Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/KljqtDEhySc1BVf43-Bdr8K3uAc.roa
File: KljqtDEhySc1BVf43-Bdr8K3uAc.roa (raw, json)
Hash identifier: 16ZFbldYf2IPBVsCY5JQhUK0r6iEFt/31d8A/cCcwzk=
Subject key identifier: 2A:58:EA:B4:31:21:C9:27:35:05:57:F8:DF:E0:5D:AF:C2:B7:B8:07
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 05C69B1C
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/KljqtDEhySc1BVf43-Bdr8K3uAc.roa
Signing time: Sat 01 Jan 2022 10:02:24 +0000
ROA not before: Sat 01 Jan 2022 10:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 80.86.192.0/24 maxlen: 24
80.86.199.0/24 maxlen: 24
80.86.196.0/24 maxlen: 24
80.86.198.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
81.221.251.0/24 maxlen: 24
81.221.250.0/24 maxlen: 24
81.221.253.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
81.221.255.0/24 maxlen: 24
194.191.17.0/24 maxlen: 24
194.191.16.0/24 maxlen: 24
212.59.186.0/24 maxlen: 24
212.59.184.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.21.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
212.59.189.0/24 maxlen: 24
212.59.188.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
82.195.224.0/24 maxlen: 24
82.195.226.0/24 maxlen: 24
82.195.225.0/24 maxlen: 24
82.195.227.0/24 maxlen: 24
2a01:2a8:2001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96901916 (0x5c69b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 10:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a58eab43121c927350557f8dfe05dafc2b7b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:85:66:bd:40:dc:85:81:d3:c8:89:a2:fb:
6c:86:3d:65:01:22:ef:ab:02:d2:dc:90:4c:b1:b3:
0c:c5:d8:5c:81:57:a6:29:29:36:fc:b4:63:05:8d:
a3:95:37:f6:03:13:03:10:97:b4:c3:94:ed:ee:dc:
38:56:9b:36:ce:60:6a:bb:7d:bc:01:76:58:65:25:
27:8f:2e:6c:35:f1:31:f3:f0:50:11:c9:cc:1d:06:
28:b7:de:be:c4:c8:08:1a:9b:c5:2b:7f:5b:0b:4d:
85:b4:99:f7:7e:01:dd:f7:0b:e3:ff:1e:dc:f4:9b:
20:fc:e5:50:12:9c:a0:72:92:0e:82:57:60:ab:2d:
0d:71:e0:eb:9c:dc:db:dd:40:65:8f:5d:a9:63:d0:
e1:00:85:78:c6:48:73:d9:49:40:7f:b3:22:45:7a:
b8:64:09:a7:01:36:99:c8:5c:65:b1:05:d1:33:f9:
dd:38:0c:cf:52:8c:17:a9:9e:3f:6a:64:9c:c7:11:
08:00:5f:ce:bf:af:f8:18:25:5a:ac:43:72:15:2c:
56:d1:16:95:07:fd:5a:db:64:75:b4:69:8d:2b:b3:
77:27:ca:c5:41:d3:32:0a:42:84:8c:bc:76:31:fe:
e1:d5:f9:4e:b1:d3:bb:64:9a:12:f5:f5:af:21:57:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:EA:B4:31:21:C9:27:35:05:57:F8:DF:E0:5D:AF:C2:B7:B8:07
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/KljqtDEhySc1BVf43-Bdr8K3uAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/23
80.86.196.0/24
80.86.198.0/23
81.221.250.0-81.221.255.255
82.195.224.0/22
194.191.16.0-194.191.21.255
194.191.24.0/23
212.59.184.0/24
212.59.186.0/24
212.59.188.0/23
IPv6:
2a01:2a8:2001::/48
Signature Algorithm: sha256WithRSAEncryption
ec:47:fa:a4:1a:f5:01:7b:ee:bf:71:2e:58:db:0b:6a:35:a4:
ac:81:2b:e2:c7:dc:72:13:0f:a7:5b:97:2f:eb:8d:6f:2d:ca:
9b:ce:65:a8:f1:d4:8b:17:52:53:2b:77:29:dd:37:9d:57:d6:
24:d6:43:a7:99:4e:3a:a3:89:0b:ae:0e:d4:62:f1:2c:d2:fe:
45:8c:57:92:d3:5b:99:57:bd:16:eb:db:0d:e6:66:42:59:b2:
42:d2:72:ab:bb:53:59:ed:ca:83:a5:98:36:f0:0b:3a:ff:86:
67:cc:ff:51:24:1b:73:a7:4b:96:db:26:97:e2:04:cc:6f:42:
8b:27:f6:43:15:b5:ab:6f:bc:d0:3d:d9:a3:60:b3:4f:b4:a1:
33:81:06:a1:4c:0f:fb:f5:c2:81:aa:78:57:d2:30:ea:bd:11:
16:f0:58:5c:24:68:f5:63:5d:35:5b:c9:10:e0:d5:bb:82:57:
e8:ec:f9:9b:f8:59:5b:58:5d:d7:6b:5c:b9:2c:d3:5b:bd:cf:
c9:1a:02:b1:74:29:f2:a8:79:0e:f9:7c:80:30:a1:9c:97:b7:
5f:5e:52:a7:53:63:cf:80:00:c7:17:ec:df:1b:40:a1:8f:f9:
98:b8:36:22:2b:f4:59:df:a4:69:47:f3:42:81:af:90:69:2c:
5f:e1:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:11 2025 by rpki-client