Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/T_9BVG1sSltJfrg1mRLuTtsXG54.roa
File: T_9BVG1sSltJfrg1mRLuTtsXG54.roa (raw, json)
Hash identifier: WQ8uKWHZ0ppPLR4ZI93fEam1f6L6VyfMVPn6Pz5cPEI=
Subject key identifier: 4F:FF:41:54:6D:6C:4A:5B:49:7E:B8:35:99:12:EE:4E:DB:17:1B:9E
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01856CE5F6A227F8B462FB201750C5D9DC9B
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/T_9BVG1sSltJfrg1mRLuTtsXG54.roa
Signing time: Sun 01 Jan 2023 10:34:48 +0000
ROA not before: Sun 01 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 91.87.0.0/19 maxlen: 19
94.110.160.0/19 maxlen: 19
178.50.0.0/15 maxlen: 19
91.87.32.0/19 maxlen: 19
94.110.96.0/19 maxlen: 19
94.107.0.0/17 maxlen: 17
94.110.128.0/19 maxlen: 19
91.87.96.0/19 maxlen: 19
94.104.0.0/13 maxlen: 23
212.87.96.0/19 maxlen: 24
94.104.64.0/19 maxlen: 19
94.111.0.0/19 maxlen: 19
91.87.128.0/19 maxlen: 19
94.104.96.0/19 maxlen: 19
94.107.192.0/18 maxlen: 18
94.111.32.0/19 maxlen: 19
94.104.0.0/24 maxlen: 24
94.110.192.0/19 maxlen: 19
94.104.17.0/24 maxlen: 24
91.87.64.0/19 maxlen: 19
94.104.24.0/21 maxlen: 21
94.110.224.0/19 maxlen: 19
94.107.128.0/18 maxlen: 18
94.104.32.0/19 maxlen: 19
94.106.128.0/17 maxlen: 17
91.86.0.0/16 maxlen: 16
91.86.0.0/15 maxlen: 20
94.110.32.0/19 maxlen: 19
94.110.64.0/19 maxlen: 19
212.53.0.0/20 maxlen: 24
212.224.128.0/17 maxlen: 19
94.110.0.0/19 maxlen: 19
212.65.32.0/19 maxlen: 19
94.111.96.0/19 maxlen: 19
94.104.160.0/19 maxlen: 19
94.104.192.0/19 maxlen: 19
94.111.128.0/19 maxlen: 19
91.87.160.0/19 maxlen: 19
94.111.64.0/19 maxlen: 19
94.104.128.0/21 maxlen: 21
85.10.64.0/18 maxlen: 24
94.107.246.0/24 maxlen: 24
94.111.224.0/19 maxlen: 19
62.88.80.0/21 maxlen: 21
94.105.48.0/20 maxlen: 20
94.105.64.0/19 maxlen: 19
62.88.0.0/17 maxlen: 21
62.88.0.0/19 maxlen: 19
94.111.160.0/19 maxlen: 19
94.104.240.0/21 maxlen: 21
94.104.252.0/22 maxlen: 22
62.88.32.0/19 maxlen: 19
94.104.248.0/22 maxlen: 22
94.111.192.0/19 maxlen: 19
2a00:1868::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:f6:a2:27:f8:b4:62:fb:20:17:50:c5:d9:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jan 1 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fff41546d6c4a5b497eb8359912ee4edb171b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:25:65:90:3d:94:60:92:52:5c:45:52:5c:
a1:38:c2:97:33:dc:9b:1f:73:80:ad:7a:f7:ac:86:
62:e4:58:d8:0f:7c:0c:85:b6:9c:fd:db:75:7d:93:
60:d8:6d:e8:00:5d:8c:e3:e7:d5:42:86:4c:54:7a:
25:e4:92:ad:93:7c:73:01:fb:6f:61:ea:46:53:89:
f2:41:bc:07:fa:9c:bb:16:72:53:be:32:c7:7f:23:
8a:dc:8f:fd:af:18:8c:a7:ae:db:5e:f4:c9:42:84:
07:6e:82:59:da:2f:ea:93:08:f9:9d:83:2b:c7:7c:
0b:8b:2c:a6:29:e0:a8:ef:be:83:aa:3a:02:ff:44:
21:6c:d9:5f:ef:5a:85:92:65:f7:f9:47:ad:f0:b6:
58:5c:d0:3d:eb:07:56:5f:11:e3:8a:9e:4a:d8:f2:
90:12:46:5a:e4:39:f3:11:23:43:ef:f5:09:00:7e:
e4:c7:f2:c8:c1:83:4e:5a:65:29:64:19:f7:c3:6f:
9d:ee:cb:47:33:71:d1:cf:89:5f:41:cb:49:c9:f5:
a5:99:d2:90:6d:1a:4d:3e:f6:83:80:86:c4:67:ae:
1e:49:23:e2:9d:fc:c2:36:b7:89:00:e6:e5:6d:96:
4d:02:36:80:c8:90:c7:29:b1:43:6e:17:a7:d4:89:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:41:54:6D:6C:4A:5B:49:7E:B8:35:99:12:EE:4E:DB:17:1B:9E
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/T_9BVG1sSltJfrg1mRLuTtsXG54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.88.0.0/17
85.10.64.0/18
91.86.0.0/15
94.104.0.0/13
178.50.0.0/15
212.53.0.0/20
212.65.32.0/19
212.87.96.0/19
212.224.128.0/17
IPv6:
2a00:1868::/32
Signature Algorithm: sha256WithRSAEncryption
5e:b9:15:22:2b:4d:52:5d:2a:61:05:c8:82:07:c3:af:7e:6b:
76:0d:4a:a3:25:d2:53:51:95:a9:90:cc:69:16:01:e1:9d:1b:
d7:50:34:8d:e6:94:0f:45:07:35:81:ce:39:30:cc:86:00:4a:
d6:9d:8e:da:69:46:cb:f9:7e:e6:c1:36:23:18:85:b6:ce:29:
a5:21:ac:17:52:05:1d:12:86:b1:5a:fa:8b:c3:5b:b4:72:55:
1d:bf:e6:66:4d:52:a7:9b:54:6d:39:40:35:93:c2:91:d5:f8:
be:43:85:ab:e8:c6:54:f1:99:28:1f:4f:ce:9c:e8:e4:8c:fd:
77:a9:28:88:37:29:9a:16:45:f1:7b:c4:a7:00:be:78:9e:76:
a4:08:fa:2a:08:cf:ef:5c:25:95:2f:17:16:32:d8:38:a6:b7:
34:cb:58:48:b9:ce:7b:14:08:fb:a0:8c:7d:98:14:c9:cc:ef:
63:8a:5e:7f:f0:98:88:95:fb:f7:20:6f:89:67:c4:fd:aa:b6:
4e:c8:52:37:c9:ad:78:54:97:5c:73:75:32:56:ef:0e:67:b5:
16:0c:14:39:52:d2:d2:2d:4b:9d:fd:5a:18:34:35:f2:44:3c:
fb:d0:f2:83:e7:83:0d:c0:de:3a:8f:8c:68:9e:20:f6:6b:96:
af:b2:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:28 2025 by rpki-client