Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Cn6TogG82iZNF3i3q-mUb-9yiWw.roa
File: Cn6TogG82iZNF3i3q-mUb-9yiWw.roa (raw, json)
Hash identifier: ZbbioNo2Le54WfJg9LSyGHj9HIE1DihCvnfEXABUz80=
Subject key identifier: 0A:7E:93:A2:01:BC:DA:26:4D:17:78:B7:AB:E9:94:6F:EF:72:89:6C
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018766D845CBE21A84BB1B1B51360C608284
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Cn6TogG82iZNF3i3q-mUb-9yiWw.roa
Signing time: Sun 09 Apr 2023 16:27:42 +0000
ROA not before: Sun 09 Apr 2023 16:27:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 20
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 20
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.192.0/19 maxlen: 19
2.188.212.0/23 maxlen: 23
2.188.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:d8:45:cb:e2:1a:84:bb:1b:1b:51:36:0c:60:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 9 16:27:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a7e93a201bcda264d1778b7abe9946fef72896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:83:4f:85:28:3a:70:6e:6f:22:6f:ec:49:
3b:38:75:6e:01:10:66:b1:24:ed:6c:d2:f3:38:ef:
09:a8:33:d2:97:56:8d:d8:60:cd:c6:71:a9:cb:45:
15:3f:88:df:80:29:25:4e:55:92:3a:70:5f:a7:7d:
8d:d1:c7:f1:12:6d:bc:19:1c:bc:8d:15:4a:15:78:
40:c2:d5:f2:72:26:53:bc:cd:7a:7c:85:95:13:c7:
19:42:0e:1d:4b:ef:9f:d4:cf:ba:bb:bf:f4:aa:e6:
86:92:03:7c:af:30:97:c6:67:ae:9d:c2:b8:08:1d:
69:b5:03:92:f8:db:3b:ef:00:6e:df:bc:91:e0:37:
0b:a0:69:ce:76:0e:c9:55:4b:a7:e5:d8:db:0c:98:
3d:cd:36:f6:9e:aa:b2:af:ca:bd:ab:06:d3:2d:91:
20:ab:0e:df:7d:08:94:65:8d:82:e7:42:78:51:0f:
c9:89:fd:cd:0f:5f:82:a5:78:92:70:99:c2:9e:cc:
61:29:22:0d:2a:a8:dd:f8:d3:7b:40:cc:6f:be:5c:
2a:a4:b3:7f:cf:58:0c:cb:f2:04:31:fb:af:06:02:
a3:71:93:80:2b:89:bb:81:1c:0b:10:1d:2c:d3:10:
b8:3c:6d:7f:32:d8:9a:cf:b2:63:26:61:d8:f3:8a:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:93:A2:01:BC:DA:26:4D:17:78:B7:AB:E9:94:6F:EF:72:89:6C
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Cn6TogG82iZNF3i3q-mUb-9yiWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.60.0/24
2.188.160.0/21
2.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:e0:4f:e9:41:19:f6:4f:07:ce:7d:c7:35:9d:ee:ad:55:76:
a1:34:13:f4:74:f5:11:30:d7:ea:77:df:6c:df:8a:a2:8b:da:
6e:be:19:1d:17:41:0e:71:42:e3:89:ee:93:14:df:be:e6:e5:
12:21:53:e9:de:7e:ab:17:2b:b3:59:3e:41:4f:e4:71:b8:d9:
66:49:17:c8:65:ba:9d:dd:ef:fc:b9:d7:f0:7c:cb:41:dc:1c:
1e:a5:21:e9:7a:fd:b1:8c:81:ca:35:8a:a5:4e:48:0f:b3:a1:
1a:5b:c8:61:6a:ed:92:2f:bb:4d:6a:78:ec:1e:ef:cb:2e:30:
2f:76:23:f6:dd:b5:82:b7:ed:a2:33:e9:9b:76:85:a8:20:ae:
1d:7a:f8:72:00:28:3c:d5:36:63:10:5c:58:d7:91:fd:40:7e:
19:38:41:a5:22:69:36:fa:f5:b9:5c:f6:22:19:d9:41:ff:97:
fb:55:76:78:8b:4a:78:ea:30:1c:e5:3c:be:3b:36:93:33:f5:
3a:b2:8e:90:c4:78:8d:e5:97:78:4d:ce:f5:55:6f:d8:8a:c9:
d9:3c:22:b2:fd:4e:08:0f:60:2e:4d:a2:7d:8b:1c:9a:c1:51:
3f:3c:ac:a3:c2:c5:79:b6:f1:03:b8:7b:80:c1:51:92:36:75:
fa:84:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:13:09 2025 by rpki-client