Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa
File: rt7vy1mZlE7UY27x-y6OKLIOBOg.roa (raw, json)
Hash identifier: EsMTeQr4k8MjfqZ7QmRxBV7MLZZ7pkC4zK0h88tIEVg=
Subject key identifier: AE:DE:EF:CB:59:99:94:4E:D4:63:6E:F1:FB:2E:8E:28:B2:0E:04:E8
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0182C9ED6981C1AAB25CE1A2570FEA116DDC
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa
Signing time: Tue 23 Aug 2022 08:59:15 +0000
ROA not before: Tue 23 Aug 2022 08:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9145
IP address blocks: 212.95.96.0/19 maxlen: 19
92.252.0.0/17 maxlen: 17
212.6.64.0/18 maxlen: 18
85.16.0.0/16 maxlen: 16
95.33.0.0/16 maxlen: 16
85.8.64.0/18 maxlen: 18
37.138.0.0/16 maxlen: 16
82.149.160.0/19 maxlen: 19
90.153.0.0/17 maxlen: 17
89.166.128.0/17 maxlen: 17
80.66.0.0/19 maxlen: 24
213.168.192.0/19 maxlen: 19
213.183.160.0/19 maxlen: 19
91.96.0.0/15 maxlen: 15
31.150.0.0/16 maxlen: 16
80.228.0.0/16 maxlen: 16
87.245.0.0/18 maxlen: 18
89.233.64.0/19 maxlen: 19
31.184.0.0/18 maxlen: 18
91.248.0.0/15 maxlen: 15
213.182.96.0/19 maxlen: 19
31.187.112.0/20 maxlen: 20
213.170.160.0/19 maxlen: 19
178.142.0.0/16 maxlen: 16
188.118.128.0/18 maxlen: 18
2a02:8200::/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:ed:69:81:c1:aa:b2:5c:e1:a2:57:0f:ea:11:6d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Aug 23 08:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aedeefcb5999944ed4636ef1fb2e8e28b20e04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:5b:19:a5:11:57:3e:79:e9:34:3e:b4:67:
34:7e:f2:cd:2e:ee:6a:88:93:78:d3:33:34:b9:ed:
ed:e4:d6:96:b7:14:17:d6:6c:e6:07:4b:78:80:9f:
98:9e:69:e0:fe:d4:44:36:58:c0:4f:0e:68:92:9e:
39:a0:30:eb:a0:7e:28:fa:1f:0e:dd:b6:92:52:24:
fa:4e:8d:58:f3:85:74:ae:13:53:c3:ae:0d:eb:25:
4b:a6:b5:c2:ae:b5:29:08:21:f2:de:21:44:ea:79:
a5:f5:d0:19:ed:13:c0:62:50:b6:0c:a0:3e:6f:37:
8e:af:ba:8b:eb:70:f1:27:91:6f:ca:b5:dc:e4:e1:
28:50:c6:ce:de:24:05:f0:65:e1:37:e4:63:09:5b:
7e:93:72:4a:83:45:ad:23:7d:a5:f3:e3:0f:ad:ea:
b1:29:de:cb:72:bd:0b:2f:3b:ef:c5:ba:2f:0c:4f:
14:5c:bc:78:a1:9a:87:2a:d2:55:c9:2f:4b:d6:3b:
ec:55:02:05:ed:cb:94:fd:c8:a2:8a:7d:b3:24:82:
dd:52:57:b3:48:12:24:c1:c8:e4:d4:78:b0:a2:6e:
29:17:d3:22:60:e5:b2:35:b0:a5:06:48:01:95:11:
cf:08:6a:b4:d4:67:98:81:69:3b:50:7c:6e:bc:50:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:EF:CB:59:99:94:4E:D4:63:6E:F1:FB:2E:8E:28:B2:0E:04:E8
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/rt7vy1mZlE7UY27x-y6OKLIOBOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
IPv6:
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
3d:10:76:a1:df:a4:9a:0c:79:bd:9e:25:75:61:2a:ea:67:6f:
c5:15:d6:27:ea:19:72:34:df:3d:15:95:fd:3e:bc:7a:c8:79:
48:0d:29:06:0d:65:89:f4:92:26:2b:f4:7f:00:bc:e7:df:86:
80:34:f8:d1:42:02:28:87:ac:ec:e2:cd:f8:7c:7a:e1:61:c5:
f6:5c:12:8b:23:3f:ff:d0:ea:dc:3a:9b:ad:2f:aa:b1:84:18:
ec:b6:0f:61:a3:a8:cd:01:8f:02:09:bf:b1:82:d4:5b:f9:d0:
d4:10:17:df:ec:4a:55:6c:7c:32:d2:d1:1e:bf:f4:af:38:85:
5a:56:76:56:b2:bc:2d:1e:48:1a:ec:24:ff:bd:85:19:74:00:
06:f0:6e:cd:17:d2:7a:83:ca:64:25:25:b2:81:c6:9a:f4:22:
3b:2c:d7:f3:f2:5b:c0:0c:90:b0:0f:2a:41:c9:53:5e:2a:2c:
fd:2c:c6:7c:ac:c8:5f:c5:c7:60:a2:84:fa:f3:7b:9f:43:45:
ef:8f:bf:b7:75:59:d2:12:3a:8e:66:c7:00:6a:f1:f6:53:29:
bd:d9:3d:5a:ed:7c:25:1c:ef:f8:32:ce:a3:f5:0d:b4:61:23:
36:33:a9:ed:c4:2b:9d:96:8d:d2:d9:59:bf:2f:ce:ff:43:cb:
a2:e2:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:23 2025 by rpki-client