Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/T6kdQmrW-0CuyrxDOcHfh83yhfA.roa
File: T6kdQmrW-0CuyrxDOcHfh83yhfA.roa (raw, json)
Hash identifier: 6c2jrUDd/FuKTMQcbXmYdV8RFUhnURV3bhFIpjf0dEg=
Subject key identifier: 4F:A9:1D:42:6A:D6:FB:40:AE:CA:BC:43:39:C1:DF:87:CD:F2:85:F0
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AA5852A
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/T6kdQmrW-0CuyrxDOcHfh83yhfA.roa
Signing time: Sat 01 Jan 2022 11:59:59 +0000
ROA not before: Sat 01 Jan 2022 11:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 213.153.128.0/17 maxlen: 24
92.44.0.0/15 maxlen: 24
151.250.0.0/16 maxlen: 24
85.29.0.0/18 maxlen: 24
176.40.0.0/14 maxlen: 24
82.222.0.0/16 maxlen: 24
212.57.0.0/19 maxlen: 24
176.33.0.0/16 maxlen: 24
195.214.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178619690 (0xaa5852a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 11:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fa91d426ad6fb40aecabc4339c1df87cdf285f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:9b:6b:c9:81:52:61:19:df:93:f3:da:15:
7a:da:9f:3a:f7:f0:0f:95:37:dd:27:86:be:3f:2b:
80:56:15:a8:e5:f8:d4:ff:c8:1a:b7:00:b5:6e:86:
b8:c0:fd:f8:4a:4c:5d:0b:61:2c:bc:e1:ee:17:fe:
6f:19:88:bd:d8:68:c0:54:89:8a:11:8f:3c:75:06:
ee:01:df:fb:26:e0:8a:9f:d4:2d:5f:06:b5:02:fc:
c9:96:4c:55:98:62:6a:88:45:17:9c:b0:1c:b4:3f:
f3:f6:ec:26:41:3e:11:ee:2f:77:f5:20:bc:75:e1:
37:3c:97:93:ad:89:4f:09:9f:a8:94:21:aa:2e:22:
f3:e5:75:2f:0c:3d:2e:38:e9:d7:f2:6d:57:c0:a7:
58:a7:ce:6f:03:4f:99:a8:26:86:b1:c9:0a:ca:6c:
3e:01:07:ad:ff:c9:cb:5c:07:7b:25:b2:3f:45:3f:
ab:10:dd:d7:ee:7d:ce:88:f2:90:8f:70:14:f5:81:
55:c6:37:d4:7a:ee:7c:75:0e:dc:26:8b:6e:14:49:
f1:48:ed:0b:56:d1:f0:76:ea:ac:bb:08:c1:ef:32:
b1:89:ce:e7:64:4d:9d:5b:c8:bf:14:f3:c9:03:bb:
43:b7:de:9e:40:2e:48:4d:d6:37:38:04:39:ce:8c:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:1D:42:6A:D6:FB:40:AE:CA:BC:43:39:C1:DF:87:CD:F2:85:F0
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/T6kdQmrW-0CuyrxDOcHfh83yhfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.0.0/16
85.29.0.0/18
92.44.0.0/15
151.250.0.0/16
176.33.0.0/16
176.40.0.0/14
195.214.128.0/18
212.57.0.0/19
213.153.128.0/17
Signature Algorithm: sha256WithRSAEncryption
39:ce:17:f3:87:e0:d4:6f:3b:5d:41:02:14:7d:87:4f:b3:47:
3a:fa:90:5f:28:f8:0d:27:9a:a0:b0:72:5b:9f:eb:c3:2d:01:
f1:d4:d0:6e:0e:4b:13:18:ab:99:03:5f:60:6f:77:44:8f:52:
e0:f7:db:10:2c:b7:dc:c6:16:2d:cb:8f:50:bf:46:ca:10:ff:
48:9c:cc:d4:9b:a4:08:89:70:9f:e4:cd:50:d6:b7:71:c5:3b:
a3:86:a4:b7:f4:b0:d3:eb:9b:90:04:b1:58:d9:ca:b6:ad:f7:
2d:f5:b5:51:5d:d4:f2:73:af:5b:0a:f5:f0:cf:b2:fa:e4:96:
80:c1:61:d3:3b:73:84:5f:07:d6:68:36:fd:15:e2:1c:3c:dd:
4d:9d:33:de:0c:e1:ed:40:d1:f2:4f:cc:56:35:79:b2:b1:27:
8b:80:b9:b6:35:22:b3:3f:fc:a9:fe:92:9e:57:37:e9:4d:60:
fc:b4:2f:d9:b9:c3:ce:ff:1f:c6:66:78:c0:c6:c0:94:76:6e:
d9:6d:31:67:b6:02:5c:75:09:7b:9c:81:2b:7a:b6:64:e6:61:
b6:e6:5d:ba:bb:7f:80:a9:20:4e:b2:89:cb:c2:05:4d:88:5c:
9d:38:b8:20:b0:c7:63:c9:d7:62:0f:97:55:f0:34:4d:e1:97:
82:d0:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:52:42 2025 by rpki-client