Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/XozeUa-zvCjARBh_i3WFIDVidlE.roa
File: XozeUa-zvCjARBh_i3WFIDVidlE.roa (raw, json)
Hash identifier: uYKpoPbip7vtQ5iCVmCXJLCpVmL9ngajI3I6EFqSJgI=
Subject key identifier: 5E:8C:DE:51:AF:B3:BC:28:C0:44:18:7F:8B:75:85:20:35:62:76:51
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 16221F93
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/XozeUa-zvCjARBh_i3WFIDVidlE.roa
Signing time: Sat 01 Jan 2022 06:57:18 +0000
ROA not before: Sat 01 Jan 2022 06:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42863
IP address blocks: 188.140.0.0/17 maxlen: 24
83.223.224.0/19 maxlen: 24
92.250.0.0/17 maxlen: 24
46.50.0.0/17 maxlen: 24
95.69.0.0/17 maxlen: 24
89.214.0.0/16 maxlen: 24
185.92.96.0/22 maxlen: 24
31.22.128.0/17 maxlen: 24
88.214.128.0/18 maxlen: 24
2a02:870::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371335059 (0x16221f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jan 1 06:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e8cde51afb3bc28c044187f8b75852035627651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:13:9d:c6:ee:a9:5e:fc:ee:c7:f7:7c:40:
18:79:52:b5:2c:06:93:c4:56:25:4f:c8:c8:f2:a4:
10:9a:d5:58:29:71:94:98:b2:4f:0e:05:b8:46:52:
1f:7c:3f:71:06:1a:c5:0d:e6:92:46:4f:88:61:3e:
21:84:f8:c1:49:bd:10:eb:d4:1c:8f:2b:f1:e9:b6:
c8:1c:3d:25:db:f6:87:7d:bd:92:5a:1d:a1:75:ec:
6b:62:85:8c:da:b4:3a:6e:15:c9:6e:07:15:95:07:
b4:d8:be:f7:a5:57:29:9a:90:d3:3b:de:63:8a:43:
2f:23:f6:ee:ab:97:7e:3c:ba:82:3b:33:8d:31:97:
07:50:ec:ce:63:33:0b:1f:c9:8d:ba:bc:81:69:d2:
38:51:6a:ff:88:b1:cd:1e:82:30:8f:03:2b:45:77:
d1:00:ce:00:c6:95:6c:8b:01:8b:6d:84:de:65:29:
62:04:1b:25:f9:17:f3:e3:20:19:5a:bb:d5:05:26:
df:af:b5:1e:ef:67:c7:9a:0e:c5:ae:5c:2f:0c:bd:
4b:0d:12:66:3a:8c:11:16:20:55:57:18:32:82:c5:
fd:01:8d:d3:29:25:bb:1e:0a:8d:c9:d2:bb:9d:29:
1f:ca:7d:32:e6:8e:fc:71:c0:37:e3:da:a5:fb:3f:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:DE:51:AF:B3:BC:28:C0:44:18:7F:8B:75:85:20:35:62:76:51
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/XozeUa-zvCjARBh_i3WFIDVidlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.128.0/17
46.50.0.0/17
83.223.224.0/19
88.214.128.0/18
89.214.0.0/16
92.250.0.0/17
95.69.0.0/17
185.92.96.0/22
188.140.0.0/17
IPv6:
2a02:870::/32
Signature Algorithm: sha256WithRSAEncryption
a1:dd:b0:92:d0:41:05:ff:f9:f9:7a:02:47:ce:c5:02:e4:d6:
06:7f:3c:49:56:16:c7:32:ea:9d:5f:10:7b:de:ce:d1:c8:2b:
09:ec:3e:47:be:75:cb:c0:e5:b1:ef:c5:b5:f5:0d:ed:6f:04:
80:85:b4:16:5d:ba:ec:2c:d0:3e:b3:4b:4c:d2:20:c7:e5:30:
f6:11:cf:11:18:30:0a:09:5f:fb:8e:cb:c2:b8:33:11:c7:1f:
71:15:69:74:8d:e6:48:f2:e2:62:39:09:3e:ea:a8:bb:30:7a:
7d:9f:02:db:8f:7c:0d:20:8c:05:4b:46:87:c8:60:14:56:ca:
ff:62:af:85:ab:36:11:df:78:c7:d5:71:8c:75:fb:5e:c0:f3:
d3:9d:9a:80:a1:03:98:da:36:d3:49:6f:cb:ff:7d:68:1b:19:
f1:88:09:06:7d:75:d8:d0:c4:73:7e:27:58:a6:ea:c9:49:32:
2e:b2:99:08:c9:25:98:1d:3b:3e:f4:3f:86:87:1f:dc:2f:5d:
16:29:0f:87:20:1d:0c:e6:c2:ed:20:3e:b7:66:b7:6f:73:f3:
04:31:03:24:de:50:52:c2:f0:47:e0:d0:76:66:b4:a2:4a:a4:
2c:16:1b:2e:65:d3:45:49:ef:c3:42:70:3c:6f:2f:ab:81:d8:
24:92:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:34 2025 by rpki-client