Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/k1qjQsJ8PRe1de470SyVmWgpyz0.roa
File: k1qjQsJ8PRe1de470SyVmWgpyz0.roa (raw, json)
Hash identifier: l4VfE0nhR3ZLX9ERgUx7YBMfvPe20f3bV1nbUB83Nog=
Subject key identifier: 93:5A:A3:42:C2:7C:3D:17:B5:75:EE:3B:D1:2C:95:99:68:29:CB:3D
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 16A55CB2
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/k1qjQsJ8PRe1de470SyVmWgpyz0.roa
Signing time: Wed 30 Mar 2022 08:10:44 +0000
ROA not before: Wed 30 Mar 2022 08:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34714
IP address blocks: 185.238.56.0/22 maxlen: 22
193.238.56.0/22 maxlen: 22
91.201.76.0/22 maxlen: 22
91.213.34.0/24 maxlen: 24
37.143.168.0/24 maxlen: 24
37.143.175.0/24 maxlen: 24
193.32.140.0/22 maxlen: 22
2a03:8f80::/32 maxlen: 32
2a03:8f81::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379935922 (0x16a55cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Mar 30 08:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=935aa342c27c3d17b575ee3bd12c95996829cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:96:2e:11:b4:8c:c9:3c:cc:7f:f4:22:c7:
0f:cf:b6:a9:25:19:c9:c7:0f:e6:1c:08:a9:d5:71:
e7:93:dc:ad:0a:bf:6e:3e:d6:de:ac:8c:f5:27:e0:
1c:d1:57:cc:ba:2c:1f:ee:f0:7c:be:ba:ff:13:79:
03:59:13:21:30:d5:01:2d:37:17:9a:44:06:74:f8:
f0:ee:c0:82:e0:e3:5d:61:68:86:18:53:be:50:76:
bb:68:dd:0e:65:10:08:0a:44:79:5a:f4:4e:59:e1:
ca:4c:08:e2:5e:5c:f2:f7:44:3c:95:34:a7:16:82:
69:57:57:76:6a:95:1d:a1:a5:23:ed:c7:15:bc:c9:
9b:12:39:14:66:76:93:f6:fd:fe:7c:a0:35:be:78:
85:9d:90:c3:00:a3:c1:d9:b8:db:f0:5f:ae:e4:ee:
9f:40:22:12:91:ab:26:97:dc:e0:b9:b5:5e:56:24:
c2:9a:06:86:02:bb:3f:30:68:8e:36:52:5e:af:f8:
1a:f8:6b:6e:9d:fe:50:c9:ae:35:f8:32:13:d6:ac:
89:47:e4:ca:f7:a5:55:9b:40:51:bd:c8:d2:bb:32:
91:10:23:05:d8:b5:05:fc:1f:d1:42:a4:b6:77:13:
28:79:ce:97:0e:c7:12:c3:97:40:91:8e:4d:4f:57:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:A3:42:C2:7C:3D:17:B5:75:EE:3B:D1:2C:95:99:68:29:CB:3D
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/k1qjQsJ8PRe1de470SyVmWgpyz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.168.0/24
37.143.175.0/24
91.201.76.0/22
91.213.34.0/24
185.238.56.0/22
193.32.140.0/22
193.238.56.0/22
IPv6:
2a03:8f80::/31
Signature Algorithm: sha256WithRSAEncryption
55:68:5e:24:42:fe:dd:61:57:c1:8e:fa:7f:bc:0e:26:b3:ec:
dc:8f:75:ac:c4:d9:bc:a5:41:bb:4a:9d:ca:95:9d:9a:cf:fa:
9d:2a:36:5f:a1:45:19:9e:b1:ef:38:bf:03:c7:a5:53:13:d3:
8a:4a:35:86:79:66:71:7e:8c:eb:8b:bc:07:ed:d3:81:a6:71:
ed:a4:98:8d:f4:d3:88:99:d5:3d:37:96:8e:9c:3c:77:05:1f:
a2:30:d3:16:dd:7a:94:0b:26:01:ce:39:9f:08:70:6b:30:dd:
bf:a0:e8:60:ac:ed:26:8c:db:2c:dd:6c:f7:ae:f3:1c:63:d4:
c3:ec:ec:65:8e:ca:86:37:6e:de:07:d8:13:10:ae:a1:fd:6d:
e0:d7:19:18:51:be:3f:e8:2a:66:22:4f:5c:8c:51:ef:ec:1a:
d7:83:e2:3b:25:ba:64:49:eb:5c:1c:c1:3e:c0:28:06:34:aa:
9c:ec:c1:77:db:f2:ef:06:d9:88:dd:4c:58:54:ae:72:3d:84:
77:7a:3c:4e:4e:55:94:6a:3a:b2:14:08:ba:1f:d9:4b:05:42:
2c:ea:db:3f:19:85:b5:ed:14:a4:19:7a:e0:3b:17:5b:7e:08:
18:06:59:f6:14:e5:e9:58:da:84:ed:7f:01:9e:55:46:07:6c:
b5:ce:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:09:44 2025 by rpki-client