Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/E6gb2kbm1SlDUWu9jjTDDt42ya8.roa
File: E6gb2kbm1SlDUWu9jjTDDt42ya8.roa (raw, json)
Hash identifier: s07l1VLhFGvVj3CPdN9vSzTpXvkMzSSVZsnjjSHoVtk=
Subject key identifier: 13:A8:1B:DA:46:E6:D5:29:43:51:6B:BD:8E:34:C3:0E:DE:36:C9:AF
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0AB14E79
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/E6gb2kbm1SlDUWu9jjTDDt42ya8.roa
Signing time: Sat 01 Jan 2022 07:54:43 +0000
ROA not before: Sat 01 Jan 2022 07:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35197
IP address blocks: 109.110.98.0/24 maxlen: 24
109.110.101.0/24 maxlen: 24
109.110.100.0/24 maxlen: 24
109.110.99.0/24 maxlen: 24
109.110.102.0/24 maxlen: 24
80.83.16.0/20 maxlen: 20
80.83.17.0/24 maxlen: 24
80.83.16.0/24 maxlen: 24
80.83.16.0/22 maxlen: 22
80.83.20.0/22 maxlen: 22
80.83.21.0/24 maxlen: 24
80.83.20.0/24 maxlen: 24
80.83.19.0/24 maxlen: 24
80.83.18.0/24 maxlen: 24
80.83.24.0/24 maxlen: 24
80.83.23.0/24 maxlen: 24
80.83.22.0/24 maxlen: 24
80.83.31.0/24 maxlen: 24
80.83.30.0/24 maxlen: 24
80.83.29.0/24 maxlen: 24
80.83.28.0/24 maxlen: 24
80.83.27.0/24 maxlen: 24
80.83.26.0/24 maxlen: 24
80.83.25.0/24 maxlen: 24
2a0d:6340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179392121 (0xab14e79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jan 1 07:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13a81bda46e6d52943516bbd8e34c30ede36c9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:05:7d:73:3b:fc:a1:bc:a6:8a:a0:6f:5d:
0d:b1:89:48:cf:98:a0:f6:a8:59:d1:87:89:15:47:
0e:29:7c:f4:e6:22:eb:1f:9e:2e:e5:bd:d7:e2:5d:
ab:3d:7f:cf:95:a4:f1:1b:a7:1a:c1:e5:7d:96:11:
d4:2e:be:10:ae:bf:e7:fa:58:cf:e9:8f:9e:8a:70:
8c:ed:a1:cb:e4:b3:22:a4:6a:43:7c:2e:87:b2:16:
89:fa:0d:74:1d:89:ea:3c:07:fc:0a:43:9e:1e:8e:
b3:8e:22:ad:05:65:d5:1d:65:b8:38:ac:c4:63:7e:
c5:c8:be:f0:1c:3e:36:0c:56:68:5b:e3:2d:40:95:
28:a9:11:fe:02:90:d5:7e:6a:52:61:df:26:67:5d:
4e:df:8a:bd:d2:09:2b:8f:5f:3f:0f:e3:b6:a4:aa:
59:5e:10:fd:25:8a:dd:cb:50:95:1e:f7:d7:a3:b4:
14:21:1e:76:b3:2d:54:ba:37:3b:af:df:d7:41:a4:
b6:23:76:58:3e:f2:f0:33:1c:9f:46:66:b2:f8:a6:
28:d6:4a:5c:6d:cb:58:c6:6e:b7:01:8f:bf:78:45:
ed:fe:d0:00:78:ac:79:06:93:24:66:16:49:cd:36:
36:a2:f9:52:0a:25:cc:d0:54:48:5d:c5:f7:3b:50:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:1B:DA:46:E6:D5:29:43:51:6B:BD:8E:34:C3:0E:DE:36:C9:AF
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/E6gb2kbm1SlDUWu9jjTDDt42ya8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.16.0/20
109.110.98.0-109.110.102.255
IPv6:
2a0d:6340::/29
Signature Algorithm: sha256WithRSAEncryption
8d:3f:2b:93:cd:35:04:b6:c9:7e:29:69:96:05:17:ab:1e:b5:
b3:a2:14:e5:32:ea:c6:19:6f:de:b6:cd:57:92:8a:af:a3:97:
a3:f8:46:0a:6b:a8:a6:41:72:36:32:cf:6f:fb:d7:85:48:7b:
64:25:ee:50:b1:f6:31:17:53:23:2a:04:67:4b:23:96:79:44:
b3:7b:5a:90:09:76:87:0e:52:3c:37:4d:61:94:74:27:cf:fc:
4c:41:f6:9a:9f:27:f9:67:2e:fb:02:79:23:a6:b4:00:93:cf:
ba:25:4e:f6:f2:69:1a:00:f1:dc:24:8c:ab:49:c8:d8:54:34:
23:37:79:bb:27:71:55:51:8e:2a:a4:3a:25:de:e4:54:6b:3c:
9d:90:b6:a9:95:82:6e:11:72:9a:42:b4:a4:58:c2:0f:61:ea:
a2:89:a8:fe:9a:1d:bd:9c:fe:6b:e6:ff:08:96:9d:0f:d3:86:
55:55:6e:41:6a:6e:6d:2d:84:41:ef:fd:c6:d2:6a:43:c0:9e:
8e:07:b4:83:da:46:f0:e8:0c:4a:cd:90:67:48:53:fa:9b:e8:
84:fe:75:41:fc:98:0d:bf:dd:f1:2c:fd:4c:bc:83:99:69:3c:
e6:e8:d6:15:4b:b4:d8:99:4f:72:f4:a7:26:dc:18:4b:6b:94:
b9:7c:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:54 2025 by rpki-client