Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/4kFkABBYANt1d-V9P5QmZ8k9-j4.roa
File: 4kFkABBYANt1d-V9P5QmZ8k9-j4.roa (raw, json)
Hash identifier: +3E8ZkY7vjzQ2JDx/O0Z0OGCYx0Gxqz5wS0hmPh8dns=
Subject key identifier: E2:41:64:00:10:58:00:DB:75:77:E5:7D:3F:94:26:67:C9:3D:FA:3E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 033B89B7
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/4kFkABBYANt1d-V9P5QmZ8k9-j4.roa
Signing time: Thu 21 Apr 2022 05:25:02 +0000
ROA not before: Thu 21 Apr 2022 05:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 80.242.96.0/22 maxlen: 22
80.242.104.0/22 maxlen: 22
80.242.100.0/22 maxlen: 22
80.242.108.0/22 maxlen: 22
37.75.216.0/22 maxlen: 22
31.3.24.0/22 maxlen: 22
31.3.28.0/22 maxlen: 22
185.14.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54233527 (0x33b89b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Apr 21 05:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2416400105800db7577e57d3f942667c93dfa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:81:8c:40:b7:96:0e:a6:74:ea:96:8e:73:
d8:8c:7d:76:45:94:37:c8:54:80:15:39:ea:c1:9c:
33:73:0f:12:1a:04:3b:c8:76:77:15:d5:a8:96:1a:
65:4e:e7:6c:0d:90:1e:0f:fe:08:1d:53:7a:41:fe:
46:53:02:1d:6b:dd:1a:ad:a7:cc:de:b1:9a:ed:6c:
f7:04:4a:db:8d:13:cf:9f:3c:1a:4e:b4:2f:72:e5:
d2:e3:ae:bb:24:fa:93:40:24:85:75:fd:41:c7:51:
bb:0f:ef:f1:fb:97:8a:e5:34:26:88:85:15:71:cc:
ca:e5:f7:7b:4a:13:4b:d7:ba:6f:43:91:f4:2b:3d:
d0:b0:4b:94:70:b9:cb:83:a1:af:72:b2:18:f7:b2:
1f:8b:2d:42:0d:b1:a4:a4:a7:4c:52:32:69:1c:a7:
e7:f1:5a:6a:ca:fa:a5:af:f0:dd:25:dd:4f:8f:fb:
56:5d:62:e1:16:07:06:db:c9:8d:a3:a7:fa:97:1e:
83:74:40:3b:c5:ae:ef:d0:91:af:28:3f:b0:56:d3:
ae:62:41:2c:e4:4b:7e:c3:e8:82:96:f7:22:5b:d2:
bf:fe:2b:4b:cc:f9:35:19:4b:53:d8:5d:37:ef:8d:
1c:72:4c:85:14:eb:c8:7c:e2:1a:97:d9:dd:24:ab:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:64:00:10:58:00:DB:75:77:E5:7D:3F:94:26:67:C9:3D:FA:3E
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/4kFkABBYANt1d-V9P5QmZ8k9-j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.24.0/21
37.75.216.0/22
80.242.96.0/20
185.14.16.0/22
Signature Algorithm: sha256WithRSAEncryption
10:31:4f:46:85:12:8a:68:be:a4:2b:23:e1:df:1b:e2:a9:6c:
8a:33:e9:97:85:45:2c:46:11:bb:93:ab:dc:5f:53:9b:76:e4:
ee:21:24:2f:b5:5e:20:d7:a3:e3:1b:e5:53:d2:f1:0d:76:f9:
1f:4e:fb:22:ae:ad:2c:c2:38:57:b4:37:4b:72:f4:ae:1c:c8:
26:7b:f5:1e:f2:8a:ac:69:55:69:fb:f2:b5:c5:46:59:5f:e0:
8c:49:6b:c0:fa:b4:84:ed:76:4f:50:7b:0c:b9:d8:22:45:ec:
c7:38:42:7b:a0:23:8d:80:f3:a0:6a:87:41:8a:e2:73:5b:cd:
bf:ad:b9:51:c3:f6:e4:de:98:83:09:1a:d2:dc:17:3d:e3:42:
27:ef:f4:6d:af:9e:51:70:8f:89:8a:da:9c:ac:50:d3:db:05:
d8:4a:1f:17:43:a7:ea:3c:0c:f9:76:5c:63:b8:0e:67:5f:c2:
a7:eb:fe:65:d6:2f:9b:df:54:9d:2a:86:9a:31:20:15:1d:c5:
9f:fb:21:9e:0b:c0:17:c7:54:78:8b:43:9f:ad:fd:d9:db:6d:
34:83:63:2e:9c:a0:f2:72:11:61:e5:be:b3:c1:e5:68:cf:bc:
2b:ca:8a:80:89:23:5f:04:2b:d9:79:80:a8:16:b4:fc:18:06:
72:7b:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:45 2025 by rpki-client