Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/g4ce46Q1xm_x1p9V2GV_uLfnayE.roa
File: g4ce46Q1xm_x1p9V2GV_uLfnayE.roa (raw, json)
Hash identifier: jAC5Aqw0fN4hgO1JTTOHxbv+rM52nbCY6kK/5LBx2Sk=
Subject key identifier: 83:87:1E:E3:A4:35:C6:6F:F1:D6:9F:55:D8:65:7F:B8:B7:E7:6B:21
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0184F522F898DB7726873419F5C3CB915775
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/g4ce46Q1xm_x1p9V2GV_uLfnayE.roa
Signing time: Fri 09 Dec 2022 04:27:00 +0000
ROA not before: Fri 09 Dec 2022 04:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31363
IP address blocks: 195.91.255.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:22:f8:98:db:77:26:87:34:19:f5:c3:cb:91:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Dec 9 04:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83871ee3a435c66ff1d69f55d8657fb8b7e76b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:6d:c2:0d:9b:06:58:d1:ab:7c:62:ab:e5:
a2:fc:15:80:5b:67:60:cb:fa:b4:86:c4:bc:af:60:
22:38:41:58:27:93:93:64:7b:bd:fa:3a:c7:0b:8e:
d1:d7:a4:21:f3:5b:40:0f:00:5b:4c:fb:e9:2a:48:
24:3f:a7:0b:63:60:c5:62:8d:a9:26:a5:34:7c:7d:
1d:31:5f:26:a7:0d:61:c9:e7:1b:9c:d8:6e:82:e1:
6f:56:7c:af:00:8f:13:6c:b1:2a:31:0d:7a:64:da:
21:a5:0c:fb:7b:2e:d7:9e:c5:a8:10:5f:93:d2:3f:
9a:a3:d8:b7:51:c9:e0:92:0b:50:74:30:e9:59:95:
8a:0f:c9:91:a5:c7:6b:dd:0d:eb:12:4e:85:e4:97:
71:3e:11:24:e9:2c:a4:bc:7d:af:51:75:f7:70:2a:
fc:f9:41:1e:07:7f:3d:3c:f2:35:6d:5c:e1:f2:d3:
c2:a0:7a:f0:fa:95:42:2c:99:69:d7:ff:05:36:84:
cd:0c:df:0d:95:c7:42:29:f0:cf:07:7e:cc:3f:5a:
14:71:27:6d:e8:83:03:bc:0c:e8:ac:08:bb:55:db:
31:70:48:84:8c:9a:91:b5:e1:f6:17:dc:97:09:c9:
89:7a:8f:65:c6:26:ea:64:2c:57:d1:6b:2c:85:26:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:1E:E3:A4:35:C6:6F:F1:D6:9F:55:D8:65:7F:B8:B7:E7:6B:21
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/g4ce46Q1xm_x1p9V2GV_uLfnayE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.125.0/24
195.91.149.0/24
195.91.168.0/21
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.226.255
195.91.228.0-195.91.247.255
195.91.255.0/24
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
84:59:a5:eb:c9:ef:cd:e7:d9:0d:69:bb:3d:57:01:15:80:a8:
e8:5a:9e:84:ce:d1:61:a3:28:a2:2f:4d:cb:3c:73:bd:cf:2e:
f1:47:23:c5:ed:25:9a:58:84:db:58:07:3b:87:8d:0d:ae:20:
10:df:98:43:11:e2:88:1a:b8:4f:6e:19:fc:59:48:7a:35:e7:
59:bb:f0:5e:da:2d:e2:03:e9:e6:f7:aa:3d:06:e8:56:6a:0b:
be:96:2d:14:bd:92:67:4a:8e:99:3c:f6:51:77:45:0a:69:c7:
d2:71:8e:7b:55:9f:4b:ea:92:a4:47:9a:8a:9f:29:d8:60:21:
17:5c:39:7a:6c:b9:cd:f3:78:e3:2c:0f:32:97:75:d1:2b:0d:
58:e3:60:fd:c8:92:d6:d7:db:84:fc:33:03:cf:0f:34:92:c1:
a8:af:24:ef:10:03:0b:de:6d:18:f0:a3:a5:6a:20:30:a7:d7:
19:62:f1:22:c0:e7:96:b5:8b:7d:fa:4d:1d:af:2f:bf:29:52:
f0:b9:94:e5:37:11:68:28:8c:a6:2a:b0:9f:6a:66:d2:dd:b2:
e5:4c:d5:c6:32:45:f1:b0:ed:57:58:d4:58:f2:65:0e:12:a1:
ba:5b:21:7c:ee:56:c0:bc:d8:38:57:c3:94:9f:22:7d:5a:bc:
62:ac:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:58 2025 by rpki-client