Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/QDijJ1dJZYwouVEDzRNwzB_WsoE.roa
File: QDijJ1dJZYwouVEDzRNwzB_WsoE.roa (raw, json)
Hash identifier: AVNOa/otnWXaEj5GI1UYyVExCOXf0LwzmiWoHfJ9yrU=
Subject key identifier: 40:38:A3:27:57:49:65:8C:28:B9:51:03:CD:13:70:CC:1F:D6:B2:81
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0185C4EE6A9F92E09BB782E2CE49467E2781
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/QDijJ1dJZYwouVEDzRNwzB_WsoE.roa
Signing time: Wed 18 Jan 2023 12:50:37 +0000
ROA not before: Wed 18 Jan 2023 12:50:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57497
IP address blocks: 195.226.223.0/24 maxlen: 24
45.135.240.0/24 maxlen: 24
45.135.243.0/24 maxlen: 24
45.135.241.0/24 maxlen: 24
45.135.242.0/24 maxlen: 24
158.58.191.0/24 maxlen: 24
158.58.190.0/23 maxlen: 23
158.58.189.0/24 maxlen: 24
158.58.190.0/24 maxlen: 24
158.58.188.0/24 maxlen: 24
158.58.188.0/23 maxlen: 23
158.58.187.0/24 maxlen: 24
158.58.184.0/24 maxlen: 24
158.58.185.0/24 maxlen: 24
158.58.184.0/22 maxlen: 22
158.58.186.0/24 maxlen: 24
185.2.14.0/23 maxlen: 24
185.2.12.0/22 maxlen: 22
185.2.12.0/23 maxlen: 24
5.63.10.0/24 maxlen: 24
5.63.11.0/24 maxlen: 24
5.63.8.0/24 maxlen: 24
5.63.10.0/23 maxlen: 23
5.63.9.0/24 maxlen: 24
5.63.13.0/24 maxlen: 24
5.63.14.0/24 maxlen: 24
5.63.14.0/23 maxlen: 23
5.63.12.0/24 maxlen: 24
185.229.204.0/24 maxlen: 24
2a01:4ac0:3::/48 maxlen: 48
2a01:4ac0:2::/48 maxlen: 48
2a01:4ac0::/48 maxlen: 48
2a01:4ac0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:ee:6a:9f:92:e0:9b:b7:82:e2:ce:49:46:7e:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 18 12:50:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4038a3275749658c28b95103cd1370cc1fd6b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:8d:06:ac:d1:fa:52:0e:b9:1a:73:45:77:
5f:c7:6a:bc:65:21:66:62:93:02:73:0b:18:e5:2b:
1b:c4:88:30:12:c1:77:c7:1e:b2:45:1e:2a:f1:82:
ea:14:3f:96:34:ac:17:bc:96:b1:c9:4a:9f:7d:3f:
49:82:89:88:42:c9:ca:ae:8c:8a:2e:71:e3:27:42:
8e:77:91:97:b7:a6:36:94:8c:7c:d6:36:9c:7a:27:
2d:aa:52:0d:34:21:4c:14:3f:5c:08:9b:e0:93:85:
0c:8d:b3:23:8b:2e:d8:94:af:fa:df:b5:5b:98:cf:
9c:29:bc:59:43:b3:06:45:21:ed:83:41:6b:96:d8:
b1:24:f8:76:0d:47:db:95:88:9f:e3:56:d1:82:48:
c4:78:f3:86:1a:02:4a:81:8b:5e:c0:04:c0:3b:53:
84:69:ae:57:a5:55:64:68:6b:a3:6a:24:11:72:7a:
6e:c9:2b:bd:13:77:9c:5e:16:2f:84:e7:03:df:67:
00:73:a9:00:6f:92:a9:c6:b0:2c:2b:f1:97:ae:6d:
67:07:0c:1c:11:69:b6:32:01:69:e8:3e:ea:2c:eb:
1f:ef:b7:44:83:36:d0:8a:20:bb:e2:4c:8f:56:c0:
1c:71:1f:dc:7f:f2:b9:e8:9b:7b:e2:38:e2:b1:cd:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:A3:27:57:49:65:8C:28:B9:51:03:CD:13:70:CC:1F:D6:B2:81
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/QDijJ1dJZYwouVEDzRNwzB_WsoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.8.0/21
45.135.240.0/22
158.58.184.0/21
185.2.12.0/22
185.229.204.0/24
195.226.223.0/24
IPv6:
2a01:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
3f:ec:1b:f6:4e:9b:de:6a:31:1f:92:fe:bc:49:c6:24:27:53:
b9:6f:69:18:c5:0d:19:5d:82:07:23:72:b6:3d:ff:af:1a:03:
33:85:88:df:8a:fd:76:a0:75:65:d1:bf:5e:12:1c:2e:be:54:
bb:3b:ed:3c:35:95:4c:12:bc:73:f2:99:ed:8a:b2:3a:7d:1e:
12:37:7d:05:1f:2e:ef:0e:48:4e:10:dd:6f:25:6a:f8:f1:65:
97:8a:c8:2b:ca:28:22:aa:78:b8:80:50:d0:a9:d0:9a:e6:2b:
80:f8:44:9a:22:de:4d:e9:78:f1:c3:3f:49:ae:10:dd:13:89:
81:a4:87:1e:81:70:b4:4f:19:fe:68:b3:cc:38:20:dc:78:8e:
e7:82:85:6b:7d:cd:18:22:c8:0c:38:03:94:0c:28:83:4e:d4:
66:49:65:da:f8:17:5a:5b:48:11:8b:4a:1a:11:29:03:ba:0b:
c5:0f:a5:83:da:a7:35:62:b1:d8:0b:6c:58:f6:6d:4a:3d:f5:
58:bc:69:2f:e4:09:eb:41:1f:a7:2b:68:21:e9:c2:37:42:c9:
74:8d:53:32:d2:65:f1:50:f7:f3:77:8f:9e:6a:55:c5:3e:05:
ab:b1:90:9d:e1:bc:8f:74:00:8a:09:1d:0c:f7:60:77:bd:e0:
58:d6:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:17 2025 by rpki-client