Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9djuWOpLE6O0v4PA54PWvxWA_KQ.roa
File: 9djuWOpLE6O0v4PA54PWvxWA_KQ.roa (raw, json)
Hash identifier: sl9ObXGp8MYvUVVZmg5OimSq2n6HwtDojfQ3u1VyV28=
Subject key identifier: F5:D8:EE:58:EA:4B:13:A3:B4:BF:83:C0:E7:83:D6:BF:15:80:FC:A4
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 018A27614393CB533C6AB7FA07E186AF3A52
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9djuWOpLE6O0v4PA54PWvxWA_KQ.roa
Signing time: Thu 24 Aug 2023 11:50:00 +0000
ROA not before: Thu 24 Aug 2023 11:50:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8953
IP address blocks: 86.106.83.0/24 maxlen: 24
37.156.224.0/24 maxlen: 24
89.37.97.0/24 maxlen: 24
93.113.56.0/24 maxlen: 24
93.122.128.0/17 maxlen: 24
89.42.27.0/24 maxlen: 24
37.251.208.0/20 maxlen: 24
109.166.212.0/24 maxlen: 24
92.114.82.0/24 maxlen: 24
185.53.196.0/22 maxlen: 24
92.114.38.0/24 maxlen: 24
62.217.192.0/18 maxlen: 24
89.39.71.0/24 maxlen: 24
89.39.81.0/24 maxlen: 24
93.115.244.0/23 maxlen: 24
109.166.128.0/17 maxlen: 24
2a02:a58::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:61:43:93:cb:53:3c:6a:b7:fa:07:e1:86:af:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Aug 24 11:50:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5d8ee58ea4b13a3b4bf83c0e783d6bf1580fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:10:97:e0:31:cf:09:c4:b3:af:7b:5d:bb:
52:27:1d:d8:9b:ae:e2:d0:f2:8a:3c:dd:42:b0:b3:
84:10:78:cc:22:f3:db:e4:34:31:7d:7e:49:f8:eb:
38:97:f9:31:64:30:5b:3e:f5:f2:b3:e3:7e:75:e4:
c3:50:19:bf:28:26:f6:34:91:ba:8b:36:2c:9f:6e:
a9:73:7a:5b:0e:cf:f9:ab:69:18:a8:ce:c8:ca:50:
e2:4a:8c:e8:f0:ce:d6:ef:0d:75:bc:4c:81:05:47:
6b:17:90:6f:94:1b:1b:9f:85:55:bf:d3:4f:ec:d2:
74:bd:15:87:4f:a2:66:4c:8d:b4:90:b3:d6:01:8c:
6a:4e:cc:f9:59:33:4d:90:a8:8a:6b:f9:12:b9:a2:
ea:d4:9d:d8:2e:ba:cd:09:ca:92:99:28:bc:08:fe:
8b:f5:59:de:24:90:56:5e:e1:f5:9b:16:9b:69:80:
78:d0:ee:d0:a2:75:2c:64:4a:d9:1e:d0:64:73:2e:
96:a5:f3:52:fb:82:87:04:a6:f1:f6:db:53:90:fe:
15:68:6c:fe:34:1e:2a:86:42:4a:78:4a:80:6f:ba:
8a:45:f2:9b:3d:c7:79:1e:90:14:7c:90:7d:12:6a:
e2:af:b2:8d:c3:61:0a:69:27:ea:fb:89:e8:58:8b:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:EE:58:EA:4B:13:A3:B4:BF:83:C0:E7:83:D6:BF:15:80:FC:A4
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/9djuWOpLE6O0v4PA54PWvxWA_KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.224.0/24
37.251.208.0/20
62.217.192.0/18
86.106.83.0/24
89.37.97.0/24
89.39.71.0/24
89.39.81.0/24
89.42.27.0/24
92.114.38.0/24
92.114.82.0/24
93.113.56.0/24
93.115.244.0/23
93.122.128.0/17
109.166.128.0/17
185.53.196.0/22
IPv6:
2a02:a58::/32
Signature Algorithm: sha256WithRSAEncryption
4d:fb:ca:c6:68:50:87:52:80:c6:06:72:5c:a1:db:14:1e:bb:
c2:7b:f2:e9:d3:b7:b0:e2:64:ae:94:e6:a6:3e:9c:7b:2e:79:
54:6e:ac:83:b4:4d:1b:c4:ed:77:f4:a7:eb:f7:81:8c:7f:b9:
13:c3:2c:5c:dd:7a:65:61:55:56:7b:d4:6c:3d:46:fc:1a:e3:
8d:be:18:57:6b:96:bf:fc:98:0f:42:58:05:e4:3b:b3:af:24:
a2:18:3b:c1:b4:73:c6:10:86:a8:cc:a1:1d:c4:f6:76:ca:26:
36:3e:94:bb:af:e7:1c:35:8a:ab:5c:86:4b:66:6d:83:ef:c3:
4c:39:81:db:c5:eb:f6:07:63:01:5c:40:4d:88:a6:42:42:25:
ea:d8:16:b6:36:e0:a4:00:49:ec:05:f2:67:09:1c:bf:0a:3f:
3d:6b:9b:6b:88:85:fa:c7:4b:e8:8a:f1:b3:49:8f:0d:6d:e5:
86:cc:06:26:46:23:87:6c:4e:a1:b8:28:b5:40:02:c8:29:70:
aa:3f:e4:69:d4:d5:4c:d0:4e:45:f6:50:b6:f0:fe:b7:7e:51:
fc:79:f0:17:6d:67:80:03:68:aa:a0:e2:91:c3:e7:f2:ff:8e:
f1:a8:e1:7f:53:2c:61:48:00:02:1d:c3:23:3b:1a:e0:f2:9a:
3d:43:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:04:41 2025 by rpki-client