Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/btOVutWrrxZZlTmUEGVoF1SC5rE.roa
File: btOVutWrrxZZlTmUEGVoF1SC5rE.roa (raw, json)
Hash identifier: HkeCDuPNMCX9P6NPHeP87gA+EoYowYAmJbKRBBMK02M=
Subject key identifier: 6E:D3:95:BA:D5:AB:AF:16:59:95:39:94:10:65:68:17:54:82:E6:B1
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01856E54219E6F8024675079CE934B8400DC
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/btOVutWrrxZZlTmUEGVoF1SC5rE.roa
Signing time: Sun 01 Jan 2023 17:14:45 +0000
ROA not before: Sun 01 Jan 2023 17:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5400
IP address blocks: 212.8.160.0/19 maxlen: 19
212.41.128.0/19 maxlen: 19
62.173.192.0/18 maxlen: 18
62.102.0.0/17 maxlen: 17
195.90.64.0/19 maxlen: 19
194.213.64.0/19 maxlen: 19
195.100.0.0/16 maxlen: 16
212.127.0.0/19 maxlen: 19
212.21.192.0/19 maxlen: 19
213.15.0.0/16 maxlen: 16
62.5.0.0/17 maxlen: 17
213.236.64.0/18 maxlen: 18
195.182.96.0/19 maxlen: 19
195.163.0.0/16 maxlen: 16
185.94.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:21:9e:6f:80:24:67:50:79:ce:93:4b:84:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Jan 1 17:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ed395bad5abaf1659953994106568175482e6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:69:45:69:e2:a3:27:74:94:d2:4e:06:cc:
c1:45:98:ff:13:65:ca:86:dd:b5:ee:a6:a5:63:8c:
1d:4c:91:40:c7:d1:6d:51:72:2d:b6:eb:54:e2:88:
7c:5b:28:71:67:e9:78:12:af:c0:ff:e7:6c:e8:45:
7d:20:4d:25:61:c2:75:cd:08:96:7a:3b:5b:cc:12:
e4:78:98:84:5c:2b:66:c8:38:41:ae:4d:d5:c9:71:
6d:03:69:80:30:d9:e8:f0:f4:43:4d:bb:9a:0a:f4:
03:6a:51:9d:dc:f5:a9:f1:c6:21:3c:de:08:fa:c6:
61:52:cc:17:cc:44:eb:29:28:24:b5:fb:9e:88:23:
31:d3:d4:b7:37:9f:74:da:5a:c5:02:6a:65:d7:50:
cd:4d:b4:a1:24:ee:a9:f2:02:de:cd:24:9b:61:ee:
ab:a3:c7:22:c6:88:dd:e1:16:45:f6:33:2b:c7:11:
1c:52:2a:5e:eb:be:9e:1f:13:a9:77:7c:de:82:a5:
b2:37:ad:c9:c5:19:12:db:0c:5f:dd:12:9e:73:5f:
09:82:20:be:38:5a:aa:e0:87:aa:09:1e:bb:60:4c:
13:a3:c1:43:50:29:43:4a:54:61:bb:2c:90:6f:d7:
87:1d:d5:54:c5:ac:64:3d:25:a9:5a:8b:8c:5d:02:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:95:BA:D5:AB:AF:16:59:95:39:94:10:65:68:17:54:82:E6:B1
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/btOVutWrrxZZlTmUEGVoF1SC5rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.5.0.0/17
62.102.0.0/17
62.173.192.0/18
185.94.0.0/22
194.213.64.0/19
195.90.64.0/19
195.100.0.0/16
195.163.0.0/16
195.182.96.0/19
212.8.160.0/19
212.21.192.0/19
212.41.128.0/19
212.127.0.0/19
213.15.0.0/16
213.236.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:42:a2:b7:66:b9:b0:db:30:8e:23:56:1f:1a:ad:d3:c4:e4:
69:77:63:b7:f3:81:9d:70:11:8b:9b:e8:9a:41:b1:5b:50:34:
a1:25:c6:be:42:22:cb:72:ab:0c:e5:61:9a:5e:f7:9c:23:8f:
bd:66:7b:c6:f2:b9:e5:17:7f:f1:12:8b:6e:6e:4f:a8:33:0c:
14:d0:63:4b:73:38:04:74:93:b0:b3:f7:c4:72:a3:7e:37:f3:
b1:56:d0:2e:47:72:f0:4a:86:00:ca:59:4a:34:85:4e:82:5b:
41:e2:93:ca:40:9c:4a:e7:69:31:cd:7e:92:f3:52:d8:dc:1a:
d0:41:da:63:61:0e:15:c8:24:5e:6a:be:f0:1d:7f:04:b4:f6:
22:d7:0c:26:4d:cc:68:24:a5:7e:56:d9:4c:8d:4f:54:84:c2:
5b:82:2c:90:13:5e:32:89:30:9d:0d:fb:60:74:0b:2b:ad:f2:
8a:ff:02:b5:cf:95:0b:6b:2d:cf:b0:85:f9:57:89:70:b8:8d:
c8:8a:5c:40:89:1e:4e:f2:90:04:84:4b:34:f6:1d:bf:72:58:
ce:9b:b2:98:ac:e8:ec:74:f8:dc:1a:14:0e:e3:57:43:a7:63:
de:ee:39:94:6d:f1:1b:45:d6:75:d5:29:b6:ea:05:a2:28:1b:
40:8d:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:44:59 2025 by rpki-client