:c8:6f:9b:4f:51:41:
fd:77:cf:b9:d4:f4:7b:dd:79:0f:85:d3:13:f4:2b:bc:08:d9:
51:89:7f:ca:1d:14:d6:60:88:5c:88:99:fd:ac:c3:93:31:13:
d4:41:a0:12:8d:1b:de:8d:2b:92:06:09:46:bc:73:b3:1f:42:
a6:1a:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:58:35 2025 by rpki-client