Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/q915pL8hIkUCuvWYYj9Lw6H7-7g.roa
File: q915pL8hIkUCuvWYYj9Lw6H7-7g.roa (raw, json)
Hash identifier: gyoz9Gv5h6dqwZ/t2Mxcaz0k9nJGkPpF7qkq1k8N93c=
Subject key identifier: AB:DD:79:A4:BF:21:22:45:02:BA:F5:98:62:3F:4B:C3:A1:FB:FB:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 0187D8BE9BB34776EB95E33A60653E767471
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/q915pL8hIkUCuvWYYj9Lw6H7-7g.roa
Signing time: Mon 01 May 2023 19:16:22 +0000
ROA not before: Mon 01 May 2023 19:16:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 199.247.0.0/19 maxlen: 24
80.240.16.0/20 maxlen: 24
192.248.128.0/18 maxlen: 24
95.179.128.0/17 maxlen: 24
209.250.224.0/19 maxlen: 24
217.69.0.0/20 maxlen: 24
185.92.220.0/22 maxlen: 24
78.141.192.0/19 maxlen: 24
78.141.224.0/19 maxlen: 24
2a05:f480:2000::/38 maxlen: 38
2a05:f480:2c00::/38 maxlen: 38
2a05:f480:1000::/38 maxlen: 38
2a05:f480:1400::/38 maxlen: 38
2a05:f480:1800::/38 maxlen: 38
2a05:f480:3400::/38 maxlen: 38
2a05:f480:1c00::/38 maxlen: 38
2a05:f480:2800::/38 maxlen: 38
2a05:f480:2400::/38 maxlen: 38
2a05:f480:3000::/38 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d8:be:9b:b3:47:76:eb:95:e3:3a:60:65:3e:76:74:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: May 1 19:16:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abdd79a4bf21224502baf598623f4bc3a1fbfbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:5c:0f:1a:ad:ff:36:ec:df:c8:45:7b:e4:
e7:f7:09:11:43:3c:6b:f1:45:c2:b3:c7:d4:2f:2a:
e7:e8:35:12:e6:8a:01:61:1a:18:a4:12:05:69:bc:
90:90:00:c5:19:e4:3a:7d:bd:bc:ce:cf:a1:2c:ea:
65:b8:da:f7:df:93:1a:f7:ab:95:dd:2a:3f:1d:16:
39:cb:a7:e6:82:2a:bd:ab:88:d6:6b:78:7d:71:a0:
75:af:ee:e0:29:b5:9d:5c:d4:bd:c3:01:1d:ab:5d:
41:84:37:53:0a:d7:07:d6:35:cf:d3:81:d2:dd:44:
40:3e:0b:9a:f4:79:d4:5c:b5:05:04:3b:3b:34:bd:
fd:1f:05:ac:06:22:8e:99:6a:d2:29:09:6f:44:08:
10:de:23:b0:f3:17:79:f7:a4:89:18:7f:f6:27:e8:
8c:0d:4d:48:27:74:69:65:f3:1f:93:08:8f:8f:05:
d1:be:d1:5a:8b:f4:37:72:cb:05:0b:74:f6:b6:ba:
f2:e8:9e:44:6f:63:f2:13:6c:87:80:48:41:0f:74:
65:17:75:b1:bb:d6:bf:3e:db:41:32:34:d8:70:3d:
bc:9b:95:11:1e:e2:6d:fd:55:16:3a:44:10:6f:dd:
8d:8f:f3:ac:e5:1c:02:df:60:ad:77:94:b9:c5:09:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:79:A4:BF:21:22:45:02:BA:F5:98:62:3F:4B:C3:A1:FB:FB:B8
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/q915pL8hIkUCuvWYYj9Lw6H7-7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.141.192.0/18
80.240.16.0/20
95.179.128.0/17
185.92.220.0/22
192.248.128.0/18
199.247.0.0/19
209.250.224.0/19
217.69.0.0/20
IPv6:
2a05:f480:1000::-2a05:f480:37ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:a0:b2:1e:88:bf:a4:7e:6e:ab:65:f2:79:63:65:a3:da:00:
47:a8:43:b2:10:6c:c7:c7:8e:c0:90:1a:d4:22:8d:5b:f7:f4:
a6:8a:2a:29:30:86:0e:7b:1f:c4:90:6a:18:54:bd:be:bc:e5:
da:e7:c5:af:d1:6a:ab:16:bd:de:6f:cf:6f:ff:5f:63:6d:56:
e6:68:88:70:73:3b:e9:c5:72:ea:ce:0c:02:b8:9d:3a:39:9c:
94:d8:81:8b:aa:e4:0b:f4:6d:21:b1:ab:ad:3e:63:e9:a6:f6:
9c:38:a4:80:ec:6f:88:66:4c:fd:e8:ad:58:65:80:7b:c8:04:
ed:af:84:e6:5a:d1:3d:5b:74:a2:5b:4d:a8:d4:ee:c3:11:3d:
43:32:c6:93:ed:43:e5:2e:0e:cf:7f:6e:68:b4:48:90:a9:8a:
bb:2f:ab:f4:ab:ba:40:57:3a:c7:60:b0:02:8f:c6:6b:11:2c:
bb:40:d7:01:45:4c:0a:99:18:3c:34:32:83:db:66:d3:f1:d8:
d5:66:1e:09:ef:22:2a:b4:c7:8a:d9:8d:78:32:73:db:23:54:
ac:ca:44:05:52:c7:b4:3a:a1:29:8f:65:11:4c:28:84:0f:b9:
4a:15:3f:c3:e6:b9:3e:3b:10:26:7a:f9:d4:06:71:f7:94:ba:
d7:90:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:00 2025 by rpki-client