Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qN1fo1MpEqm2j2wXmJRxRgKH5no.roa
File: qN1fo1MpEqm2j2wXmJRxRgKH5no.roa (raw, json)
Hash identifier: EKzPLrVTL1LE3kGS/2gN1ody4Mo/j4zmdMFyjI205BQ=
Subject key identifier: A8:DD:5F:A3:53:29:12:A9:B6:8F:6C:17:98:94:71:46:02:87:E6:7A
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0185700277B13A09870DED56E2EE473C9FC7
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qN1fo1MpEqm2j2wXmJRxRgKH5no.roa
Signing time: Mon 02 Jan 2023 01:04:47 +0000
ROA not before: Mon 02 Jan 2023 01:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39811
IP address blocks: 213.87.96.0/24 maxlen: 24
213.87.97.0/24 maxlen: 24
213.87.98.0/23 maxlen: 23
213.87.100.0/24 maxlen: 24
213.87.101.0/24 maxlen: 24
213.87.102.0/24 maxlen: 24
213.87.103.0/24 maxlen: 24
213.87.104.0/24 maxlen: 24
213.87.105.0/24 maxlen: 24
213.87.106.0/23 maxlen: 23
213.87.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:77:b1:3a:09:87:0d:ed:56:e2:ee:47:3c:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 01:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8dd5fa3532912a9b68f6c17989471460287e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:ab:7b:86:01:d6:01:8d:3c:3e:aa:5e:eb:
bc:f5:16:e0:5d:4f:41:cf:ca:86:d8:f8:f0:61:69:
5e:ad:87:a3:bd:8d:b9:d9:c2:d9:1d:e3:ea:21:83:
73:b1:f5:c4:2a:6d:bb:2f:9c:6d:a8:81:12:5f:29:
e3:9b:47:5e:f4:13:a5:ba:8b:c8:32:ec:ec:6f:f7:
3a:09:48:21:98:d6:25:2a:58:65:65:b7:0d:ff:ee:
a9:ea:74:b6:d0:86:47:37:6f:72:35:8e:ef:b2:8c:
49:ad:21:60:3f:d0:52:ec:05:51:02:6e:33:31:4b:
ab:80:ad:c0:21:3d:73:a1:4d:14:72:37:77:b2:e3:
e4:63:d5:75:ea:fc:18:84:a1:aa:eb:75:86:7c:f7:
24:53:2f:c9:13:67:76:a9:5f:9f:76:1d:34:1d:3e:
ca:29:fc:59:f1:83:d1:99:a3:04:b1:c8:96:ea:22:
86:ea:1e:9c:e4:49:96:10:cf:59:7b:5a:bd:42:e1:
c7:a2:78:cd:e2:94:69:a7:60:00:1c:f6:a5:56:e9:
b4:07:65:80:1d:d7:1a:ee:24:cd:1d:bc:1f:06:86:
af:5c:c2:f7:6f:b7:e8:ac:91:ac:ff:ac:a9:29:f4:
c0:dc:7f:21:22:fb:79:22:8d:f2:92:2a:fb:aa:80:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:5F:A3:53:29:12:A9:B6:8F:6C:17:98:94:71:46:02:87:E6:7A
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/qN1fo1MpEqm2j2wXmJRxRgKH5no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.96.0-213.87.107.255
213.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:26:75:85:62:91:3f:c9:75:bd:b7:a0:a7:7d:9c:34:dc:a9:
4a:e0:eb:59:ff:4a:61:05:7b:70:34:25:20:4a:61:29:00:18:
00:d9:e4:df:a0:4f:7e:29:5c:bc:ae:f5:63:5a:54:14:fc:c1:
80:ff:c0:18:41:0a:df:37:6d:05:a7:d3:d6:6d:08:6f:ea:12:
28:8a:27:24:93:fe:72:89:e0:5c:75:b7:6d:cb:6c:0c:13:6f:
91:e5:0b:ce:8b:fb:e3:01:d8:ce:f8:f8:f3:35:5a:e5:26:b0:
8e:d6:7f:7f:be:1d:4e:2d:40:be:fe:48:e3:bf:71:d4:a6:06:
35:bb:03:59:37:3c:1b:13:f1:e0:03:6a:f7:02:19:82:a9:98:
72:d7:3f:e6:ac:65:d9:84:15:84:61:7f:cc:67:ca:58:d3:ce:
27:7b:45:00:fe:9b:91:2d:15:30:d4:f1:99:e8:af:1e:27:c6:
71:73:23:bb:38:ad:47:0a:66:73:32:b9:90:e9:c7:55:6e:5c:
26:aa:f5:a9:ba:9b:42:1d:45:ea:8c:37:6f:df:ea:5e:f9:6b:
10:2c:5c:1c:52:17:08:8c:42:8f:de:64:f9:08:8d:df:20:9d:
c7:33:87:ce:37:46:b0:b3:be:09:fd:d6:96:d3:04:0d:df:ee:
f7:e1:25:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:22 2025 by rpki-client