Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/RwKFRSK49JD6JICaclLOGcO53Wo.roa
File: RwKFRSK49JD6JICaclLOGcO53Wo.roa (raw, json)
Hash identifier: mixmbcawbcKwuHhk6K2X2pMviWLZnIIxyBHKEOWhdbg=
Subject key identifier: 47:02:85:45:22:B8:F4:90:FA:24:80:9A:72:52:CE:19:C3:B9:DD:6A
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 01856FD523D9204AAE37C8D71E05E07879D7
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/RwKFRSK49JD6JICaclLOGcO53Wo.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34779
IP address blocks: 93.103.224.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
91.246.224.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
89.233.112.0/20 maxlen: 20
194.28.108.0/22 maxlen: 22
89.212.0.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
188.230.160.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
188.230.128.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
89.212.128.0/18 maxlen: 18
93.103.32.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
193.138.32.0/20 maxlen: 20
193.138.32.0/19 maxlen: 24
89.212.64.0/18 maxlen: 18
193.138.48.0/21 maxlen: 21
193.138.56.0/22 maxlen: 22
193.138.62.0/24 maxlen: 24
193.138.63.0/24 maxlen: 24
193.138.60.0/23 maxlen: 23
188.230.224.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
46.248.64.0/19 maxlen: 19
185.179.48.0/22 maxlen: 22
89.212.23.160/27 maxlen: 27
119.12.128.0/20 maxlen: 20
93.103.128.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
89.212.192.0/18 maxlen: 18
185.49.116.0/22 maxlen: 22
2a01:263::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:267::/32 maxlen: 32
2a01:260::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:262::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:23:d9:20:4a:ae:37:c8:d7:1e:05:e0:78:79:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4702854522b8f490fa24809a7252ce19c3b9dd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:bc:c0:31:54:6e:7a:00:65:34:e2:5a:91:
d4:b5:8a:a6:d2:f7:63:85:74:7b:4c:71:7b:e4:29:
be:72:ec:ea:5c:90:0a:70:68:5a:06:87:fb:48:90:
65:a1:ce:e0:1f:04:ce:c1:b4:0f:75:05:16:38:3a:
fc:03:1a:75:a0:09:70:1c:f3:a0:05:3c:50:8d:bb:
2f:d9:2f:ca:81:06:2c:80:85:80:d8:48:a1:4f:ed:
31:e7:3e:d7:72:17:7f:d6:51:d8:38:34:54:98:6c:
22:33:ce:29:82:ca:93:77:d3:57:eb:77:b4:11:34:
cb:6c:c6:40:4c:79:d7:cb:3c:ce:fc:22:f7:45:54:
9f:de:7d:38:41:16:73:f1:27:86:69:36:87:c8:3f:
46:d6:7f:d2:7f:88:58:a2:e3:93:13:1c:0f:56:dd:
cc:83:f7:53:07:4d:76:1f:3c:6f:8d:34:f7:bc:32:
a6:e9:d8:81:16:a4:e6:f7:f4:1d:f4:0d:f8:f6:0b:
fc:6b:b4:52:ee:68:52:a6:33:b7:14:c2:9c:a3:f8:
cb:5b:1b:2a:dc:be:ec:ed:c5:34:e2:bc:ff:5e:6c:
15:51:a9:42:37:1d:85:f7:f4:3b:24:21:79:9e:b9:
09:1d:fc:25:2b:85:9e:3e:52:41:b2:db:c3:d6:b9:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:85:45:22:B8:F4:90:FA:24:80:9A:72:52:CE:19:C3:B9:DD:6A
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/RwKFRSK49JD6JICaclLOGcO53Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
89:77:2e:29:8e:fe:be:9f:cc:6e:ae:b6:ea:40:4d:f3:10:dd:
2e:84:ca:db:3d:a2:16:31:9f:4c:b3:b5:14:33:d1:92:c8:ef:
32:5e:be:d1:67:13:7a:b5:b1:a3:57:45:e8:11:ba:bc:2b:ea:
8e:19:84:f9:fc:3a:72:31:61:5a:75:fa:9e:1a:ff:5a:f4:47:
2c:fd:63:04:d2:9b:77:cb:b6:92:bb:25:ae:d4:02:54:c4:b9:
a4:be:f3:36:96:35:75:e3:41:44:fd:ae:28:22:04:40:ed:cc:
d7:7b:a4:be:fd:19:d5:16:e1:96:e8:27:24:9e:2a:8d:5c:67:
20:60:56:18:5b:cc:05:29:6c:04:99:1d:f4:ed:c8:92:c4:4f:
e1:ee:4f:88:29:84:de:71:c5:ea:47:7c:c6:f2:ff:e2:61:42:
fd:30:7e:bf:f8:62:e7:3f:c7:0b:5c:f1:6a:53:da:fe:2e:67:
ee:36:0d:fe:bd:5a:a7:a9:4d:34:b2:62:80:b7:43:da:46:9b:
f3:28:7a:ba:fd:cc:1a:41:a6:19:a6:8c:36:37:94:af:4b:93:
d0:5d:b6:65:b3:d3:c5:7d:ce:48:e4:67:5d:28:50:9d:6e:6c:
3a:cb:e4:65:52:ab:f5:06:ca:83:39:8f:be:a3:5f:d1:64:1b:
f2:e7:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:07 2025 by rpki-client