Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1qrdGgJU2pTbVFc1hGoQmxERm-8.roa
File: 1qrdGgJU2pTbVFc1hGoQmxERm-8.roa (raw, json)
Hash identifier: MdiMgXmxiNZL1UBMBnxsIcc5fqsIebqrAz2zoIeqHlI=
Subject key identifier: D6:AA:DD:1A:02:54:DA:94:DB:54:57:35:84:6A:10:9B:11:11:9B:EF
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01857002843F2D6AC176B142E045EDD4B412
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1qrdGgJU2pTbVFc1hGoQmxERm-8.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196755
IP address blocks: 157.143.248.0/21 maxlen: 21
178.157.24.0/23 maxlen: 23
178.157.28.0/22 maxlen: 22
178.157.26.0/23 maxlen: 23
80.251.108.0/23 maxlen: 23
217.181.252.0/23 maxlen: 23
178.157.40.0/22 maxlen: 22
178.157.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:84:3f:2d:6a:c1:76:b1:42:e0:45:ed:d4:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6aadd1a0254da94db545735846a109b11119bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:21:6d:46:42:d5:04:29:17:ff:18:4c:8b:
e5:75:f1:9f:74:28:ec:b3:5b:6f:e9:1b:94:73:68:
5b:8b:c2:27:4d:bb:5d:cb:8d:e9:79:d5:fd:3f:d6:
fe:29:90:63:7f:12:fa:8b:c6:c9:e3:85:86:eb:ad:
4d:47:52:76:73:c9:6c:5c:38:f8:11:e8:67:65:49:
7a:bf:96:14:1d:cf:d9:d1:a9:58:10:ba:39:bd:4c:
df:50:16:f0:af:6e:df:f5:18:78:2c:94:ca:8c:ac:
b6:7c:fc:c4:eb:d4:f4:d2:41:7f:fa:38:47:84:1c:
a3:f3:93:e7:5b:5e:0f:1b:47:52:9a:61:30:90:0d:
2c:c4:d5:99:b2:f5:f8:98:a0:a6:de:54:f7:1c:13:
0c:bd:f1:47:5b:31:3b:c0:b8:21:87:4e:fe:94:81:
39:0c:92:b9:49:1f:f5:ad:50:07:bd:d5:69:ba:6a:
26:b1:90:84:0c:aa:ae:ea:39:76:8b:3e:8f:b5:c6:
64:45:c1:7a:75:59:68:ce:13:40:0f:ac:e2:80:ef:
6d:78:95:51:fa:b0:ee:14:34:ee:cb:17:c5:a5:73:
dd:ff:45:cc:72:a8:33:45:3c:c8:bc:3a:7d:48:65:
a0:3f:c7:61:f4:ab:88:15:12:11:73:45:c3:58:a9:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:DD:1A:02:54:DA:94:DB:54:57:35:84:6A:10:9B:11:11:9B:EF
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/1qrdGgJU2pTbVFc1hGoQmxERm-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.108.0/23
157.143.248.0/21
178.157.24.0/21
178.157.40.0/21
217.181.252.0/23
Signature Algorithm: sha256WithRSAEncryption
63:90:b0:4f:e6:d9:46:7a:5d:6f:2b:16:37:4c:6f:d5:31:d2:
d1:e0:2c:1b:35:cf:b7:3e:2d:5c:26:7c:cf:c4:ad:d9:3c:6a:
78:9f:d5:13:09:6f:2b:f6:fd:c8:f4:d9:da:3c:1f:e4:c5:11:
0c:a3:a0:1e:58:71:1c:e0:14:b8:b2:ad:d4:a3:62:45:41:3a:
dd:11:55:cc:8a:6d:e4:2c:46:bf:b7:a9:70:89:95:a8:ce:77:
1c:1d:8a:b2:36:15:2e:5c:dc:95:6a:76:ea:f1:ca:55:8a:8c:
27:00:67:d0:e2:fb:2f:03:5c:c9:68:82:2f:ad:54:e3:26:4f:
2f:ff:2e:63:e5:65:04:b8:3a:68:73:56:69:e2:bb:bc:20:51:
d6:a0:5f:39:f3:6f:9b:bb:d7:d3:ab:81:4a:27:f1:64:8d:f0:
97:14:46:d6:fe:58:87:8f:91:0c:33:86:ee:65:38:12:bc:b7:
31:fd:00:0f:aa:5b:48:8d:15:a3:94:cf:d3:d6:6c:40:6c:33:
3e:48:9d:a9:12:ae:1b:c8:73:25:fa:6f:6d:e1:89:da:9c:c4:
97:0a:e2:60:3e:79:e7:90:77:9b:f1:70:2f:4e:ed:e9:82:db:
d8:bd:00:bc:73:b0:db:71:16:70:f1:ff:79:46:36:89:0e:f6:
f4:18:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:17 2025 by rpki-client