Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/BxRqptrClWZ6xvd0rL_nA2xeYw4.roa
File: BxRqptrClWZ6xvd0rL_nA2xeYw4.roa (raw, json)
Hash identifier: iaCnBCbgFg5P1wa9E4/hL9MAE3MA8WkbQFbe000UkLA=
Subject key identifier: 07:14:6A:A6:DA:C2:95:66:7A:C6:F7:74:AC:BF:E7:03:6C:5E:63:0E
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 0432ECB9
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/BxRqptrClWZ6xvd0rL_nA2xeYw4.roa
Signing time: Sat 01 Jan 2022 06:03:09 +0000
ROA not before: Sat 01 Jan 2022 06:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25252
IP address blocks: 171.25.128.0/21 maxlen: 21
193.221.28.0/24 maxlen: 24
193.221.36.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.32.0/22 maxlen: 22
193.221.47.0/24 maxlen: 24
193.221.53.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70446265 (0x432ecb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Jan 1 06:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07146aa6dac295667ac6f774acbfe7036c5e630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:30:03:32:e2:3b:ba:ba:fd:e6:52:19:d2:
85:2a:d9:41:16:94:30:f4:a3:45:89:24:86:77:7c:
ad:fb:65:e6:a9:d0:0c:66:4b:d7:1e:dc:70:c9:38:
7b:30:b0:6c:54:42:6e:79:29:46:d9:dd:1a:66:f8:
1c:5b:86:0d:19:b2:08:7c:15:26:a7:eb:25:66:7b:
53:81:62:84:88:64:a1:91:be:cb:f8:5d:1d:1c:61:
0e:18:fb:65:2d:d6:d4:ca:31:34:47:ed:e7:d7:76:
13:de:ac:de:aa:c2:0c:f6:58:c6:db:59:17:11:52:
c3:46:40:57:8d:2e:bb:8e:44:3c:ff:e4:b9:cf:d1:
b1:18:c7:79:9f:66:9f:b4:a8:ed:99:3a:4f:c6:f7:
57:2c:76:1f:b7:aa:96:7c:b2:38:05:77:4d:54:99:
fd:cc:d5:bf:ea:48:a6:f4:b7:ad:8f:13:05:1f:5d:
67:25:d5:8c:ef:36:4b:42:77:45:a4:b7:98:5b:30:
02:de:e1:b6:3c:4b:93:31:7e:d3:19:c9:d8:75:9f:
3f:f6:aa:76:44:23:4e:49:12:d3:ac:5b:bb:de:64:
7c:61:bd:d0:e7:6d:67:3a:36:a5:7e:1a:e1:7b:88:
b8:77:ee:0c:a6:02:ec:75:d3:17:6e:f1:8a:e7:33:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:6A:A6:DA:C2:95:66:7A:C6:F7:74:AC:BF:E7:03:6C:5E:63:0E
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/BxRqptrClWZ6xvd0rL_nA2xeYw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
193.221.28.0/24
193.221.32.0-193.221.38.255
193.221.47.0/24
193.221.52.0/23
193.221.59.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ef:03:d4:58:28:9b:c8:8c:20:5b:6d:52:c5:e1:b4:44:eb:
00:b1:c9:db:5a:e0:b1:fe:fd:3c:24:87:e0:78:5c:95:54:88:
7c:88:45:ee:36:ce:42:d1:ae:5d:d9:94:75:04:85:fc:d9:fb:
cc:a2:63:51:86:47:ed:d2:a6:d9:db:3f:e1:61:46:d9:bb:1a:
2e:52:50:3d:b7:12:7f:12:e5:6b:92:4a:fc:0d:83:f9:96:98:
a5:70:14:c6:94:c7:11:43:31:1e:a2:0d:b0:90:b9:99:49:79:
dc:70:7c:02:6a:dc:dd:ef:1a:79:26:04:7f:63:2f:d0:e7:91:
b9:a3:0e:56:5c:16:8e:92:86:b7:a2:9e:6f:26:9d:64:1e:59:
55:02:07:c0:a9:51:08:f0:5e:e6:80:fd:f3:e4:0f:60:3f:2b:
9b:8b:cd:a1:e5:3e:2e:e3:b9:e0:03:6a:f5:70:c4:64:0f:c3:
6f:3a:82:84:0f:c5:35:98:eb:0b:15:a1:ff:a4:9a:32:1a:12:
3b:ff:cf:2e:9b:9f:60:7f:e8:6b:74:2e:5f:12:0e:77:bf:44:
32:5b:55:16:8d:1d:72:6b:10:df:16:e9:76:fd:e6:1a:f4:d2:
45:ba:18:e4:fd:29:60:64:fa:17:44:dd:82:23:58:95:a3:91:
65:7f:db:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:53 2025 by rpki-client