Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/porT2-Wr-WK3shxbHPiBdevJowI.roa
File: porT2-Wr-WK3shxbHPiBdevJowI.roa (raw, json)
Hash identifier: l/ycoEIIepZK9CcSjzDVSPqSZDtIbZXMmDOWoXWgwms=
Subject key identifier: A6:8A:D3:DB:E5:AB:F9:62:B7:B2:1C:5B:1C:F8:81:75:EB:C9:A3:02
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 0188D3D668F8EC0A0ED8C6FB1F119BF0748D
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/porT2-Wr-WK3shxbHPiBdevJowI.roa
Signing time: Mon 19 Jun 2023 13:27:04 +0000
ROA not before: Mon 19 Jun 2023 13:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8339
IP address blocks: 202.170.80.0/21 maxlen: 24
82.149.96.0/19 maxlen: 24
195.202.128.0/19 maxlen: 24
62.40.128.0/17 maxlen: 24
178.18.160.0/20 maxlen: 24
94.16.32.0/19 maxlen: 24
185.100.96.0/22 maxlen: 24
95.143.224.0/20 maxlen: 24
195.230.160.0/19 maxlen: 24
82.218.0.0/16 maxlen: 24
194.106.224.0/19 maxlen: 24
89.104.0.0/19 maxlen: 24
195.202.160.0/19 maxlen: 24
92.62.16.0/20 maxlen: 24
81.217.0.0/16 maxlen: 24
2a00:1b38::/32 maxlen: 32
2a02:e200::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:d6:68:f8:ec:0a:0e:d8:c6:fb:1f:11:9b:f0:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jun 19 13:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68ad3dbe5abf962b7b21c5b1cf88175ebc9a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:bd:14:67:28:5a:74:bd:30:14:a8:64:e4:
59:49:0c:df:b6:95:65:60:9d:71:72:70:f3:7b:a5:
38:e9:b4:d7:19:0f:be:71:0a:72:2b:a9:3b:c3:dc:
69:cd:51:8d:bb:ff:d0:8a:51:b9:00:cb:de:ca:14:
3c:2c:d6:00:56:32:4a:2d:6a:6f:43:f3:f9:c3:b7:
73:d0:31:10:31:bb:c9:10:56:b2:69:a6:a0:64:b4:
f7:42:22:2b:46:42:c4:b1:29:be:ac:30:82:ba:ca:
9a:ad:88:57:3c:64:88:90:d2:44:ab:8d:7e:e7:e2:
3f:2a:e6:a8:22:9c:87:f6:86:a2:40:a3:33:8f:22:
a4:9f:9e:00:1f:7d:73:4b:a9:e9:80:fa:f4:ca:ed:
2e:36:88:31:6c:f0:10:16:07:7b:5e:ea:2b:26:c6:
9a:3e:8e:de:b9:08:0e:32:be:a0:2b:30:f4:23:4b:
aa:5a:d4:c4:41:18:a3:74:84:ec:42:e1:e8:64:85:
4c:2f:a1:b9:12:d3:64:67:dd:78:99:76:ff:3c:e4:
71:ed:d4:84:d8:e2:77:e8:04:03:e2:03:77:1c:20:
2f:9d:d0:e2:5e:3f:ee:6a:5a:1f:ba:e7:c8:6e:54:
7f:37:db:8b:2b:2c:3e:36:b9:a3:40:4d:eb:7f:4c:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:D3:DB:E5:AB:F9:62:B7:B2:1C:5B:1C:F8:81:75:EB:C9:A3:02
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/porT2-Wr-WK3shxbHPiBdevJowI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.128.0/17
81.217.0.0/16
82.149.96.0/19
82.218.0.0/16
89.104.0.0/19
92.62.16.0/20
94.16.32.0/19
95.143.224.0/20
178.18.160.0/20
185.100.96.0/22
194.106.224.0/19
195.202.128.0/18
195.230.160.0/19
202.170.80.0/21
IPv6:
2a00:1b38::/32
2a02:e200::/30
Signature Algorithm: sha256WithRSAEncryption
a8:2a:41:1a:c8:4a:aa:19:ad:49:0d:e2:9b:8a:0b:0e:6c:ce:
06:f7:cb:7d:95:0d:84:ce:79:ac:42:63:c9:de:8d:b3:5e:ca:
fc:8a:e2:a2:44:d7:94:9e:f1:4a:fb:c9:db:64:7d:0e:08:14:
41:b1:37:f7:a0:bf:8a:10:3f:50:59:19:f4:b5:d2:7a:c2:c1:
fa:38:e4:11:d2:bf:20:da:0a:d5:22:b9:4a:21:fa:65:da:6e:
17:f2:a9:e6:4f:dc:bf:e2:3c:5d:9d:45:c2:54:4b:df:5b:08:
e7:df:e6:48:28:a0:04:49:41:6f:67:4f:02:6e:f2:c9:0e:3d:
c0:73:cc:49:29:16:4b:60:8b:16:56:0b:e1:30:e2:01:53:2b:
1b:b2:5c:1e:56:dc:43:bf:78:0f:f4:9f:7a:de:8f:c8:a2:c9:
3f:c1:c9:82:3d:c1:f6:de:bc:cf:46:4d:80:26:04:42:88:10:
0a:cc:f9:e5:d5:d3:d7:5d:79:32:6b:cb:99:29:8a:94:7c:c7:
75:0e:e7:f5:f8:02:c2:c1:1f:84:1a:cf:f6:d9:d1:de:fe:5e:
9c:ef:a1:df:29:79:15:11:a8:18:38:d1:4a:68:2c:4a:7f:49:
b4:7f:5c:71:70:f2:17:fe:af:a9:14:47:dc:2c:a3:d9:a6:3c:
b9:44:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:29:43 2025 by rpki-client