Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/MZqs0XhItjn_G9pZew0OSMTqHAw.roa
File: MZqs0XhItjn_G9pZew0OSMTqHAw.roa (raw, json)
Hash identifier: PPAOLyr00rwC+ixLqIRJjnyjrs4nfM8wRVkM+z3sec4=
Subject key identifier: 31:9A:AC:D1:78:48:B6:39:FF:1B:DA:59:7B:0D:0E:48:C4:EA:1C:0C
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 16A14CA1
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/MZqs0XhItjn_G9pZew0OSMTqHAw.roa
Signing time: Sat 01 Jan 2022 07:03:48 +0000
ROA not before: Sat 01 Jan 2022 07:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8469
IP address blocks: 195.82.80.0/24 maxlen: 24
5.61.80.0/21 maxlen: 24
195.94.64.0/19 maxlen: 24
195.135.128.0/18 maxlen: 24
62.40.0.0/19 maxlen: 24
80.87.160.0/20 maxlen: 24
195.227.0.0/16 maxlen: 24
195.82.64.0/19 maxlen: 24
185.32.32.0/22 maxlen: 24
212.237.160.0/21 maxlen: 24
2a00:5f40::/29 maxlen: 29
2001:1440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379669665 (0x16a14ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 1 07:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=319aacd17848b639ff1bda597b0d0e48c4ea1c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:13:6d:20:b7:0f:d3:99:e2:e8:42:68:26:
42:9a:ff:e7:2f:40:5a:24:09:4e:98:43:c2:ef:15:
da:7e:52:3e:62:3c:cb:f4:8e:57:a4:80:de:6a:f0:
11:50:08:c5:4f:1f:f4:f7:73:2e:c0:d7:a0:17:ea:
fa:75:90:b5:77:09:5f:2b:79:cf:b3:7b:33:9f:35:
d0:b8:48:6d:a8:5d:1f:b7:2d:7a:4f:d7:4d:5a:39:
16:99:c2:36:30:80:3d:dd:70:5e:78:ac:b5:3e:8f:
81:69:90:38:69:1f:65:36:c0:63:98:dc:f7:ea:23:
d8:86:96:20:e9:7e:7b:e4:ec:86:c8:20:cb:94:0b:
aa:e3:d3:31:49:28:7c:76:db:f0:58:f5:83:bd:2d:
7d:15:f4:4d:78:2e:0e:26:a6:1b:68:63:4e:f4:df:
a0:cc:96:83:e8:dc:e3:66:4c:8e:df:a5:88:ce:73:
2a:35:68:00:a6:9c:7f:26:cb:52:b2:cd:b4:35:65:
4a:66:3c:17:66:87:1c:4b:59:76:88:82:2a:9b:b7:
2b:64:cf:d6:ef:af:a8:7a:57:a4:ce:33:bf:d8:c5:
0c:85:27:38:8a:92:75:74:92:e4:3e:ee:23:89:65:
1a:dd:6f:7a:59:9d:34:ae:e5:98:4f:23:0c:e4:2b:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:AC:D1:78:48:B6:39:FF:1B:DA:59:7B:0D:0E:48:C4:EA:1C:0C
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/MZqs0XhItjn_G9pZew0OSMTqHAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
62.40.0.0/19
80.87.160.0/20
185.32.32.0/22
195.82.64.0/19
195.94.64.0/19
195.135.128.0/18
195.227.0.0/16
212.237.160.0/21
IPv6:
2001:1440::/32
2a00:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:d7:11:83:f8:eb:a9:2c:12:63:5b:c5:f3:ad:8b:95:64:68:
98:36:ce:65:26:b9:58:59:3b:aa:f3:cb:c1:ef:d5:a2:ed:f1:
da:9b:ec:52:51:ed:ec:f1:02:a1:f2:27:f8:c4:7c:10:4e:3e:
a5:c8:f8:ba:6e:8f:fb:d1:c8:57:78:61:1b:cc:ff:df:ff:b2:
96:9d:5a:9f:10:1b:95:bb:f9:3e:2b:fb:71:c5:6f:13:69:0f:
08:c0:98:e7:d1:a3:44:a4:73:43:63:07:09:48:05:7e:b2:09:
b5:70:95:64:cf:45:3a:f3:bc:97:21:8d:29:e7:4d:49:07:e3:
50:df:92:51:e5:64:e8:c2:48:91:1e:10:d1:d1:8d:b2:e3:51:
c2:a2:25:02:46:7a:38:ca:0f:c4:02:37:74:f5:2d:1f:96:37:
9f:b8:29:60:c2:fb:47:77:ec:11:43:8f:cc:65:f3:51:70:a8:
77:61:7a:e4:74:c8:e6:29:89:23:b8:70:da:6a:51:96:64:b4:
a9:0c:2e:b1:c3:39:00:fc:7c:3b:24:35:22:62:5b:40:fb:1b:
29:28:23:36:1d:a6:48:a4:c2:5f:3a:b9:4c:31:bc:f0:3a:5b:
28:bf:0f:a8:cf:56:d4:a9:3e:87:eb:bd:11:20:bb:5d:b8:48:
db:dd:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:09 2025 by rpki-client