Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/pB9Co4WzcGeGuB3Ky8WWYvjiSYA.roa
File: pB9Co4WzcGeGuB3Ky8WWYvjiSYA.roa (raw, json)
Hash identifier: gRs7OkI9uCrySQrpTj5Bl1bIRrbroG41+uJruQBYDP8=
Subject key identifier: A4:1F:42:A3:85:B3:70:67:86:B8:1D:CA:CB:C5:96:62:F8:E2:49:80
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 01896813C36F0FFBA7F120DC0A00C8099334
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/pB9Co4WzcGeGuB3Ky8WWYvjiSYA.roa
Signing time: Tue 18 Jul 2023 08:17:52 +0000
ROA not before: Tue 18 Jul 2023 08:17:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6740
IP address blocks: 185.193.128.0/22 maxlen: 22
82.202.0.0/18 maxlen: 18
213.235.64.0/18 maxlen: 18
212.90.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:13:c3:6f:0f:fb:a7:f1:20:dc:0a:00:c8:09:93:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jul 18 08:17:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41f42a385b3706786b81dcacbc59662f8e24980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:27:16:16:ff:90:68:55:f7:f2:fd:61:c3:
ff:76:7e:7f:f4:dd:ef:03:3f:6b:0e:d2:42:1e:d6:
6b:87:d2:f1:8c:68:a9:c2:7a:06:f4:b9:fa:03:1b:
9b:e7:78:65:18:2d:3f:7d:6e:bd:0e:32:cf:8d:00:
09:41:c5:12:46:77:8f:a3:7f:68:7b:ce:c2:19:58:
6d:4e:e3:52:61:6a:8f:24:21:cc:8f:32:4a:61:39:
92:86:46:a0:c4:78:e2:a3:af:1d:65:5f:01:c1:53:
b9:95:b7:83:5d:87:08:c3:bf:8f:01:bc:ee:17:4b:
a4:a8:24:eb:b2:b8:65:8b:e6:65:08:c2:b3:6a:19:
58:ef:ae:e1:ce:98:9c:ca:87:58:f9:ee:2e:9d:1b:
5c:ec:dc:d7:86:6a:7a:90:af:5c:2c:60:6e:c8:4f:
c5:b7:c0:7b:12:b2:6b:84:80:9d:8e:a0:40:12:c7:
80:c6:60:13:41:ac:4a:60:a4:74:e2:2d:ba:f4:a7:
d1:7c:4d:0b:3c:aa:5e:de:6d:5b:3c:ac:33:f1:7d:
99:d5:b0:48:86:cc:63:dd:fe:06:13:49:11:fe:57:
28:29:ee:cf:09:a3:8e:0b:f7:d0:09:dd:fb:4b:b7:
5a:95:04:54:61:ac:0c:1b:0d:a5:77:76:05:49:01:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:42:A3:85:B3:70:67:86:B8:1D:CA:CB:C5:96:62:F8:E2:49:80
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/pB9Co4WzcGeGuB3Ky8WWYvjiSYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.0.0/18
185.193.128.0/22
212.90.224.0/19
213.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:7d:9c:e9:a8:42:29:48:9f:46:78:ba:41:01:f5:44:38:dc:
1f:ae:f3:cb:2c:2f:01:51:fc:92:34:dd:31:b7:d9:ff:eb:8c:
8d:76:5e:1b:0e:70:b3:a6:5d:9d:ee:5a:6e:29:f9:47:66:5e:
56:d7:8b:06:82:5c:ae:81:3b:6d:99:fa:92:3a:7c:12:02:80:
da:9f:05:89:b8:15:5b:e5:26:2f:db:27:fa:3c:6f:a3:40:ad:
08:89:48:72:67:18:2f:1e:da:9e:c7:bc:20:d0:2c:1c:3a:97:
a9:6f:64:72:c1:df:a5:7f:37:51:75:dd:bf:17:3c:54:c6:22:
ea:20:fd:21:da:4a:c9:8b:96:4c:01:be:3a:80:1a:36:d2:6c:
04:d0:6d:84:2c:5f:5e:2f:1d:a7:47:ba:98:77:29:cc:91:44:
d4:79:a0:28:1b:63:e7:3b:32:a3:3f:3c:cd:dd:ce:d1:8d:91:
53:03:cd:1d:c0:8c:8e:75:57:f6:24:3f:16:d1:56:66:5c:5b:
d4:38:5d:5a:36:94:d9:fd:05:bc:63:2c:92:86:c4:ff:82:c9:
60:48:38:46:6a:58:5a:99:f6:07:40:3c:e6:68:7b:1c:ba:6c:
3a:aa:0c:d7:64:45:aa:2a:45:d5:0f:52:e4:90:1e:ba:6a:8c:
6e:42:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:07 2025 by rpki-client