Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/4TWJo2cBzPYYAYiQ08VczOpTQ3o.roa
File: 4TWJo2cBzPYYAYiQ08VczOpTQ3o.roa (raw, json)
Hash identifier: HggthK2ORzoTj45g2X7Qb/SUmnZ6zN9qj+Y441HaPLk=
Subject key identifier: E1:35:89:A3:67:01:CC:F6:18:01:88:90:D3:C5:5C:CC:EA:53:43:7A
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01856EF0007AF8C5D458EA2DD70F5C9B881E
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/4TWJo2cBzPYYAYiQ08VczOpTQ3o.roa
Signing time: Sun 01 Jan 2023 20:05:00 +0000
ROA not before: Sun 01 Jan 2023 20:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 213.133.80.0/20 maxlen: 24
164.215.0.0/19 maxlen: 24
65.18.208.0/20 maxlen: 24
91.184.192.0/19 maxlen: 24
185.162.16.0/22 maxlen: 24
185.42.32.0/22 maxlen: 24
64.59.208.0/20 maxlen: 24
185.7.156.0/22 maxlen: 24
213.140.192.0/19 maxlen: 24
69.6.0.0/19 maxlen: 24
69.94.112.0/20 maxlen: 24
139.138.192.0/19 maxlen: 24
85.132.224.0/19 maxlen: 24
216.241.128.0/19 maxlen: 24
212.50.96.0/19 maxlen: 24
80.244.16.0/20 maxlen: 24
46.251.96.0/19 maxlen: 24
109.110.224.0/19 maxlen: 24
66.205.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f0:00:7a:f8:c5:d4:58:ea:2d:d7:0f:5c:9b:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 1 20:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e13589a36701ccf618018890d3c55cccea53437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:20:ba:4e:4e:80:e7:cf:b5:25:ed:10:7e:
0c:b1:e2:31:e5:52:1b:83:62:fe:65:0b:31:7c:d5:
d8:e0:18:64:51:ac:ee:9b:51:01:6f:9b:05:02:45:
38:e2:97:27:ca:1f:46:07:93:46:4a:48:9b:14:4e:
a9:3b:a2:73:da:34:b1:21:d7:5d:cb:75:c0:ba:d8:
25:5d:bc:a3:b1:5c:3c:39:21:be:3a:b6:dd:3b:1a:
09:81:75:ec:7e:2a:c6:92:65:42:4a:ac:b7:24:36:
1f:fb:ce:e0:3d:5c:33:79:2e:cb:51:2e:88:54:e9:
e5:fb:35:a6:2e:bc:d0:1e:1b:62:a3:11:2b:37:51:
30:ee:49:42:f4:4f:e8:c7:a6:bf:e3:b3:44:3a:91:
af:8a:2a:b5:fd:c5:fb:3c:1b:ac:77:d1:45:48:9a:
e3:d7:39:19:52:7f:b3:89:fc:ba:66:58:ac:76:8d:
3d:99:63:d9:3f:d2:a3:c0:96:d9:63:c4:ac:7d:51:
03:a1:b6:d2:10:2c:4d:4f:2a:46:91:6f:a0:e8:e9:
cf:3e:b6:4a:d5:47:ad:7f:61:df:13:06:1e:d5:24:
bc:8c:81:9e:a3:71:77:89:ad:ad:7d:22:eb:51:53:
8b:b7:99:b3:be:26:ba:de:5c:3d:4a:21:e5:b4:2e:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:89:A3:67:01:CC:F6:18:01:88:90:D3:C5:5C:CC:EA:53:43:7A
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/4TWJo2cBzPYYAYiQ08VczOpTQ3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.96.0/19
64.59.208.0/20
65.18.208.0/20
66.205.64.0/19
69.6.0.0/19
69.94.112.0/20
80.244.16.0/20
85.132.224.0/19
91.184.192.0/19
109.110.224.0/19
139.138.192.0/19
164.215.0.0/19
185.7.156.0/22
185.42.32.0/22
185.162.16.0/22
212.50.96.0/19
213.133.80.0/20
213.140.192.0/19
216.241.128.0/19
Signature Algorithm: sha256WithRSAEncryption
78:c5:a2:57:15:b6:60:ad:bc:7d:7c:bb:f8:92:ae:9a:89:f7:
b4:f9:90:d5:52:52:b2:e5:5e:1c:0d:8a:5f:e6:fc:11:ba:da:
ab:b3:6e:0c:01:9b:13:87:a7:40:2f:16:64:dc:65:1c:d4:2f:
90:42:b0:12:4e:8b:64:41:d1:5f:47:9f:84:e0:5c:5d:50:6f:
20:d7:49:ca:4d:6d:45:32:9a:09:a7:f4:c2:2a:70:47:9e:f7:
32:74:4e:38:65:a1:6d:70:45:eb:62:f5:78:36:a8:10:67:cb:
ed:4b:58:ad:d2:b9:4b:ef:c4:0e:3a:db:95:9e:d6:cc:d3:52:
ae:db:5d:9c:de:f0:6a:12:63:12:35:30:c6:0b:2d:d3:bd:92:
b6:df:0b:e6:44:b2:c2:24:e1:f9:a5:7f:a0:1b:ab:b2:ee:32:
28:92:82:66:fe:97:43:7f:89:80:fb:32:32:cc:81:f4:6d:f2:
5c:7f:b5:eb:a9:be:c2:63:fb:0d:57:91:88:48:0d:09:31:1d:
6c:29:24:f7:15:73:dc:7a:bc:50:d4:62:3a:47:fc:01:46:21:
b4:dd:32:14:7c:51:54:22:ce:08:97:6f:4a:4e:6c:60:82:ac:
98:53:72:92:94:9d:0f:2e:f1:b0:81:17:4f:20:fa:a3:10:15:
6b:c3:fc:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:33 2025 by rpki-client