Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Cha9nrf8IBfCRby8voqWH-Ccm7o.roa
File: Cha9nrf8IBfCRby8voqWH-Ccm7o.roa (raw, json)
Hash identifier: rf0jl+dzpAt5OVucdf1l0HdsQaCI29Gcui4bY2NVcxQ=
Subject key identifier: 0A:16:BD:9E:B7:FC:20:17:C2:45:BC:BC:BE:8A:96:1F:E0:9C:9B:BA
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 03CE52
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Cha9nrf8IBfCRby8voqWH-Ccm7o.roa
Signing time: Thu 09 Jun 2022 17:14:02 +0000
ROA not before: Thu 09 Jun 2022 17:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35539
IP address blocks: 93.123.160.0/20 maxlen: 20
93.123.176.0/21 maxlen: 21
46.160.224.0/21 maxlen: 21
95.131.208.0/21 maxlen: 21
93.95.160.0/21 maxlen: 21
46.160.232.0/21 maxlen: 21
93.123.224.0/19 maxlen: 19
46.160.240.0/21 maxlen: 21
93.123.128.0/17 maxlen: 17
46.160.248.0/21 maxlen: 21
93.123.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249426 (0x3ce52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jun 9 17:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a16bd9eb7fc2017c245bcbcbe8a961fe09c9bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:d1:0c:36:27:a8:38:5e:97:d7:72:76:97:
58:1f:8f:0b:ba:89:6d:33:2c:56:68:d4:6d:3a:19:
37:e9:3c:7a:d4:cb:8b:e1:ca:da:40:6d:88:72:3a:
89:97:dd:ac:be:b7:aa:c0:7f:14:05:d2:c9:e9:a6:
f8:f8:75:71:aa:dd:8a:24:52:73:ec:91:7f:8e:78:
7d:27:f2:2d:f4:58:63:79:4b:94:84:57:8a:27:4e:
19:5a:63:b8:fc:27:97:d9:66:37:db:67:af:4b:e3:
14:87:58:42:30:cb:b3:1e:6f:7c:e7:fc:16:ca:6e:
14:67:e1:07:c0:7d:80:8a:ff:4d:9a:8b:71:1a:cc:
07:7e:72:3c:96:f9:8f:40:f8:4e:10:6f:5c:f0:a8:
25:1f:82:54:e6:29:b0:ac:0f:22:69:b2:c0:72:9c:
a0:62:cd:12:59:30:09:93:23:1d:71:a8:dc:8e:c4:
e9:7e:dd:3f:92:d4:6d:18:c0:b7:08:97:5d:4f:fd:
e0:0e:a4:c7:80:14:0a:a2:e1:f3:be:92:5d:3d:65:
af:fa:ad:a6:bb:1f:f1:24:2a:3c:18:d1:05:24:d7:
7e:27:ca:d1:78:bb:92:6c:f3:3a:1a:a9:fb:ae:86:
27:ac:22:be:62:31:fd:fa:5d:29:a0:d0:8f:65:31:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:BD:9E:B7:FC:20:17:C2:45:BC:BC:BE:8A:96:1F:E0:9C:9B:BA
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Cha9nrf8IBfCRby8voqWH-Ccm7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.224.0/19
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
Signature Algorithm: sha256WithRSAEncryption
10:eb:cb:45:b7:ac:dd:e9:18:7c:1b:86:19:59:6a:6b:15:ed:
e4:ea:4e:86:47:8e:ad:7e:36:2c:72:3a:25:07:dd:2f:3e:d8:
4b:d5:bd:e8:8e:9e:8f:b5:08:07:be:55:89:c8:04:20:cb:58:
af:3c:b1:95:b1:b7:bb:48:8e:d4:78:45:a7:f0:c7:e3:56:67:
59:21:31:9b:38:e4:10:f9:6f:82:d6:52:42:b6:26:f7:ba:6c:
09:7e:f6:09:ad:36:44:c1:7b:f4:d2:c1:9b:0c:46:1e:cd:50:
ad:98:d2:52:e1:a7:1e:57:d3:9d:00:cd:5b:bc:43:d6:06:5c:
18:2e:9b:1c:ef:e9:32:d9:2f:ce:7a:25:9f:eb:e8:6e:23:4c:
93:40:56:74:5f:1e:35:e9:f0:89:44:0d:23:79:5a:9c:e0:ba:
9b:fc:0b:d5:29:95:0c:06:07:58:88:89:58:b7:0b:4b:fa:d8:
d3:f2:13:bc:cf:44:fb:4f:62:bd:53:ef:be:ae:66:f3:f3:44:
0a:a8:ea:21:73:25:9e:bd:7b:be:b5:ce:22:cc:8d:63:49:a5:
32:a9:22:23:3c:0c:2f:bc:00:b0:ff:12:c5:16:2a:ea:70:eb:
7a:77:73:82:6f:7d:58:69:d4:9e:fd:30:13:9a:bf:2a:42:37:
1b:0e:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:17 2025 by rpki-client