Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/svhoeIic1XhgXn5sLsTjIja9PPg.roa
File: svhoeIic1XhgXn5sLsTjIja9PPg.roa (raw, json)
Hash identifier: JWdMqXuL9f9JcnmxTmIP4MNh8HYbnqKOqgqXIhrbR1U=
Subject key identifier: B2:F8:68:78:88:9C:D5:78:60:5E:7E:6C:2E:C4:E3:22:36:BD:3C:F8
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 01856D0AFC9DC7C021EBD942F9CA771F8396
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/svhoeIic1XhgXn5sLsTjIja9PPg.roa
Signing time: Sun 01 Jan 2023 11:15:14 +0000
ROA not before: Sun 01 Jan 2023 11:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25512
IP address blocks: 85.13.64.0/18 maxlen: 18
195.146.96.0/19 maxlen: 19
131.117.192.0/21 maxlen: 21
212.11.96.0/19 maxlen: 19
82.117.128.0/19 maxlen: 19
85.184.16.0/20 maxlen: 20
185.134.0.0/22 maxlen: 22
213.235.128.0/18 maxlen: 18
89.203.128.0/17 maxlen: 17
82.202.64.0/18 maxlen: 18
81.19.32.0/20 maxlen: 20
2001:1a48::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:fc:9d:c7:c0:21:eb:d9:42:f9:ca:77:1f:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Jan 1 11:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f86878889cd578605e7e6c2ec4e32236bd3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:d1:19:09:79:2c:31:3f:9b:ff:ef:7c:81:
c5:84:58:65:cc:85:a9:c0:8c:0e:6f:18:b4:91:38:
d1:96:25:b0:98:22:f6:cf:0e:7b:e7:0c:fd:b6:58:
45:b2:32:44:2c:8b:22:57:5b:04:ec:53:10:20:93:
d7:e3:ec:c9:75:5c:07:c3:66:9e:73:89:bd:3c:b8:
ae:69:2b:38:23:00:52:45:e7:3c:b1:b8:55:71:ae:
b5:17:d8:43:72:34:a6:61:9f:66:c5:66:01:25:d1:
99:eb:db:49:45:d6:9f:a8:5a:93:80:13:45:16:f5:
c5:8a:e4:f1:bc:18:6e:e1:22:b9:73:49:25:c4:cf:
4d:35:2c:18:07:d3:d8:8b:cd:f7:e1:ae:d5:dc:13:
c7:9f:3a:17:dc:fb:f4:11:87:80:61:44:fc:19:c9:
de:f1:f1:74:7c:c6:d9:da:9e:99:f2:00:c2:2c:ec:
e3:84:7a:70:7c:88:0c:90:94:21:6f:a6:78:92:c3:
ed:cf:7e:8e:04:d3:e5:fe:a0:8c:2f:6b:d6:91:16:
d1:d6:40:7c:04:22:bc:11:9d:dd:16:be:51:d3:ec:
e1:34:02:0a:c5:bd:03:ca:ad:cb:35:00:cb:55:08:
11:72:e4:ea:1d:2f:52:2d:3d:c3:e3:51:b8:47:da:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:68:78:88:9C:D5:78:60:5E:7E:6C:2E:C4:E3:22:36:BD:3C:F8
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/svhoeIic1XhgXn5sLsTjIja9PPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.32.0/20
82.117.128.0/19
82.202.64.0/18
85.13.64.0/18
85.184.16.0/20
89.203.128.0/17
131.117.192.0/21
185.134.0.0/22
195.146.96.0/19
212.11.96.0/19
213.235.128.0/18
IPv6:
2001:1a48::/32
Signature Algorithm: sha256WithRSAEncryption
8c:03:76:a2:77:09:ae:41:28:4e:52:84:98:3d:1d:51:c3:ac:
10:fc:f4:d9:98:2c:8f:97:cf:e2:3f:02:89:ac:d5:6d:15:8a:
c0:f9:09:7b:41:7d:b4:8f:c1:ee:03:5e:5a:87:93:26:5d:d6:
db:72:97:8a:0b:95:cb:21:c5:0c:fe:55:ef:91:3d:b2:79:29:
98:69:34:3e:09:16:b1:58:3c:d7:bb:6c:aa:e0:ae:38:9b:36:
8b:3b:bc:86:30:b6:a4:a0:8f:6b:4d:84:d0:43:81:43:36:5d:
c2:15:6d:be:b8:b8:a6:be:72:87:46:8f:82:d8:0f:47:30:71:
d0:f8:bf:36:ca:fd:1f:db:39:1e:90:1e:76:0b:7b:80:63:a5:
45:20:8f:8a:97:21:4a:5b:01:4b:0d:54:46:10:2f:a2:ee:ae:
f6:ba:5b:80:c5:42:a4:d0:20:36:98:e9:83:22:8e:15:26:ab:
5d:14:14:16:26:0c:c9:f2:25:61:36:2a:eb:c6:ed:cc:9d:24:
57:95:32:5f:ba:e6:5a:ba:67:58:a1:0a:bb:eb:35:a4:73:4e:
00:08:e7:aa:cd:af:be:aa:d8:5a:f5:6c:21:e0:9c:c5:d4:4a:
0b:3c:da:ee:cf:6b:04:85:61:2e:ff:b9:c0:b6:34:ba:f8:c0:
12:e8:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:15 2025 by rpki-client