Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/cpF2Gk7RibaN8hnXjd08Ik19MvA.roa
File: cpF2Gk7RibaN8hnXjd08Ik19MvA.roa (raw, json)
Hash identifier: Y2uMn8tBjzSdmbueRDbxJcgbkGWvl5EiVVIB+YktAPI=
Subject key identifier: 72:91:76:1A:4E:D1:89:B6:8D:F2:19:D7:8D:DD:3C:22:4D:7D:32:F0
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 01856F9E00A89D682F2BF27B8B652C75E5CC
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/cpF2Gk7RibaN8hnXjd08Ik19MvA.roa
Signing time: Sun 01 Jan 2023 23:15:03 +0000
ROA not before: Sun 01 Jan 2023 23:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59790
IP address blocks: 193.124.14.0/24 maxlen: 24
185.227.52.0/22 maxlen: 22
194.135.118.0/24 maxlen: 24
185.182.164.0/22 maxlen: 22
5.154.243.0/24 maxlen: 24
194.135.47.0/24 maxlen: 24
193.93.140.0/23 maxlen: 23
185.109.144.0/22 maxlen: 22
193.124.84.0/24 maxlen: 24
185.65.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:00:a8:9d:68:2f:2b:f2:7b:8b:65:2c:75:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Jan 1 23:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7291761a4ed189b68df219d78ddd3c224d7d32f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:d7:9c:1c:c3:1e:8e:73:6b:2b:3b:45:a8:
07:56:0d:81:c1:63:43:d1:f2:93:4f:75:f9:74:c7:
48:73:3f:79:44:f4:d8:f0:44:8e:d5:aa:cb:d9:5e:
41:74:c8:41:54:05:73:23:c8:31:2f:e9:e1:ce:2e:
56:7e:09:11:8d:d9:86:aa:d9:14:3e:e3:0c:ce:ed:
bf:7f:94:00:07:ac:98:6b:d5:60:23:52:5a:39:1f:
57:92:a3:4b:06:f4:28:1e:19:47:97:ef:3d:0d:c3:
85:3e:4f:18:84:1c:ad:93:a0:54:91:9b:19:29:76:
38:58:46:a6:f5:74:18:4e:3e:be:8d:a0:a6:1f:be:
0f:15:ad:59:2d:91:e9:d4:ec:d5:5a:62:f9:c4:a1:
b1:91:f4:09:ab:8b:17:f6:38:1e:eb:83:fd:c8:16:
4f:7e:4a:74:d5:19:4c:c2:a7:fe:5a:52:af:7e:65:
5a:4a:32:70:b5:b7:e8:ce:35:1c:b2:25:3a:9f:01:
37:c8:d7:0d:6e:40:26:c7:11:8d:e4:3f:a9:c7:43:
d0:46:d8:44:0a:57:41:e8:f5:49:c2:37:0a:0e:9e:
30:c7:ad:36:0c:6a:81:50:5d:71:1d:c3:63:a0:a1:
9e:ad:f5:e9:93:33:57:c2:1e:45:1e:7d:46:0b:6e:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:76:1A:4E:D1:89:B6:8D:F2:19:D7:8D:DD:3C:22:4D:7D:32:F0
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/cpF2Gk7RibaN8hnXjd08Ik19MvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.243.0/24
185.65.208.0/22
185.109.144.0/22
185.182.164.0/22
185.227.52.0/22
193.93.140.0/23
193.124.14.0/24
193.124.84.0/24
194.135.47.0/24
194.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f7:51:c9:5d:c8:39:0f:93:ae:a3:9f:b2:ef:b6:00:85:2f:
99:2d:cd:7d:06:2c:d9:af:9e:3c:25:21:39:51:05:38:b2:7a:
ff:d0:9d:bd:d0:69:3e:fe:e0:71:f2:e7:93:24:5f:8c:68:ef:
72:4c:c6:0c:6c:23:dc:3e:24:61:06:3b:3b:d3:d8:5d:0e:f8:
b3:5d:48:df:cc:37:7e:44:e7:95:0a:2f:9f:57:4d:e4:b5:fa:
4d:dc:1e:4b:f3:fa:5b:7d:15:a7:b1:b5:b3:e4:af:97:ab:cf:
34:64:27:b0:92:cb:71:56:39:4d:75:c9:9e:2c:43:7a:cc:00:
d6:e8:d4:03:8d:01:3c:95:0b:f6:0e:67:53:7f:9d:95:59:06:
de:06:16:23:be:91:f9:d6:1a:54:18:e9:95:58:03:4d:a0:ba:
f0:62:d6:78:34:bd:19:0f:61:25:ef:85:85:f8:7c:49:e9:ee:
64:50:68:bf:58:f0:12:98:8c:82:5a:72:70:0c:ee:80:ad:92:
53:ea:c7:2d:ee:fa:f0:2a:3e:9d:ba:81:d5:86:fa:32:c3:76:
89:23:78:63:7e:2e:a0:e1:89:6e:6e:aa:17:d2:d5:5d:8c:6e:
21:06:2b:f5:f7:e9:64:b9:26:bc:80:25:5c:eb:ca:8c:fd:82:
b5:41:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:17:05 2025 by rpki-client