Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/PSSF9hQK7E0s1SnKG44yRJ0hRyk.roa
File: PSSF9hQK7E0s1SnKG44yRJ0hRyk.roa (raw, json)
Hash identifier: 61epLkqH4lZMTz20+yx/pE5nNQVpMg3vrSXJQph2J88=
Subject key identifier: 3D:24:85:F6:14:0A:EC:4D:2C:D5:29:CA:1B:8E:32:44:9D:21:47:29
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 15E545CB
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/PSSF9hQK7E0s1SnKG44yRJ0hRyk.roa
Signing time: Sat 01 Jan 2022 13:06:35 +0000
ROA not before: Sat 01 Jan 2022 13:06:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197589
IP address blocks: 85.204.112.0/22 maxlen: 22
89.42.0.0/21 maxlen: 21
94.177.68.0/22 maxlen: 22
185.96.20.0/22 maxlen: 22
94.176.44.0/22 maxlen: 22
46.235.136.0/21 maxlen: 21
2a04:d680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367347147 (0x15e545cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jan 1 13:06:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d2485f6140aec4d2cd529ca1b8e32449d214729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:5f:f1:c2:f6:cb:93:fd:99:af:66:77:66:
46:8a:45:68:88:52:13:87:9c:9e:b6:a8:24:ff:78:
21:b0:9e:9e:e3:8d:eb:e2:ce:61:a6:0f:fe:d5:38:
94:42:30:f9:e0:57:9d:91:31:84:48:39:0c:3f:62:
0b:89:63:13:d6:c3:3e:3d:74:4b:c8:ab:64:ed:c2:
5c:a2:f5:15:1c:34:26:30:9a:23:28:5e:fb:02:f7:
a6:90:14:2a:99:73:9a:d6:ef:77:0e:f4:76:c9:85:
b2:00:79:41:0d:5a:b2:95:ba:dd:59:9d:9c:8a:f9:
23:25:bd:da:b6:8f:0f:2e:2b:c9:69:1f:b5:21:bf:
9c:9f:80:92:9d:89:00:1a:53:fe:ca:a5:ea:a3:b7:
0d:ad:b7:bd:25:c7:44:15:15:78:d2:55:03:53:62:
65:a4:73:af:ac:52:52:db:10:aa:98:e4:fc:6b:c2:
b8:4e:2f:ab:45:52:60:fc:b7:e5:f3:60:56:7a:d7:
e1:cc:ce:92:3f:d5:14:d6:42:af:6c:5c:f5:4f:47:
5e:26:fd:fa:9e:80:4c:05:8d:23:28:cc:f9:e3:16:
a8:13:b6:60:21:6c:18:58:2b:50:13:02:ae:17:24:
c4:54:60:06:22:78:ef:ed:64:73:79:7a:82:ad:1d:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:85:F6:14:0A:EC:4D:2C:D5:29:CA:1B:8E:32:44:9D:21:47:29
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/PSSF9hQK7E0s1SnKG44yRJ0hRyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.136.0/21
85.204.112.0/22
89.42.0.0/21
94.176.44.0/22
94.177.68.0/22
185.96.20.0/22
IPv6:
2a04:d680::/29
Signature Algorithm: sha256WithRSAEncryption
1c:60:b1:45:21:2d:c4:37:6d:1b:1a:92:c5:87:1e:9a:f4:59:
ba:18:f1:80:4b:17:0e:a0:19:95:f7:19:a6:fa:d0:6a:a2:52:
45:1a:c3:75:b8:39:cc:06:5e:ab:bc:0e:8c:2e:ee:65:60:1a:
1c:a2:37:9e:2d:d1:24:ae:1c:4a:64:47:cf:d1:e2:82:97:ff:
db:0a:df:5b:5f:9f:72:35:d3:7d:97:d3:e7:67:ab:98:35:83:
e4:b9:f4:4a:46:85:33:4b:e5:66:5b:e5:f1:63:cb:a6:36:ff:
35:35:00:c0:7b:f3:92:09:2b:fd:fd:00:6f:b8:30:53:87:3d:
53:94:98:c4:02:31:be:ec:55:be:6c:c6:5d:a5:c2:5b:83:a7:
0d:1d:96:ae:55:27:ff:e1:5e:ee:d6:78:d3:a9:23:3f:aa:90:
0e:26:b4:bf:b4:4c:3d:e4:f9:6e:40:ce:24:8b:35:ad:37:43:
8f:b1:cf:e2:89:e5:99:45:7d:f9:78:e7:2a:06:28:e3:0d:af:
d8:e7:3e:8d:a0:ce:52:1f:7d:d5:8b:45:61:88:2b:35:9b:89:
b1:e2:8f:50:82:a4:95:33:fe:7e:08:be:cb:0f:61:1c:60:13:
fd:b4:68:80:ec:c4:ef:1f:f8:2b:a6:1b:04:f9:52:da:64:6b:
51:14:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:05 2025 by rpki-client