Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/kXWKry0HyYD8sQ_MgUt2btAC2Jk.roa
File: kXWKry0HyYD8sQ_MgUt2btAC2Jk.roa (raw, json)
Hash identifier: WAXtdAOgYgKvBfbZaJTl1QHdj/O7KZwVqMj5dUkhho0=
Subject key identifier: 91:75:8A:AF:2D:07:C9:80:FC:B1:0F:CC:81:4B:76:6E:D0:02:D8:99
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 023DC4F2
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/kXWKry0HyYD8sQ_MgUt2btAC2Jk.roa
Signing time: Sat 01 Jan 2022 07:04:23 +0000
ROA not before: Sat 01 Jan 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 149.62.176.0/21 maxlen: 21
5.158.81.0/24 maxlen: 24
5.158.80.0/24 maxlen: 24
5.158.83.0/24 maxlen: 24
37.235.37.0/24 maxlen: 24
37.235.32.0/21 maxlen: 21
37.235.33.0/24 maxlen: 24
2a01:b5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37602546 (0x23dc4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 1 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91758aaf2d07c980fcb10fcc814b766ed002d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:43:84:6c:a3:99:f3:fb:30:94:27:e4:d6:
36:8b:66:b2:bf:d4:5f:53:41:21:8e:d4:bb:0f:d0:
97:2b:56:4e:2c:91:88:e4:b3:2c:a6:d4:67:c3:41:
dd:6b:19:eb:d4:65:9e:d0:18:ab:9a:1c:0e:3d:c2:
0e:9c:ef:3a:c0:bf:19:86:4d:64:9c:90:b1:34:c0:
53:78:17:0b:ec:b1:f1:61:af:42:5c:fd:26:72:48:
d2:8c:38:f4:34:c1:10:de:74:e7:fe:8a:90:fb:f0:
60:b1:f3:7d:5a:9a:e0:7c:c5:e1:8b:21:89:03:b4:
ab:67:69:67:74:d6:ce:6b:0a:73:d5:f3:0b:55:48:
ac:55:71:50:84:17:86:aa:36:9c:5e:80:b7:f5:9b:
bb:6f:d0:93:f6:d4:44:f5:1c:fb:ba:86:38:e1:53:
28:98:28:dc:f4:de:50:5b:05:55:b9:85:25:62:9f:
51:f0:88:a9:d7:9b:6c:0a:56:13:c4:af:64:6f:07:
30:43:fb:bc:df:8c:d7:2a:dc:f9:17:84:d4:63:0f:
0d:17:0b:a2:10:c0:ec:22:46:d5:17:9b:15:78:5d:
02:a7:2b:63:86:e0:ee:0e:38:eb:d3:06:ac:a0:86:
d0:6e:5b:4b:65:b3:f2:64:ef:77:37:e4:ac:0e:cf:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:8A:AF:2D:07:C9:80:FC:B1:0F:CC:81:4B:76:6E:D0:02:D8:99
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/kXWKry0HyYD8sQ_MgUt2btAC2Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/23
5.158.83.0/24
37.235.32.0/21
149.62.176.0/21
IPv6:
2a01:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:ef:e9:61:65:2e:53:a0:76:7a:da:87:76:d8:cd:5d:fc:1a:
d2:b4:01:18:32:7b:bc:dd:ba:87:ea:a3:41:46:de:04:39:af:
74:0c:65:3b:dc:b6:d4:da:b2:a6:24:3c:2a:9e:98:17:4a:08:
a8:93:50:af:96:56:7f:9f:84:18:ed:55:7a:b7:23:3a:49:62:
f0:a7:66:fd:4b:e6:c4:2f:f5:70:e4:0b:f7:c2:e8:7e:31:bc:
9c:be:6f:bc:94:ea:cc:f9:f1:de:bb:15:65:1e:38:c3:c6:ea:
b2:6a:86:4b:87:db:70:49:af:ee:00:1b:18:7b:c0:27:d3:53:
e8:00:2e:6f:0f:cf:1d:67:26:0e:0f:39:bf:36:8b:fc:d4:f6:
e1:95:d3:c9:47:c2:37:8f:ef:de:5e:c4:8b:6b:94:45:66:a6:
41:76:d7:76:a5:39:5c:aa:b3:61:bd:45:5b:dd:3b:4a:be:27:
9b:40:de:67:c3:7c:12:ab:09:0d:3d:e3:ed:c2:e9:eb:46:6a:
7b:15:84:47:5a:90:0d:5c:0a:dd:08:53:2b:ed:34:39:cc:f0:
eb:1c:e9:81:d1:ea:53:3b:0b:bd:62:88:ef:76:ad:cb:85:9b:
1f:3a:ba:51:fe:a4:f7:4f:9f:f1:64:18:93:f2:1b:49:ca:56:
5c:37:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:41 2025 by rpki-client