Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/VAFaqvHokrOajUlU7KW_sX1pPOI.roa
File: VAFaqvHokrOajUlU7KW_sX1pPOI.roa (raw, json)
Hash identifier: cG+K/mPh9ocMDfBu26fN4sVd0kSfkTjUXXNWL65iSF8=
Subject key identifier: 54:01:5A:AA:F1:E8:92:B3:9A:8D:49:54:EC:A5:BF:B1:7D:69:3C:E2
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 0183EBD3864DB18A6981BB0DD83855E08BD5
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/VAFaqvHokrOajUlU7KW_sX1pPOI.roa
Signing time: Tue 18 Oct 2022 16:00:51 +0000
ROA not before: Tue 18 Oct 2022 16:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15895
IP address blocks: 81.23.16.0/24 maxlen: 24
81.23.16.0/20 maxlen: 20
85.223.128.0/17 maxlen: 17
37.229.0.0/16 maxlen: 16
176.8.0.0/16 maxlen: 16
188.163.0.0/17 maxlen: 17
212.109.32.0/19 maxlen: 19
188.163.0.0/16 maxlen: 16
46.185.0.0/17 maxlen: 17
134.249.0.0/16 maxlen: 16
94.153.0.0/16 maxlen: 16
212.82.192.0/19 maxlen: 19
62.64.64.0/18 maxlen: 18
77.247.216.0/21 maxlen: 21
109.162.0.0/17 maxlen: 17
94.153.164.0/22 maxlen: 22
94.27.0.0/17 maxlen: 17
46.118.0.0/15 maxlen: 15
83.170.192.0/18 maxlen: 18
193.41.60.0/23 maxlen: 23
193.41.60.0/22 maxlen: 22
193.41.62.0/23 maxlen: 23
89.162.128.0/17 maxlen: 17
5.248.0.0/16 maxlen: 16
37.115.0.0/16 maxlen: 16
46.211.0.0/16 maxlen: 16
178.137.0.0/16 maxlen: 16
2a02:2378::/32 maxlen: 32
2a02:8a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:d3:86:4d:b1:8a:69:81:bb:0d:d8:38:55:e0:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Oct 18 16:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54015aaaf1e892b39a8d4954eca5bfb17d693ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:b6:72:ac:43:14:3f:03:d6:0c:71:68:92:
d1:3a:e2:a9:67:e4:7e:cc:45:04:b4:9f:0a:98:65:
05:b6:54:82:64:5e:26:86:9c:3f:c5:93:93:2f:fb:
a1:29:b0:ce:f4:96:7f:6e:8d:09:33:80:2d:1c:5c:
8c:05:79:e9:52:32:ed:a3:b3:b1:46:13:66:19:8b:
81:65:85:cb:66:8a:89:2b:a2:1e:7d:ed:3d:45:51:
a8:86:8d:52:2c:08:31:1a:06:48:d6:ee:58:89:8d:
ae:d5:c0:db:cc:5c:87:36:f5:90:5d:24:7b:83:1d:
9f:14:82:b9:23:37:04:68:ec:b2:d0:83:8d:fa:eb:
33:7f:6a:e0:d1:b4:7f:a1:e5:b2:57:41:9b:38:f6:
2c:74:74:a8:8c:75:0c:a8:0a:3c:3b:c5:3f:be:84:
dd:de:4f:71:fb:68:56:d8:3d:85:87:05:08:d5:b6:
36:76:c6:26:23:b0:e0:a4:08:40:45:ca:28:d8:13:
15:4c:88:54:02:74:90:27:c2:89:14:3c:1e:00:08:
5e:3b:0e:57:ba:dc:46:23:12:5d:4e:52:6e:41:75:
0c:38:26:92:c5:71:f5:a5:a6:44:a0:7d:3c:34:85:
0c:c2:41:1f:97:2d:3d:fb:ce:78:e8:2c:7e:89:91:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:5A:AA:F1:E8:92:B3:9A:8D:49:54:EC:A5:BF:B1:7D:69:3C:E2
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/VAFaqvHokrOajUlU7KW_sX1pPOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.248.0.0/16
37.115.0.0/16
37.229.0.0/16
46.118.0.0/15
46.185.0.0/17
46.211.0.0/16
62.64.64.0/18
77.247.216.0/21
81.23.16.0/20
83.170.192.0/18
85.223.128.0/17
89.162.128.0/17
94.27.0.0/17
94.153.0.0/16
109.162.0.0/17
134.249.0.0/16
176.8.0.0/16
178.137.0.0/16
188.163.0.0/16
193.41.60.0/22
212.82.192.0/19
212.109.32.0/19
IPv6:
2a02:8a8::/32
2a02:2378::/32
Signature Algorithm: sha256WithRSAEncryption
44:56:e2:4e:58:1f:ee:4b:56:28:d5:b6:e5:e1:b7:1a:cd:67:
61:44:81:6b:24:db:78:ff:39:d9:5a:cd:ca:54:f5:1d:ef:5a:
fa:66:01:d3:0c:bd:5b:17:95:7e:4b:3d:09:0b:8b:73:9d:c4:
c8:5c:ac:06:32:12:9e:42:08:99:98:32:e2:73:b3:6a:e9:b1:
67:11:ac:66:e4:b7:8a:54:95:81:ad:9f:6a:c9:91:2d:96:d9:
c9:2e:be:46:90:db:2e:e8:ad:56:43:56:aa:65:cf:b2:26:4b:
04:2a:b7:d7:36:6c:e7:01:45:a1:34:78:00:83:7a:9a:48:8e:
a3:ae:18:6b:4b:ba:09:e3:b6:3d:72:9e:18:a2:8e:a1:8a:b7:
b2:15:ce:72:eb:de:d5:5f:16:6d:fb:3f:c8:29:4e:53:23:6e:
5f:54:75:d2:0b:75:21:29:e5:f2:27:4c:55:05:c5:04:a9:a2:
a5:f7:73:cb:72:e0:43:01:e2:f7:12:82:8e:6b:8a:dc:8b:23:
f4:4d:d9:64:69:66:66:8d:ae:32:4d:eb:c4:6e:49:2b:a2:49:
05:77:89:04:dc:88:e0:4e:b2:58:d6:0d:0a:6f:d4:18:88:67:
c2:e1:7e:f0:69:fb:e2:d7:04:56:43:36:b0:c7:79:82:d5:e6:
b8:45:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:40 2025 by rpki-client