Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jR1jy_h6uoLEHoncf23AJQybgmM.roa
File: jR1jy_h6uoLEHoncf23AJQybgmM.roa (raw, json)
Hash identifier: FwmeSBhLbZle+2JEvkie1uhn40yhpHc//sKzzPP/s9E=
Subject key identifier: 8D:1D:63:CB:F8:7A:BA:82:C4:1E:89:DC:7F:6D:C0:25:0C:9B:82:63
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 07D2DABB
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jR1jy_h6uoLEHoncf23AJQybgmM.roa
Signing time: Wed 15 Jun 2022 13:10:44 +0000
ROA not before: Wed 15 Jun 2022 13:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/22 maxlen: 22
2a0d:4a40::/29 maxlen: 29
2a04:27c0::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131259067 (0x7d2dabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 15 13:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d1d63cbf87aba82c41e89dc7f6dc0250c9b8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:e3:e9:1b:f7:2e:ac:3a:26:c5:9a:75:75:
cb:04:f9:0e:56:b5:c1:c8:90:d7:ea:10:a6:ff:e1:
6c:df:bb:16:80:80:74:4f:9a:bd:c3:7d:ae:74:fe:
04:c8:15:25:0a:89:8c:9d:f6:78:1a:46:4d:6f:c8:
b7:c4:c3:72:af:2f:2c:14:5b:97:f8:0e:05:fc:a8:
3b:1e:93:ab:6e:47:77:28:dc:9a:8c:50:91:5b:96:
c9:d9:4a:19:15:84:48:9c:d4:e7:bf:16:ed:52:ad:
4a:5f:93:8e:76:d3:9d:97:05:7b:ce:e8:3b:08:cd:
53:71:f1:53:dc:c7:aa:7d:e4:31:fe:d8:5d:93:23:
64:25:9b:0b:b7:ec:44:a1:35:b6:83:3e:c7:62:96:
06:dd:e4:15:0b:cc:4c:a4:1b:ca:78:bd:fb:f7:38:
7c:16:54:c9:d1:fb:1d:8c:75:06:0c:98:11:a4:b7:
e7:73:f4:b0:8a:8b:20:fd:a9:b8:c6:a9:2f:57:15:
bd:9e:9c:b7:0b:fa:f3:8b:30:d5:3c:1b:8f:a3:35:
58:75:f8:83:b4:1d:71:54:9b:12:15:e6:f5:55:17:
b5:be:cd:9a:57:30:0c:d6:e7:39:46:54:96:27:82:
08:be:ff:80:69:61:3b:88:99:ab:bc:c0:25:1c:28:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:63:CB:F8:7A:BA:82:C4:1E:89:DC:7F:6D:C0:25:0C:9B:82:63
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jR1jy_h6uoLEHoncf23AJQybgmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0/22
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:1c:d9:50:67:c9:38:b4:7a:32:2d:4b:89:e5:08:79:bf:87:
76:a4:17:f5:cd:e0:11:9b:ac:83:1b:4a:af:61:9f:14:15:fb:
ba:0b:ae:81:61:48:bd:0c:3d:91:fe:56:ab:a5:70:6c:83:7d:
32:d9:aa:b2:7f:b0:c9:30:59:c5:3e:9a:13:a3:03:c7:0e:48:
0c:00:30:b5:bc:b8:6d:73:b4:d0:cf:8d:cf:58:6c:e3:0f:44:
03:ce:31:66:ae:d5:2c:c8:99:3e:31:3c:c2:8e:5f:24:9c:9b:
95:63:a0:06:f2:2a:cc:40:2b:81:43:1e:22:45:eb:25:54:9a:
ac:5b:c7:a1:23:8b:32:77:65:26:3b:52:46:68:e9:26:ba:83:
fb:a9:2d:48:6e:f8:9f:fc:47:67:6a:42:e7:c2:e5:3c:68:1c:
93:7a:16:a0:fb:48:06:22:70:8c:73:14:f6:6e:ec:ab:4b:9e:
92:55:88:6f:c7:61:97:f5:27:9c:90:87:54:0d:81:58:29:ba:
63:fa:96:15:4c:5b:ad:61:44:b4:08:91:c9:41:13:e7:c1:b7:
33:07:9c:8d:cd:1f:fe:7e:95:fc:40:11:a4:9b:b9:b8:88:51:
6d:a3:4c:3d:cd:92:c0:25:12:8b:0f:ae:d8:31:d7:f0:dd:89:
d8:3a:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:14 2025 by rpki-client