Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/2yIKYV8k-PNXFZA8_gyEGG3Qb_M.roa
File: 2yIKYV8k-PNXFZA8_gyEGG3Qb_M.roa (raw, json)
Hash identifier: RDt9pjgBIRX8Qjd6KSQKNlkEBxIFIxtKA7euE/l6yJs=
Subject key identifier: DB:22:0A:61:5F:24:F8:F3:57:15:90:3C:FE:0C:84:18:6D:D0:6F:F3
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 03867D98
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/2yIKYV8k-PNXFZA8_gyEGG3Qb_M.roa
Signing time: Sat 01 Jan 2022 11:55:46 +0000
ROA not before: Sat 01 Jan 2022 11:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44034
IP address blocks: 2.64.0.0/13 maxlen: 13
77.241.128.0/20 maxlen: 20
94.191.128.0/17 maxlen: 17
37.250.0.0/16 maxlen: 16
80.251.192.0/20 maxlen: 20
79.138.128.0/17 maxlen: 17
212.27.0.0/19 maxlen: 19
109.56.0.0/14 maxlen: 14
78.156.192.0/19 maxlen: 19
95.209.0.0/16 maxlen: 16
2a02:aa0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59145624 (0x3867d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Jan 1 11:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db220a615f24f8f35715903cfe0c84186dd06ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:cd:ff:82:c9:e6:01:f0:17:95:7c:7b:17:
b4:72:44:63:1b:bb:3b:d1:24:1d:93:11:a7:03:4b:
30:7e:e5:e1:cb:fb:5c:78:f1:42:49:76:d7:83:16:
bf:f4:1e:6d:e7:6a:eb:2f:da:c8:65:db:8a:31:c2:
ae:65:41:63:d1:ea:06:cb:02:6a:f2:7e:c5:c9:eb:
2d:47:49:ce:50:d1:58:d9:22:bb:dd:78:4e:7b:a4:
a7:89:79:65:b9:97:36:7e:0b:2d:54:cb:8c:8b:9d:
2a:7f:de:45:e6:3e:e9:e3:a4:04:7a:33:35:11:a0:
26:a8:fd:ca:06:86:27:49:d5:8f:a3:5c:6b:9f:06:
16:d0:65:d9:15:b5:1c:da:25:a5:b0:88:30:9b:24:
eb:b4:21:3f:bb:3c:13:66:70:3f:ef:dd:13:61:85:
19:6f:6c:f4:7d:e4:ed:7b:00:d9:5b:05:b9:ab:0f:
31:d5:84:15:b9:06:11:f9:a7:1d:6a:9a:0f:92:92:
37:7f:7a:ff:c1:99:a1:8f:05:df:57:8f:7a:be:84:
22:58:24:3e:bf:f5:42:99:ee:3b:22:9e:04:23:6c:
12:f5:66:7c:3f:cb:2f:04:ad:a9:6c:bf:cd:28:d1:
5e:34:45:a2:73:bf:c2:5c:f1:ba:f1:fe:de:bd:f6:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:0A:61:5F:24:F8:F3:57:15:90:3C:FE:0C:84:18:6D:D0:6F:F3
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/2yIKYV8k-PNXFZA8_gyEGG3Qb_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
Signature Algorithm: sha256WithRSAEncryption
49:04:ef:b3:6f:d8:c1:26:30:21:da:98:a4:3a:4f:5d:fa:ba:
7f:d6:d5:59:f1:9f:bb:31:bb:23:14:63:f5:6e:4b:34:15:15:
d8:9d:37:c8:11:84:31:5c:1c:fc:91:53:77:29:c8:a9:96:30:
15:5e:d2:54:91:bb:f5:d5:f3:fe:c9:8b:f4:05:30:43:0a:3b:
ab:f9:85:ba:d5:18:a6:9b:72:d3:c8:da:32:b7:ab:09:6d:3c:
74:31:b9:8c:aa:d7:50:44:f7:46:94:25:bf:e5:f9:2e:2b:d2:
0f:1a:79:15:af:1a:52:81:90:af:83:50:02:e9:c7:d0:d9:b4:
5c:51:a6:3e:93:dd:07:d7:97:75:da:36:f0:95:6f:cc:05:07:
23:b9:5b:2e:37:f4:f3:70:3d:97:22:ea:ca:c8:e4:4c:44:16:
67:4a:21:72:b7:63:4e:6a:47:73:a1:58:81:2c:d0:a7:f8:f3:
a7:1b:f1:1b:ae:78:86:e1:52:00:bb:39:94:05:c9:60:7f:95:
e7:30:85:82:c4:72:25:e3:97:49:fd:69:01:62:76:bb:ee:2d:
c4:1f:2a:15:ee:a9:0d:9e:92:7b:35:2c:68:dc:8f:68:2d:f1:
a5:14:31:8e:49:42:20:35:c8:60:fe:71:c2:00:d2:a2:f7:dd:
d1:61:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:48 2025 by rpki-client