Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/pas0gliL9I9R1ex6DCOSSGT6kNE.roa
File: pas0gliL9I9R1ex6DCOSSGT6kNE.roa (raw, json)
Hash identifier: 5Ncckt9X3Yc4cnnHOlWJ2/Ksp/Yro6fg5A8jiqzdXdc=
Subject key identifier: A5:AB:34:82:58:8B:F4:8F:51:D5:EC:7A:0C:23:92:48:64:FA:90:D1
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 35B4241B
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/pas0gliL9I9R1ex6DCOSSGT6kNE.roa
Signing time: Sat 01 Jan 2022 16:06:28 +0000
ROA not before: Sat 01 Jan 2022 16:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25054
IP address blocks: 81.90.192.0/20 maxlen: 20
185.94.36.0/22 maxlen: 22
5.34.224.0/21 maxlen: 21
212.101.32.0/19 maxlen: 19
130.193.96.0/21 maxlen: 21
2a02:1318::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900998171 (0x35b4241b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 16:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5ab3482588bf48f51d5ec7a0c23924864fa90d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:2d:ff:86:87:26:65:e2:11:92:c4:0b:81:
d4:4d:04:4b:7b:5a:03:98:fd:3e:e0:30:43:67:ab:
3b:62:29:e0:ee:8a:57:d1:69:75:6c:ff:2e:6d:02:
fe:d4:91:0e:4d:87:1e:66:97:2c:ed:7a:9d:77:c4:
ed:a2:b6:36:8c:e5:1e:b4:b1:8d:04:97:64:73:19:
36:14:95:a8:1b:e9:5d:cf:1a:e5:a9:6e:78:e3:23:
bd:50:60:94:72:b1:0d:cd:ed:cb:b1:bf:8a:cb:ea:
ef:a9:d7:cb:dd:d3:31:82:9b:4a:83:89:cf:7b:7f:
6a:5e:b2:a5:8b:ae:09:c7:33:8b:e9:48:d7:a4:1e:
86:44:a4:69:a2:56:c7:a7:94:af:0b:f3:de:da:e2:
21:a6:bf:9b:97:4a:95:7f:cb:ef:37:5b:3a:36:94:
fc:94:5f:00:56:a2:a2:04:8c:8c:61:d9:70:2f:d5:
01:80:fa:a2:43:af:9e:16:cf:50:ae:22:00:52:ec:
84:10:6c:d2:40:60:41:b4:d2:79:11:28:f5:56:78:
77:b6:8d:69:bc:52:fc:66:30:46:43:6c:7d:e5:90:
dd:40:49:40:5e:f2:09:c2:03:ff:e0:a3:e8:52:21:
c7:55:88:35:b6:c6:52:a9:34:8d:35:bb:ae:9f:54:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:34:82:58:8B:F4:8F:51:D5:EC:7A:0C:23:92:48:64:FA:90:D1
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/pas0gliL9I9R1ex6DCOSSGT6kNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.224.0/21
81.90.192.0/20
130.193.96.0/21
185.94.36.0/22
212.101.32.0/19
IPv6:
2a02:1318::/32
Signature Algorithm: sha256WithRSAEncryption
b1:17:48:19:f4:f5:1e:4e:00:76:e7:ed:f3:41:ef:d6:18:74:
c3:da:dd:4e:42:34:f9:71:ae:f4:80:04:56:d3:f0:a2:dc:5d:
f1:3a:22:60:3f:a6:e6:a4:c3:94:66:9a:74:41:fd:fa:e2:00:
64:a7:2b:0d:14:39:5b:8c:3a:a6:99:a1:51:29:82:67:c9:a1:
6a:ce:f6:a0:e1:da:5c:21:0c:3e:24:c2:27:3d:96:20:8c:5a:
cc:4f:30:32:4b:85:26:a9:45:04:d9:91:2d:b9:3e:e6:3e:0d:
c0:3d:ee:90:b4:72:3a:6f:85:3f:81:80:cc:8e:d3:9e:76:3f:
ae:1e:bd:43:b6:68:9f:9d:52:bd:4c:69:95:0e:66:e3:6f:71:
2a:d1:0b:52:0d:50:34:02:dc:c6:5c:48:a0:3a:f7:1b:cd:e5:
60:52:77:3a:00:2b:62:49:28:e4:8b:c6:be:b1:ba:44:f8:9e:
30:09:1e:9a:c5:dc:18:3e:3d:0e:8a:0c:be:e2:3a:13:2c:e2:
fb:fa:34:2b:5e:30:9e:2d:9f:6f:81:a5:7f:b9:6d:6a:bc:59:
de:d5:69:b7:34:e5:09:7d:3b:d8:87:a1:ee:d0:2e:c5:8e:74:
cb:e7:da:80:95:37:f1:e6:50:03:5c:9f:d0:1d:03:28:6a:94:
79:11:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:08 2025 by rpki-client