Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/p9kpYiGAbqi0hH9Zb6SlgQ8mH0s.roa
File: p9kpYiGAbqi0hH9Zb6SlgQ8mH0s.roa (raw, json)
Hash identifier: zF1mR179tB4Ec2BZcl62YNp2kVjkWSvpuYG/FQIedhA=
Subject key identifier: A7:D9:29:62:21:80:6E:A8:B4:84:7F:59:6F:A4:A5:81:0F:26:1F:4B
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 01896813C3E577CBF65C3D1DDF119E848A44
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/p9kpYiGAbqi0hH9Zb6SlgQ8mH0s.roa
Signing time: Tue 18 Jul 2023 08:17:53 +0000
ROA not before: Tue 18 Jul 2023 08:17:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25424
IP address blocks: 212.111.0.0/19 maxlen: 19
185.157.196.0/22 maxlen: 22
85.92.32.0/19 maxlen: 19
188.244.48.0/20 maxlen: 20
37.9.192.0/21 maxlen: 21
91.109.32.0/21 maxlen: 21
77.92.192.0/19 maxlen: 19
2a0a:3340::/29 maxlen: 29
2a00:e580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:13:c3:e5:77:cb:f6:5c:3d:1d:df:11:9e:84:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jul 18 08:17:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d9296221806ea8b4847f596fa4a5810f261f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:bb:8e:44:51:96:d2:0e:b3:87:12:e1:7a:
a1:c6:d3:9e:a7:f7:12:ed:02:ca:7b:09:13:7e:82:
70:da:94:9a:10:eb:59:41:bf:21:54:74:5e:1e:aa:
3c:d1:a2:77:d0:66:b0:66:4e:54:4e:ff:20:94:2f:
e5:8a:dc:b5:a3:8e:4f:96:f3:32:31:a5:dd:b3:c1:
67:90:a3:8b:12:7d:5a:8c:25:be:93:b4:4e:9e:57:
43:ab:8a:4b:f9:f0:ce:31:ed:35:4a:54:c4:07:c6:
87:95:e2:dd:2c:fe:52:43:a8:86:9a:8c:0a:d0:3f:
a2:db:e1:83:d2:dd:96:1d:d5:00:2d:82:1c:c8:ed:
20:91:be:f4:80:ef:d1:81:42:4f:ca:82:00:8a:ff:
a6:36:51:14:21:c0:18:4d:fa:d1:e9:ac:89:e5:80:
f6:f6:71:27:9c:cc:cd:7d:e9:b9:78:8d:1f:6e:4a:
c5:5f:63:98:d4:34:87:af:ed:50:2b:6f:71:a6:62:
db:dc:67:36:08:9f:54:cb:56:72:3d:1d:fb:74:50:
9c:93:0a:25:7f:fc:31:2e:3b:de:f8:b7:34:c3:47:
ec:f8:e3:12:81:b8:00:6f:74:71:79:55:04:75:58:
d6:2d:48:85:16:76:5a:af:7f:e5:20:a6:d0:cf:0e:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:29:62:21:80:6E:A8:B4:84:7F:59:6F:A4:A5:81:0F:26:1F:4B
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/p9kpYiGAbqi0hH9Zb6SlgQ8mH0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.192.0/21
77.92.192.0/19
85.92.32.0/19
91.109.32.0/21
185.157.196.0/22
188.244.48.0/20
212.111.0.0/19
IPv6:
2a00:e580::/29
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
97:9c:d3:d8:2f:20:a0:2c:27:89:cd:51:e6:78:7a:1b:b0:a5:
7c:39:48:df:1c:2b:78:f4:11:ee:2f:5e:ec:bd:1e:87:b3:00:
98:b9:39:a4:6d:c1:ab:02:08:85:3a:d3:41:2a:b1:e7:19:1a:
35:a0:ee:7f:a4:7f:b1:1b:38:48:56:28:62:33:3f:f9:f8:0f:
a4:ac:f6:18:11:6c:d1:fc:04:2b:f2:4c:94:d5:27:de:82:a0:
e3:22:3b:be:39:3d:38:ec:fd:11:d9:05:2c:84:a5:70:3e:62:
f6:67:66:99:df:ed:c9:5d:b9:9e:76:1c:66:24:11:1d:08:30:
2e:db:8e:5a:d6:1e:5e:24:ec:37:51:f5:b5:08:3f:c1:3d:d8:
4a:e1:26:07:69:cb:67:87:25:ae:a1:f0:b3:41:16:a8:95:31:
00:e1:94:c4:42:c7:10:b7:80:09:71:04:d0:69:7c:2e:70:2d:
42:21:9e:a4:cf:60:8b:62:1e:4c:24:78:5d:0c:05:8a:39:4c:
e5:0a:15:74:08:4d:70:ba:6f:3a:d5:93:e7:29:91:f3:ca:5a:
43:0d:9f:9d:d0:76:94:80:e7:fd:bf:06:61:b1:ca:a8:a4:0d:
1b:fc:fa:ad:62:77:58:48:cb:29:10:65:2b:a0:e2:d4:bb:68:
cc:ef:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:04 2025 by rpki-client