Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/pAb7ssGBbdpBgFjFPC3aK6O7DkE.roa
File: pAb7ssGBbdpBgFjFPC3aK6O7DkE.roa (raw, json)
Hash identifier: 021zV/FRQFwDd9bJ2o9uuVGno0Lyinr4tSoWsOh7iTw=
Subject key identifier: A4:06:FB:B2:C1:81:6D:DA:41:80:58:C5:3C:2D:DA:2B:A3:BB:0E:41
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 0596A317
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/pAb7ssGBbdpBgFjFPC3aK6O7DkE.roa
Signing time: Sat 01 Jan 2022 03:52:51 +0000
ROA not before: Sat 01 Jan 2022 03:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 213.133.80.0/20 maxlen: 24
164.215.0.0/19 maxlen: 24
65.18.208.0/20 maxlen: 24
91.184.192.0/19 maxlen: 24
185.162.16.0/22 maxlen: 24
185.42.32.0/22 maxlen: 24
64.59.208.0/20 maxlen: 24
185.7.156.0/22 maxlen: 24
213.140.192.0/19 maxlen: 24
69.6.0.0/19 maxlen: 24
69.94.112.0/20 maxlen: 24
139.138.192.0/19 maxlen: 24
85.132.224.0/19 maxlen: 24
216.241.128.0/19 maxlen: 24
212.50.96.0/19 maxlen: 24
80.244.16.0/20 maxlen: 24
46.251.96.0/19 maxlen: 24
109.110.224.0/19 maxlen: 24
66.205.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93758231 (0x596a317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 1 03:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a406fbb2c1816dda418058c53c2dda2ba3bb0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:82:50:4b:6a:7d:c3:22:85:f7:12:29:0f:
4d:f6:06:31:6b:8c:74:f9:66:98:87:53:ed:44:a6:
8a:0c:2a:97:3a:ea:3d:e5:34:55:a9:82:6e:34:41:
d8:63:9b:87:fc:c9:33:4e:46:57:8c:07:75:ea:e2:
ca:fa:09:ed:69:19:14:a2:fc:a1:0c:b6:8e:79:f2:
21:ad:49:46:ea:c2:3b:c8:86:96:39:6b:fd:f2:36:
41:61:6c:8e:a0:de:61:f3:25:5d:d9:3a:6f:85:e7:
56:2e:08:01:df:86:a5:28:67:d3:a2:49:ef:0e:cb:
5c:c0:bd:1c:20:75:22:87:90:8a:a3:7f:d0:8d:66:
ec:77:b2:ae:4e:7f:53:db:16:d8:51:c3:a4:ac:01:
f7:8b:06:ec:6d:c9:4c:b9:77:84:7b:e0:38:2d:19:
b6:ea:5e:b4:c3:8a:8c:08:b6:a5:8e:61:e5:04:fd:
92:76:11:f7:a0:27:d3:a4:ad:5a:7a:6c:2b:0c:b1:
f8:a2:99:c6:6b:30:ef:0c:84:31:92:7e:a0:20:95:
2b:50:cf:88:2f:bf:80:9f:3c:4b:f3:60:16:48:2d:
1c:d2:6a:28:c5:db:1d:45:6f:cc:4a:9d:77:73:0c:
db:f0:0e:98:13:45:78:b9:d8:95:a3:bd:9a:e9:18:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:FB:B2:C1:81:6D:DA:41:80:58:C5:3C:2D:DA:2B:A3:BB:0E:41
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/pAb7ssGBbdpBgFjFPC3aK6O7DkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.96.0/19
64.59.208.0/20
65.18.208.0/20
66.205.64.0/19
69.6.0.0/19
69.94.112.0/20
80.244.16.0/20
85.132.224.0/19
91.184.192.0/19
109.110.224.0/19
139.138.192.0/19
164.215.0.0/19
185.7.156.0/22
185.42.32.0/22
185.162.16.0/22
212.50.96.0/19
213.133.80.0/20
213.140.192.0/19
216.241.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:8a:58:ae:c0:69:7c:9b:21:27:80:d4:55:91:63:e9:c0:a1:
bb:92:1e:e7:ad:87:24:9f:db:55:c1:5b:ee:ee:d3:5e:34:87:
ca:7d:60:3d:7c:67:87:08:56:76:60:41:82:0b:77:c4:9f:6c:
ec:df:fa:92:eb:2c:f0:a7:98:6f:47:a8:e5:10:3a:bb:ff:42:
67:41:de:e7:e1:e3:4c:2c:80:ca:10:53:48:66:43:a3:21:53:
14:d9:c2:ca:c1:be:9f:42:78:83:f6:2e:89:10:b7:45:ca:db:
0a:48:5c:48:d5:22:8a:85:b6:54:7b:3d:8a:7e:cb:54:04:64:
9f:33:e1:21:47:d9:99:59:30:3c:49:6b:18:fc:74:84:56:57:
ed:29:0b:8e:30:21:a0:3a:2b:50:86:20:26:45:11:ce:44:84:
b5:63:8f:9d:43:be:75:ee:6b:da:af:67:08:da:7d:b5:bb:6d:
db:72:98:3c:c0:6c:9f:18:89:db:35:22:a4:0d:2c:74:be:ad:
b2:1a:55:97:18:4b:a5:4c:50:35:46:dc:fe:c8:30:df:a3:b2:
39:e9:d4:69:1f:11:80:40:75:ce:34:06:3f:55:91:49:84:29:
b9:79:01:a2:eb:a5:13:78:08:32:1a:07:e5:c2:d8:0d:36:40:
c2:aa:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:56 2025 by rpki-client