Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/T1jsJ660HZBZOs_MS6A_vv3XpMg.roa
File: T1jsJ660HZBZOs_MS6A_vv3XpMg.roa (raw, json)
Hash identifier: mQ0YdrFc7q6P/w2AX+PSo9bfG02647ni7Fr0nY/twA4=
Subject key identifier: 4F:58:EC:27:AE:B4:1D:90:59:3A:CF:CC:4B:A0:3F:BE:FD:D7:A4:C8
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 0185711547EC402C8A11A5722DF7FEB4D08F
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/T1jsJ660HZBZOs_MS6A_vv3XpMg.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59847
IP address blocks: 5.149.89.0/24 maxlen: 24
5.149.88.0/23 maxlen: 23
5.149.88.0/24 maxlen: 24
5.149.91.0/24 maxlen: 24
5.149.90.0/23 maxlen: 23
5.149.90.0/24 maxlen: 24
185.69.28.0/22 maxlen: 22
185.69.28.0/24 maxlen: 24
185.69.30.0/24 maxlen: 24
185.69.29.0/24 maxlen: 24
185.69.31.0/24 maxlen: 24
109.94.104.0/24 maxlen: 24
109.94.105.0/24 maxlen: 24
109.94.107.0/24 maxlen: 24
109.94.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:47:ec:40:2c:8a:11:a5:72:2d:f7:fe:b4:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f58ec27aeb41d90593acfcc4ba03fbefdd7a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:ee:b0:78:30:8f:78:4a:1f:56:25:a3:d6:
aa:03:4c:b7:de:b4:fc:60:08:fb:7f:81:ed:fd:84:
57:f8:3b:16:3f:e0:1b:2d:db:d2:b3:36:22:b2:45:
82:cd:79:72:4c:95:e7:93:0f:45:de:4d:62:1f:07:
aa:24:57:c0:5b:9f:3d:4a:5b:b2:26:53:18:9b:36:
2d:6d:ec:79:5d:9c:99:b0:77:89:64:28:80:3b:ac:
3d:9b:36:2f:98:5c:f2:0f:eb:43:1a:fa:dc:13:29:
48:3e:52:4c:ff:36:bb:e4:45:3d:96:47:35:7b:15:
26:a1:d1:d1:67:30:40:7a:dc:ae:83:5c:f0:80:de:
0c:76:6e:e3:6f:28:f3:7e:25:4c:42:89:10:c0:10:
fe:da:55:f2:c1:a0:b4:6e:ab:db:e7:9b:79:cd:80:
da:5d:a8:ae:a5:58:a7:6d:ab:bf:4b:97:72:1c:a0:
a2:ea:8d:2e:ab:c9:18:13:aa:a9:a1:5a:c6:5e:93:
29:1a:fb:0f:a4:6b:de:f7:91:4d:5e:26:72:d9:6d:
bd:d2:15:c2:77:13:58:39:d6:d9:6d:86:cf:87:b7:
5f:fa:5e:e5:9c:2b:03:16:b2:ce:4a:12:5a:64:e2:
15:4b:0f:06:15:d2:90:10:19:d0:2b:01:eb:bf:7f:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:EC:27:AE:B4:1D:90:59:3A:CF:CC:4B:A0:3F:BE:FD:D7:A4:C8
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/T1jsJ660HZBZOs_MS6A_vv3XpMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.88.0/22
109.94.104.0/22
185.69.28.0/22
Signature Algorithm: sha256WithRSAEncryption
66:7d:bc:dd:75:62:9e:82:a3:6c:33:63:84:01:41:03:70:1e:
dd:2f:ec:dd:9d:cf:dd:b8:55:3e:8b:d6:79:0a:08:eb:dc:1d:
75:4b:69:be:3e:19:61:ea:a9:a6:ee:63:b1:22:43:2d:f2:70:
c5:3a:56:df:76:92:5c:f1:24:1d:ce:d7:23:1f:0d:d9:0f:2e:
2e:da:b3:ea:ce:b9:ce:40:9d:38:3f:16:fe:03:c1:5c:e4:85:
6e:66:4e:c9:31:ee:e9:17:c7:e9:39:c9:ba:88:8e:99:8c:b9:
22:74:72:91:31:3f:e9:5e:af:25:bf:c0:f1:a3:fc:a7:bc:19:
36:e8:78:f9:dc:78:89:0d:87:02:6a:d5:1a:82:66:f8:88:09:
4e:39:d4:47:6b:8e:22:ae:cf:6c:29:96:ed:ba:22:5e:25:0a:
b8:34:30:6f:d1:15:96:1a:e2:33:cc:ee:63:d1:a4:01:e6:e1:
b9:c7:d0:7b:04:38:b6:a1:a0:14:8e:34:ae:98:83:bf:3a:20:
02:0d:00:19:ed:63:48:16:21:1e:a2:e3:87:3c:36:ed:b0:1d:
86:ed:2c:1e:eb:1f:75:ec:f5:bc:ea:23:f7:76:46:4e:2f:14:
19:b2:fa:cf:6a:21:00:23:ec:68:89:71:be:87:55:10:63:95:
9f:a8:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:02 2025 by rpki-client