Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/f_0OL17D8vbJZwCOj_fHOEvLERg.roa
File: f_0OL17D8vbJZwCOj_fHOEvLERg.roa (raw, json)
Hash identifier: mTqJuNq6qUcygOoislT3j5rDdefKUjokzWhxvDousB0=
Subject key identifier: 7F:FD:0E:2F:5E:C3:F2:F6:C9:67:00:8E:8F:F7:C7:38:4B:CB:11:18
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 36AFE6E6
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/f_0OL17D8vbJZwCOj_fHOEvLERg.roa
Signing time: Thu 31 Mar 2022 09:00:53 +0000
ROA not before: Thu 31 Mar 2022 09:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12322
IP address blocks: 213.228.0.0/18 maxlen: 18
78.192.0.0/10 maxlen: 11
82.224.0.0/11 maxlen: 13
88.160.0.0/11 maxlen: 15
62.147.0.0/16 maxlen: 16
82.64.0.0/14 maxlen: 15
212.27.32.0/19 maxlen: 19
2a01:e00::/26 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917497574 (0x36afe6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Mar 31 09:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ffd0e2f5ec3f2f6c967008e8ff7c7384bcb1118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:a8:14:37:c2:35:72:97:a7:32:70:f4:10:
7e:c2:19:c8:23:b9:ff:77:f4:24:9f:34:cd:53:60:
a7:87:d5:d4:aa:ca:20:33:3e:19:53:73:c2:ea:8d:
5d:ed:42:06:0a:83:45:01:4f:64:3a:22:fe:e0:d4:
2c:79:c0:08:cd:54:2f:32:a1:08:3f:d7:70:15:fb:
3c:2f:b8:70:f2:1a:b7:31:2b:6d:9b:dc:3f:c7:94:
51:e0:69:9a:ae:48:b3:93:e3:0c:b1:7e:3c:8e:10:
db:33:2b:46:f4:0e:1c:60:20:25:01:39:b7:e2:fc:
11:cc:52:85:4a:aa:73:07:81:36:6d:4b:09:80:1d:
11:80:8d:36:0b:57:27:00:a6:ee:07:cd:19:9a:25:
ee:65:8a:cb:75:17:14:00:c6:62:e5:02:ae:aa:6a:
b6:50:19:db:5a:2c:96:5e:b1:55:f7:4e:33:73:fb:
16:d7:72:f7:14:2f:e4:fb:9d:6b:07:82:59:0d:82:
7a:a4:06:87:ff:13:ba:11:7d:8b:c0:f4:6a:24:0b:
55:30:78:b2:14:32:38:97:9d:07:33:23:e3:52:68:
58:52:09:f9:aa:3e:bd:e7:74:ab:c9:f6:c6:f2:d4:
22:6c:ae:d1:74:91:8a:3b:cf:2c:a3:5e:12:2b:4a:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:0E:2F:5E:C3:F2:F6:C9:67:00:8E:8F:F7:C7:38:4B:CB:11:18
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/f_0OL17D8vbJZwCOj_fHOEvLERg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.147.0.0/16
78.192.0.0/10
82.64.0.0/14
82.224.0.0/11
88.160.0.0/11
212.27.32.0/19
213.228.0.0/18
IPv6:
2a01:e00::/26
Signature Algorithm: sha256WithRSAEncryption
3d:72:5b:82:bd:89:84:4f:43:b5:56:0d:90:d2:27:00:5c:40:
cc:31:28:3e:b7:05:d4:96:a8:7f:12:28:de:9b:ec:fb:6d:b8:
30:91:23:88:c7:bd:45:72:08:66:97:23:8c:0a:e7:bd:84:a8:
1d:0c:f1:a2:05:ba:21:8c:16:84:e9:d1:64:66:5a:3a:58:fe:
0a:a0:f0:c5:85:84:87:71:7e:dc:c6:e0:ca:9c:87:84:64:66:
4c:83:ac:60:93:66:9d:b2:14:69:98:58:d6:1b:a4:3e:61:41:
6e:05:8b:11:64:51:5d:9d:f1:4e:f3:84:ef:be:78:b0:4a:04:
e7:84:66:9c:5c:57:e5:e0:29:4c:13:30:da:53:25:20:b1:57:
76:85:77:f4:7e:c5:21:13:f5:31:0f:74:59:5c:c3:47:43:1f:
3c:de:33:82:ff:ab:a5:11:3a:e5:60:63:25:e7:fe:b8:40:d1:
34:dd:83:52:36:cd:2b:e0:ce:1d:17:13:d0:1d:85:c6:ea:5b:
b2:5a:8f:76:bc:a5:5b:3f:2a:32:c9:44:4e:48:2e:48:f8:14:
12:2d:88:09:11:80:bc:5b:da:1e:ce:37:a7:c0:61:28:4f:56:
c8:ca:41:cd:b0:46:ed:7d:a9:0c:53:e9:3a:82:31:24:c3:c9:
3e:7e:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:27 2025 by rpki-client