Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/sNBgDCA-Kdspy5mU4nq9T36LjRU.roa
File: sNBgDCA-Kdspy5mU4nq9T36LjRU.roa (raw, json)
Hash identifier: nDPcRffmHW7sjqb7OGEeaL2j81N4rUbdJA2CXUELfWI=
Subject key identifier: B0:D0:60:0C:20:3E:29:DB:29:CB:99:94:E2:7A:BD:4F:7E:8B:8D:15
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01886450ECFAE6B19AA624EBA41346D258B0
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/sNBgDCA-Kdspy5mU4nq9T36LjRU.roa
Signing time: Sun 28 May 2023 21:43:24 +0000
ROA not before: Sun 28 May 2023 21:43:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 95.164.176.0/20 maxlen: 24
94.131.147.0/24 maxlen: 24
94.131.146.0/24 maxlen: 24
94.131.151.0/24 maxlen: 24
94.131.150.0/24 maxlen: 24
94.131.149.0/24 maxlen: 24
94.131.148.0/24 maxlen: 24
94.131.152.0/24 maxlen: 24
94.131.157.0/24 maxlen: 24
94.131.156.0/24 maxlen: 24
94.131.155.0/24 maxlen: 24
94.131.159.0/24 maxlen: 24
94.131.158.0/24 maxlen: 24
94.131.154.0/24 maxlen: 24
94.131.153.0/24 maxlen: 24
94.131.130.0/24 maxlen: 24
94.131.128.0/19 maxlen: 24
94.131.132.0/24 maxlen: 24
94.131.131.0/24 maxlen: 24
94.131.133.0/24 maxlen: 24
94.131.137.0/24 maxlen: 24
94.131.136.0/24 maxlen: 24
94.131.135.0/24 maxlen: 24
94.131.134.0/24 maxlen: 24
94.131.139.0/24 maxlen: 24
94.131.138.0/24 maxlen: 24
94.131.144.0/24 maxlen: 24
94.131.144.0/23 maxlen: 23
94.131.143.0/24 maxlen: 24
94.131.142.0/24 maxlen: 24
94.131.141.0/24 maxlen: 24
94.131.145.0/24 maxlen: 24
94.131.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:64:50:ec:fa:e6:b1:9a:a6:24:eb:a4:13:46:d2:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 28 21:43:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d0600c203e29db29cb9994e27abd4f7e8b8d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:44:d6:8b:13:a5:72:20:8b:44:03:0d:cb:
89:f6:00:c7:dc:fc:84:69:fc:d0:6f:93:9f:43:b9:
1d:60:eb:c2:6c:9d:4f:de:7b:3f:d4:d9:8c:56:e7:
3d:87:f9:14:26:01:9b:48:e2:d9:00:97:91:c0:77:
9e:a4:9a:ad:5a:31:4c:78:97:65:01:39:99:14:d4:
5f:30:d8:24:69:0e:85:4d:87:1c:7b:63:72:b6:b7:
1e:99:a1:3d:b4:3d:0f:1b:c1:db:57:9b:cd:14:0d:
1b:42:f5:24:e2:5a:46:41:a1:89:84:91:05:38:20:
e1:ee:02:55:0a:e9:36:a5:04:69:ad:56:74:39:d2:
e2:1f:50:e4:e3:62:59:47:01:5a:b8:06:ee:8c:a7:
49:3d:53:18:3d:5b:01:2b:c0:b9:13:5e:0c:1c:47:
8d:bb:1b:03:52:7d:d1:7b:a8:ad:b2:52:16:e1:23:
3f:41:a2:1a:e8:57:d6:16:63:26:97:94:91:4f:50:
61:d8:bb:9b:59:82:d8:77:76:6e:4e:81:80:9f:7a:
e9:6f:e0:83:bf:7d:e4:81:f0:7f:28:7e:33:04:0a:
20:b8:a9:e2:6e:a8:6c:8c:5c:7a:22:2b:07:bd:47:
87:93:21:d7:cb:37:b8:19:5d:fa:97:ee:b7:ff:9c:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:60:0C:20:3E:29:DB:29:CB:99:94:E2:7A:BD:4F:7E:8B:8D:15
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/sNBgDCA-Kdspy5mU4nq9T36LjRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.128.0/19
95.164.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:31:a5:73:c7:42:fd:b4:0c:2d:65:4b:3f:30:91:02:9c:95:
86:18:84:38:f4:05:ef:cb:28:b4:0c:f3:86:38:c4:64:47:11:
25:da:56:24:f9:b4:f9:b3:d6:1a:b8:4a:dc:70:30:ca:92:60:
2b:0a:37:6b:09:c2:a9:7c:d0:2f:59:96:20:0b:ef:e9:98:fc:
8c:f2:14:e6:cb:13:47:ba:9b:cc:99:d3:85:d4:94:9c:cd:c4:
6b:08:6c:ed:8c:4d:fd:18:9a:19:d3:5c:12:3d:5d:ad:86:8d:
c1:93:49:54:dd:e3:12:3d:a4:19:c3:4b:7c:0f:4a:c9:89:04:
04:11:af:04:52:c1:02:17:e5:dd:a8:93:62:90:de:34:97:be:
b5:18:98:63:e8:ee:e4:97:07:6e:07:38:c8:b4:72:c6:c8:89:
74:cd:1e:9f:ae:88:a2:52:bc:26:c6:bd:10:41:9f:5f:e3:68:
ba:d5:c0:99:1f:ef:78:2d:86:61:c6:61:d8:f9:9b:9e:54:e4:
91:0b:4e:f1:d4:ec:a9:f1:e6:67:25:01:1f:d1:37:25:2b:12:
2a:b3:9a:9a:d6:24:c0:a3:e3:0d:55:be:6b:aa:38:75:35:89:
13:df:b9:20:97:c8:9a:36:02:81:f3:46:aa:c7:e0:6c:3a:eb:
47:b6:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:54 2025 by rpki-client