Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/tH7QfjPYpEAau-Bn9t2qAv_fFBM.roa
File: tH7QfjPYpEAau-Bn9t2qAv_fFBM.roa (raw, json)
Hash identifier: 8fhHvaLyswJICCCr0+thXx5OlP4tA7XtP8q28QxjHjQ=
Subject key identifier: B4:7E:D0:7E:33:D8:A4:40:1A:BB:E0:67:F6:DD:AA:02:FF:DF:14:13
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 0971933B
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/tH7QfjPYpEAau-Bn9t2qAv_fFBM.roa
Signing time: Sat 01 Jan 2022 12:55:33 +0000
ROA not before: Sat 01 Jan 2022 12:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29644
IP address blocks: 178.250.112.0/21 maxlen: 24
77.75.96.0/21 maxlen: 24
185.51.104.0/22 maxlen: 24
31.193.216.0/21 maxlen: 24
2a03:5f00:104::/48 maxlen: 48
2a03:5f00:107::/48 maxlen: 48
2a03:5f00:102::/48 maxlen: 48
2a03:5f00:105::/48 maxlen: 48
2a03:5f00::/32 maxlen: 32
2a03:5f00:108::/48 maxlen: 48
2a03:5f00:1000::/48 maxlen: 48
2a03:5f00:103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158438203 (0x971933b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jan 1 12:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b47ed07e33d8a4401abbe067f6ddaa02ffdf1413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:3f:b8:7e:75:52:c4:91:73:82:f2:eb:1f:
be:a8:16:46:62:ac:bd:1c:2f:06:59:75:c6:2e:cf:
9d:a2:24:a8:03:93:51:aa:39:72:43:aa:0f:9c:70:
ae:f0:48:20:02:8d:48:13:40:cc:74:9c:a4:63:e7:
26:4f:c4:21:b0:91:bd:3b:c0:03:f6:72:7e:25:49:
62:d8:02:92:d4:88:a0:d1:21:21:e8:91:74:65:75:
e9:e1:46:2f:3d:1b:9b:fa:c9:4e:cc:0a:de:be:d1:
f2:02:37:64:30:2b:d3:de:65:ec:13:cd:40:13:75:
34:71:6a:6c:33:1a:55:8f:f1:be:5d:dd:c3:21:99:
fd:e1:4a:40:e0:f7:68:28:ce:3e:02:61:cb:70:58:
0e:e7:1b:f2:63:a3:75:03:6b:84:4e:23:c7:7d:db:
ed:ee:1b:8a:52:6a:2f:47:f4:f0:76:95:7e:4e:20:
86:96:dc:c5:c2:17:0c:17:d6:52:6e:31:35:40:87:
0e:80:c3:73:27:9c:75:99:94:32:3d:bf:36:dd:29:
d0:19:00:c7:63:2a:0e:23:e2:39:09:2a:e9:b9:a2:
af:19:5f:77:f7:58:47:94:30:c4:34:6d:90:61:1c:
61:ab:d8:d5:19:ee:ce:22:cf:07:c5:a4:e2:6e:93:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:D0:7E:33:D8:A4:40:1A:BB:E0:67:F6:DD:AA:02:FF:DF:14:13
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/tH7QfjPYpEAau-Bn9t2qAv_fFBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.216.0/21
77.75.96.0/21
178.250.112.0/21
185.51.104.0/22
IPv6:
2a03:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
47:15:b9:0a:12:c2:7c:92:1b:d2:27:77:c5:0d:1c:33:b4:2f:
b4:b1:e9:33:99:f8:5a:24:67:93:92:a8:de:93:af:03:a7:62:
8b:8d:e2:3f:00:5d:86:ba:dd:02:d6:fb:75:c8:fb:9a:c8:3a:
f6:5a:09:d4:dd:5a:2e:b9:4b:ce:e1:65:e8:ce:73:a3:06:0c:
b8:11:c4:97:94:8c:a6:25:88:15:0f:5e:25:4b:8e:c4:7a:50:
3f:fa:72:f5:b8:81:87:3f:85:ca:50:e7:23:d4:9b:43:52:ba:
f5:88:ce:b6:f8:af:ec:91:6c:b6:cf:2a:2f:f6:83:71:b8:35:
b4:46:63:bc:f2:b5:bb:c8:7b:bc:3c:34:e0:de:c9:c1:28:fb:
0b:1f:54:04:29:4b:a2:37:75:14:a1:24:f7:72:d4:fe:d3:58:
e1:38:1a:61:19:2e:b2:ab:f4:85:68:eb:d2:5b:5d:a7:8a:de:
1f:4c:87:34:b1:50:61:74:e3:54:44:5a:9d:7a:bf:e4:c8:09:
15:dd:dd:4d:79:b6:66:8f:35:0c:24:77:94:c6:5c:6d:21:bb:
22:af:26:21:80:fa:d8:d3:2a:48:f8:10:8f:c2:58:68:5c:d1:
ed:fb:10:5d:96:a5:5b:1b:5f:0c:5d:f0:8d:6b:ba:fd:1c:c8:
fb:3a:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:27 2025 by rpki-client