Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/sgJSERSJBigzGchHlyqSPMYuToA.roa
File: sgJSERSJBigzGchHlyqSPMYuToA.roa (raw, json)
Hash identifier: 89WXf3mH05tQUnqGai8HuTuC/oWNht8qxVOp4ZKikjs=
Subject key identifier: B2:02:52:11:14:89:06:28:33:19:C8:47:97:2A:92:3C:C6:2E:4E:80
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 012AA560
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/sgJSERSJBigzGchHlyqSPMYuToA.roa
Signing time: Sat 01 Jan 2022 06:05:12 +0000
ROA not before: Sat 01 Jan 2022 06:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25160
IP address blocks: 185.121.76.0/22 maxlen: 22
185.135.164.0/22 maxlen: 22
185.135.166.0/24 maxlen: 24
94.126.43.0/24 maxlen: 24
94.126.47.0/24 maxlen: 24
178.18.116.0/24 maxlen: 24
178.18.117.0/24 maxlen: 24
178.18.119.0/24 maxlen: 24
31.28.70.0/24 maxlen: 24
31.28.65.0/24 maxlen: 24
31.28.68.0/24 maxlen: 24
31.28.67.0/24 maxlen: 24
31.28.72.0/24 maxlen: 24
31.28.75.0/24 maxlen: 24
31.28.84.0/23 maxlen: 23
31.28.80.0/22 maxlen: 22
31.28.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19572064 (0x12aa560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Jan 1 06:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2025211148906283319c847972a923cc62e4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:59:42:b8:e4:78:00:3a:fd:0e:0c:74:20:
98:f7:e9:b6:16:53:ea:fb:f2:99:19:50:7d:a1:46:
58:db:00:2e:36:72:fa:67:21:be:93:78:d4:6a:f7:
df:72:92:ab:f1:12:e2:c3:d3:14:cb:9e:ac:a9:e2:
4f:a2:ca:d9:4e:3a:1c:75:3b:6d:04:ad:66:df:83:
79:ff:42:69:ac:ea:dd:98:4c:fc:91:65:35:39:8d:
1c:f2:45:d3:07:58:f7:9a:af:93:7d:b6:ec:f9:96:
98:49:f2:a1:0a:33:3f:37:69:d4:0e:f8:46:e5:7f:
3a:5e:5c:02:0d:3a:3d:77:a5:53:73:ed:90:af:e2:
a9:e3:ae:62:0f:16:48:53:e7:88:2b:8a:58:3d:1a:
a2:77:dd:6e:20:4f:54:bf:c3:4c:3e:7c:79:01:e1:
62:2f:1f:12:39:2a:b0:22:96:96:79:d1:a2:e9:a5:
7d:f4:df:32:d3:cf:83:5c:d2:0e:62:46:e7:55:4d:
51:d9:94:e8:76:4a:dd:18:92:79:a3:4c:94:ae:12:
61:ba:fe:5c:46:11:62:55:b6:17:f3:9c:28:00:99:
57:e4:3b:8f:b0:a7:af:21:a9:38:7f:6d:23:7b:3c:
bb:ac:2a:50:4e:00:c2:e3:ec:a3:b2:b6:f8:7e:20:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:52:11:14:89:06:28:33:19:C8:47:97:2A:92:3C:C6:2E:4E:80
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/sgJSERSJBigzGchHlyqSPMYuToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.65.0/24
31.28.67.0-31.28.68.255
31.28.70.0/24
31.28.72.0/24
31.28.75.0/24
31.28.80.0-31.28.86.255
94.126.43.0/24
94.126.47.0/24
178.18.116.0/23
178.18.119.0/24
185.121.76.0/22
185.135.164.0/22
Signature Algorithm: sha256WithRSAEncryption
19:aa:b2:ca:66:f8:1d:3d:6d:76:3a:ca:a6:e2:db:7d:3c:2a:
da:9e:43:af:d4:cd:e4:ea:ac:b3:cb:e4:b4:e9:90:d2:bd:13:
4e:6a:bd:b7:ea:dc:b0:a7:47:d6:db:c4:fb:f1:d3:af:27:b8:
da:9a:2d:a5:ee:62:24:e7:c8:30:88:4c:bd:b0:fd:e5:5c:ed:
1d:ac:7c:36:78:3b:b1:2b:0e:25:ec:7d:e3:c3:fd:63:6b:6a:
97:66:52:b8:f3:16:c5:ee:9d:b3:69:88:bb:6a:18:7e:b7:e2:
6f:4b:fe:2f:98:f7:02:c5:95:7a:3a:8d:06:18:f8:07:5b:bf:
25:d0:7f:89:1b:ff:56:8f:c1:fc:a6:f8:a2:65:30:6b:9e:86:
36:61:a9:da:57:03:ce:ed:38:94:c4:7e:11:f0:02:7a:e7:7a:
7a:85:d4:7e:f3:de:89:09:01:cd:b4:09:8e:15:9f:5c:71:a4:
3f:5d:be:4d:21:a6:06:ca:61:77:0c:bc:dd:dd:c7:55:74:df:
1e:4f:a2:ee:51:e3:2a:06:0a:46:91:ac:ce:88:2e:9c:b9:f3:
e6:63:84:28:d8:18:0f:03:47:1b:5a:a8:dc:7e:50:a4:5d:c8:
ab:e8:c6:9c:a0:e8:55:be:5f:e1:ba:a4:fc:19:7d:23:a0:99:
94:23:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:13 2025 by rpki-client