Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/gYq7K8negnlkNrc9cvQM0mj_ioU.roa
File: gYq7K8negnlkNrc9cvQM0mj_ioU.roa (raw, json)
Hash identifier: OmgCHaqBDGsjlgXjtbYpIm+l3YauA5lZm1Xf/VFUR3I=
Subject key identifier: 81:8A:BB:2B:C9:DE:82:79:64:36:B7:3D:72:F4:0C:D2:68:FF:8A:85
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 01856D8AEF18C7359CF511DFAF4B9545B2A7
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/gYq7K8negnlkNrc9cvQM0mj_ioU.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199758
IP address blocks: 91.132.252.0/23 maxlen: 23
91.132.252.0/22 maxlen: 22
91.132.254.0/23 maxlen: 23
195.13.51.0/24 maxlen: 24
195.14.7.0/24 maxlen: 24
195.13.47.0/24 maxlen: 24
185.46.230.0/23 maxlen: 23
185.46.228.0/22 maxlen: 22
185.46.228.0/23 maxlen: 23
185.153.10.0/23 maxlen: 23
185.153.8.0/22 maxlen: 22
185.153.8.0/23 maxlen: 23
2a01:8760::/32 maxlen: 32
2a03:ac60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ef:18:c7:35:9c:f5:11:df:af:4b:95:45:b2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818abb2bc9de82796436b73d72f40cd268ff8a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:e8:4e:bc:1c:2c:c6:d5:12:2e:07:9a:6f:
8b:c4:98:0a:39:35:f0:76:2c:78:dc:9d:07:b2:ea:
76:a2:0e:7d:e4:20:bf:16:88:65:2e:9b:25:92:94:
55:15:06:3d:28:22:a4:c3:7a:39:a8:42:09:d9:c2:
ae:ee:fb:9e:6e:75:0e:b3:5d:b9:59:9d:c4:33:9f:
99:48:7a:d0:27:84:84:1b:78:51:8f:bb:a7:9e:ef:
30:08:f2:4a:ae:2c:c3:d6:f7:fe:dd:d5:57:40:47:
80:76:24:b0:24:66:dd:9f:6f:5c:b0:ef:23:2d:28:
33:c6:f2:10:db:8b:84:23:4a:69:8c:6a:7e:9b:8e:
83:91:7b:3d:92:c1:bf:6b:5b:d8:e6:ec:a1:79:0e:
0d:c1:9c:ce:74:c3:4e:3c:9d:2b:1f:3d:87:ce:a2:
a2:1a:b6:bd:37:29:36:b4:4a:33:1d:29:52:6b:9e:
7c:21:c6:b7:39:2c:78:40:32:53:e0:d6:77:0f:21:
f9:e3:d7:c5:2b:26:ff:4d:57:d4:fc:16:65:83:7c:
ff:70:93:4a:d8:c6:11:5f:39:dc:6a:be:32:78:c1:
d2:39:a0:5b:5d:c8:a1:aa:b3:24:cf:cc:3e:5f:47:
7b:03:0b:fb:1a:b4:87:cc:dd:b9:01:29:c6:91:f5:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:BB:2B:C9:DE:82:79:64:36:B7:3D:72:F4:0C:D2:68:FF:8A:85
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/gYq7K8negnlkNrc9cvQM0mj_ioU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.252.0/22
185.46.228.0/22
185.153.8.0/22
195.13.47.0/24
195.13.51.0/24
195.14.7.0/24
IPv6:
2a01:8760::/32
2a03:ac60::/32
Signature Algorithm: sha256WithRSAEncryption
7c:34:4f:c4:14:de:72:11:57:64:d1:55:30:78:de:92:63:a3:
44:e5:08:cb:e0:8f:e8:73:58:ce:2a:06:f5:f3:9c:76:f0:5d:
6e:7c:1c:97:85:be:9b:5a:ea:32:d5:da:78:16:38:b7:1d:dc:
4e:b0:0a:5f:8c:75:5a:af:8f:88:37:b5:4b:0f:37:1a:dc:b3:
9b:2c:17:40:46:ae:9c:9d:11:5f:98:39:99:18:69:b9:4b:86:
fe:10:27:11:a8:b5:e7:c7:1f:b0:f0:d4:70:5b:0a:96:6d:e9:
44:aa:18:fd:bc:43:2b:17:58:ba:8a:31:5b:25:d7:f1:31:6f:
68:25:39:83:ef:1f:3f:56:7e:57:c7:7a:24:df:be:8c:fa:ed:
01:59:50:4b:97:ef:4c:49:02:42:aa:ef:1d:3f:73:b3:3a:f8:
09:22:04:8c:c1:ed:f8:82:4b:5f:cb:85:71:27:dd:77:f0:95:
81:5d:bd:31:09:94:a1:d6:23:5c:ee:28:57:a1:7d:8f:26:db:
2c:95:21:51:8e:b5:d3:e0:21:66:55:ca:a6:74:ee:ca:f0:ff:
6e:7f:10:7e:62:8e:20:f1:d1:b3:87:94:4f:72:97:05:96:39:
ec:85:23:36:a9:6a:26:8a:65:ce:b2:75:f5:1d:c5:07:af:81:
7a:78:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:19:33 2025 by rpki-client