Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CPLniKNNPg6kRAB77odC93thcPs.roa
File: CPLniKNNPg6kRAB77odC93thcPs.roa (raw, json)
Hash identifier: NVhrSPHY6tF38NfLZHNtLiwaIhQ3Dgnoym614QWnKCE=
Subject key identifier: 08:F2:E7:88:A3:4D:3E:0E:A4:44:00:7B:EE:87:42:F7:7B:61:70:FB
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 04FC97F4
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CPLniKNNPg6kRAB77odC93thcPs.roa
Signing time: Thu 14 Apr 2022 06:32:17 +0000
ROA not before: Thu 14 Apr 2022 06:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29667
IP address blocks: 84.22.27.0/24 maxlen: 24
84.22.28.0/24 maxlen: 24
84.22.25.0/24 maxlen: 24
78.130.136.0/22 maxlen: 22
78.130.142.0/24 maxlen: 24
78.130.140.0/23 maxlen: 23
84.22.2.0/23 maxlen: 23
84.22.4.0/23 maxlen: 23
87.116.96.0/20 maxlen: 20
89.25.112.0/22 maxlen: 22
89.25.118.0/24 maxlen: 24
89.25.112.0/21 maxlen: 21
89.25.116.0/23 maxlen: 23
89.25.16.0/22 maxlen: 22
89.25.24.0/21 maxlen: 21
87.118.142.0/24 maxlen: 24
89.25.26.0/23 maxlen: 23
89.25.28.0/22 maxlen: 22
89.25.25.0/24 maxlen: 24
87.118.156.0/22 maxlen: 22
78.130.132.0/22 maxlen: 22
213.145.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83662836 (0x4fc97f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Apr 14 06:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08f2e788a34d3e0ea444007bee8742f77b6170fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:d2:90:68:66:97:08:c2:dd:13:76:c9:ef:
b0:fa:34:08:6f:6e:a3:91:f8:db:10:39:8f:42:21:
55:17:b4:44:c6:02:ab:10:7c:e0:84:57:c9:6a:40:
28:50:6a:f8:79:d7:c2:2d:e3:5c:bf:98:73:bb:9f:
6f:4c:5f:bf:e2:ad:04:79:88:d9:a2:ac:10:ac:91:
04:87:0c:e7:fb:b1:98:7c:c6:eb:2e:71:8c:9c:37:
6f:2f:4a:7a:71:df:9f:ec:e4:d0:3f:96:11:c2:a5:
dc:6c:84:ed:ad:19:c5:c0:bd:12:9c:68:a2:20:aa:
d5:58:73:9e:41:a3:96:6d:7c:7f:a9:28:72:42:3e:
6b:f0:43:4b:57:d7:0e:c9:86:65:27:cc:7e:fb:b9:
ce:3e:ec:9e:c7:24:fd:d6:d4:4e:36:2a:be:d9:e6:
39:03:b2:17:10:2f:55:36:17:2d:23:91:9b:01:9d:
31:42:52:09:3b:56:20:53:e6:0e:22:79:88:3b:d2:
39:d2:79:eb:a0:d4:e9:36:4a:39:5f:61:5b:1c:aa:
c4:20:86:59:83:de:0a:e5:d1:4d:6b:6d:a2:ae:a6:
6a:9f:72:d0:5c:14:2a:03:84:f5:c2:7b:e9:87:bf:
00:43:ce:f6:62:23:06:01:91:2e:4d:aa:a1:a5:c1:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:E7:88:A3:4D:3E:0E:A4:44:00:7B:EE:87:42:F7:7B:61:70:FB
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CPLniKNNPg6kRAB77odC93thcPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.132.0-78.130.142.255
84.22.2.0-84.22.5.255
84.22.25.0/24
84.22.27.0-84.22.28.255
87.116.96.0/20
87.118.142.0/24
87.118.156.0/22
89.25.16.0/22
89.25.24.0/21
89.25.112.0/21
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:97:0f:bf:b6:dd:51:f2:6d:d9:01:13:df:98:4f:0a:96:b2:
a2:f1:93:da:d3:fc:72:19:50:00:bc:86:b7:27:61:b4:a9:e6:
79:a9:df:ff:b8:f0:95:f6:fd:95:a8:08:4c:59:ef:43:38:dd:
ec:a7:60:bf:aa:f9:e0:58:d1:78:0b:67:7f:c1:6f:1c:88:c4:
b7:35:d2:57:ed:a6:cb:5b:bb:cd:ce:d8:28:ea:4e:8b:d5:e3:
93:69:f6:5f:d8:10:aa:64:e6:94:2b:ac:97:77:bd:1d:3c:99:
6e:71:e0:93:7a:01:1b:4b:cc:d3:82:04:42:4a:cf:6f:51:08:
28:b9:58:53:ab:30:38:ff:c2:5c:a8:5f:75:68:76:76:4e:2a:
7f:39:77:7a:6b:26:79:f7:32:70:e6:f7:68:e1:9e:11:77:e4:
60:a9:3e:84:e6:23:5d:be:4c:23:16:33:f4:04:03:c4:e8:f1:
d8:00:b3:65:63:17:a4:2a:78:0f:5f:e8:d6:8f:61:d9:00:51:
80:88:d8:8a:8c:fe:01:26:ab:47:4a:00:67:4b:a8:8c:77:42:
45:88:d9:90:fe:87:26:d8:25:ac:bf:91:46:06:67:42:e4:88:
de:a8:92:25:85:07:57:0a:2c:0d:2f:6a:ad:48:30:78:a7:b9:
e5:68:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:04 2025 by rpki-client