Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/3jaZKP-jJAtISxvjxfHjsFs7_pk.roa
File: 3jaZKP-jJAtISxvjxfHjsFs7_pk.roa (raw, json)
Hash identifier: rR8YFCpJmTIJPOaGyGgaLCCKuP3kenwr+VFsh2BmN7k=
Subject key identifier: DE:36:99:28:FF:A3:24:0B:48:4B:1B:E3:C5:F1:E3:B0:5B:3B:FE:99
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 0183F9A609F519A4CD3C236D757810C64394
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/3jaZKP-jJAtISxvjxfHjsFs7_pk.roa
Signing time: Fri 21 Oct 2022 08:25:51 +0000
ROA not before: Fri 21 Oct 2022 08:25:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15703
IP address blocks: 213.193.232.0/24 maxlen: 24
213.193.232.0/21 maxlen: 24
213.193.240.0/21 maxlen: 24
213.193.250.0/23 maxlen: 24
213.193.252.0/23 maxlen: 24
213.193.254.0/23 maxlen: 24
213.239.128.0/18 maxlen: 24
213.193.192.0/21 maxlen: 24
213.193.209.0/24 maxlen: 24
213.193.208.0/21 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.216.0/22 maxlen: 24
80.247.192.0/19 maxlen: 24
213.193.220.0/22 maxlen: 24
193.28.152.0/24 maxlen: 24
87.233.0.0/16 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:a6:09:f5:19:a4:cd:3c:23:6d:75:78:10:c6:43:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Oct 21 08:25:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de369928ffa3240b484b1be3c5f1e3b05b3bfe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:e8:ed:cd:ba:53:98:9b:45:b4:79:ae:9c:
f3:9f:1b:4a:da:d0:9c:d0:b9:f8:9a:63:c5:7a:39:
dd:5f:be:b0:81:86:bc:f9:ac:b1:6d:5e:1c:9e:d9:
16:1c:90:2e:db:18:bc:e3:96:23:2f:f3:3e:c5:d6:
0e:10:1a:7a:32:8d:3f:a5:53:eb:fd:83:39:f6:0a:
45:3c:d8:51:09:89:94:76:cc:7f:52:c4:67:07:4b:
21:51:ba:59:4c:25:95:a6:42:28:d7:ff:06:cb:cf:
92:69:29:37:5d:25:a0:ab:56:39:1c:ec:62:9d:60:
94:83:d9:73:cb:6c:45:6f:f3:b1:ac:40:6e:84:e7:
6c:fc:96:5a:b7:0f:52:3b:73:10:ab:b7:ed:6b:75:
d9:24:6f:46:ed:f2:a2:bb:79:8e:2b:37:27:9d:da:
27:74:ea:fa:63:3e:ef:ef:19:ae:80:44:9d:91:85:
48:fd:da:f2:24:5e:20:96:3f:81:0c:1b:6c:10:8c:
f5:58:c2:c9:e9:43:da:e8:47:ff:ae:73:87:18:f9:
75:3c:c4:37:11:4b:1c:71:45:2d:98:b2:29:e9:8a:
6c:21:6b:dc:30:6c:3a:0b:ad:d5:f1:d6:55:52:8a:
b4:cb:f2:61:73:6c:91:19:3a:fc:93:1c:0d:1a:b7:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:99:28:FF:A3:24:0B:48:4B:1B:E3:C5:F1:E3:B0:5B:3B:FE:99
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/3jaZKP-jJAtISxvjxfHjsFs7_pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.192.0/19
87.233.0.0/16
193.28.152.0/24
213.193.192.0/21
213.193.208.0/20
213.193.232.0-213.193.247.255
213.193.250.0-213.193.255.255
213.239.128.0/18
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
e7:a1:7e:d6:f2:87:d5:b4:b8:bd:08:9f:20:72:39:01:0e:53:
1a:99:00:ec:01:76:9a:8e:43:8a:50:d7:fe:11:09:dd:27:4b:
94:e3:d7:01:4d:f7:be:e7:67:24:c4:44:5e:f5:94:ec:ee:72:
ff:94:89:2c:32:fb:63:fb:e0:9f:b7:28:02:19:9c:65:ed:27:
14:f8:1e:09:ce:54:b9:05:df:1f:24:ad:3e:b2:67:0e:80:e6:
60:c6:c9:59:6d:b9:3f:7d:eb:71:7a:df:36:48:82:db:2a:ae:
a6:bb:a7:c2:e4:95:b4:64:b9:0d:1c:0a:81:f9:26:09:d6:f4:
ac:85:6f:41:4b:e7:dc:fd:a4:09:9a:76:bf:52:0b:49:db:31:
bc:1d:a9:b1:3c:43:db:e9:9f:36:5b:f2:fd:6d:04:ab:f5:86:
e1:0a:83:c8:e4:bd:e8:35:57:12:d4:9b:1a:3d:5d:83:12:93:
7f:cf:a8:5c:21:d6:95:31:81:12:02:2d:da:45:e4:29:9a:52:
51:5b:a6:58:ea:a9:be:8c:b6:28:5e:85:b4:be:f7:9f:ed:a1:
2d:6c:6d:34:96:99:dc:fb:b0:6c:87:76:1b:9e:4b:39:af:95:
cf:2e:d4:00:ee:cb:3d:ca:10:00:8c:72:ba:1c:12:90:3f:4a:
82:f4:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:33 2025 by rpki-client