Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s0MJW0ZA5xqKGEzHUmfApOJTnCg.roa
File: s0MJW0ZA5xqKGEzHUmfApOJTnCg.roa (raw, json)
Hash identifier: USZXB/Sz96/TMBsfiNwsU+tkx2+QqpBpjAburGt3pyg=
Subject key identifier: B3:43:09:5B:46:40:E7:1A:8A:18:4C:C7:52:67:C0:A4:E2:53:9C:28
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 05897EB6
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s0MJW0ZA5xqKGEzHUmfApOJTnCg.roa
Signing time: Sat 01 Jan 2022 12:02:02 +0000
ROA not before: Sat 01 Jan 2022 12:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9063
IP address blocks: 95.156.214.0/23 maxlen: 23
185.119.32.0/22 maxlen: 22
37.9.184.0/21 maxlen: 21
109.230.202.0/24 maxlen: 24
109.230.201.0/24 maxlen: 24
95.156.197.0/24 maxlen: 24
95.156.200.0/23 maxlen: 23
95.156.202.0/24 maxlen: 24
2a02:2dc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92896950 (0x5897eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jan 1 12:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b343095b4640e71a8a184cc75267c0a4e2539c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:e4:01:89:68:8d:eb:66:d4:1f:e5:d6:8d:
4e:c6:ac:5b:48:af:39:37:82:e5:7a:ad:34:e0:0b:
75:e5:ef:26:3e:5a:8c:4d:27:30:31:7f:49:2b:c2:
82:e0:71:9c:29:4a:f2:7e:87:53:d0:a2:5f:4c:e9:
48:ee:50:60:56:59:ba:1d:27:0c:29:1e:4c:63:75:
5d:30:f0:aa:49:07:57:57:51:c9:f8:8c:b1:cd:e8:
57:f0:b1:bf:44:c8:af:2c:9a:7b:c7:ee:a2:6c:35:
b8:be:af:fc:27:af:80:01:7e:21:aa:19:c0:f2:37:
7d:24:8e:64:46:02:d8:96:51:94:df:47:6a:02:88:
75:c9:56:c1:38:36:53:56:97:c2:d9:70:50:8a:b8:
43:d4:83:83:0e:87:75:9c:c0:97:00:21:c0:ce:66:
2b:a6:6e:d9:b4:f1:91:92:27:89:20:7b:dd:87:9c:
f5:97:9c:19:55:35:0a:49:f9:ca:8b:77:df:1b:9f:
ec:13:b8:be:13:ad:2a:e5:14:58:ec:02:66:26:4e:
6a:6f:67:89:87:81:29:75:63:70:56:67:9f:56:3f:
0e:fc:f4:69:c7:1c:01:a0:95:f9:13:a3:e6:61:c2:
ac:12:21:c9:88:73:cd:71:73:87:56:60:4a:e5:89:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:09:5B:46:40:E7:1A:8A:18:4C:C7:52:67:C0:A4:E2:53:9C:28
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s0MJW0ZA5xqKGEzHUmfApOJTnCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.184.0/21
95.156.197.0/24
95.156.200.0-95.156.202.255
95.156.214.0/23
109.230.201.0-109.230.202.255
185.119.32.0/22
IPv6:
2a02:2dc0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:8b:ce:25:d9:53:67:1a:bd:07:ac:6d:73:47:f1:27:48:76:
97:c0:65:bf:03:ea:4e:75:98:cb:f4:d8:48:7a:25:d0:a1:79:
92:a0:1a:23:3b:16:10:8d:73:87:0d:ab:89:61:0c:32:2c:af:
4d:ba:45:08:52:b3:8a:18:5d:18:3d:1d:ae:2a:1a:d3:de:76:
8d:9b:84:a7:41:2d:25:dc:76:3c:01:cf:d5:41:58:7e:e4:85:
aa:f5:49:71:7f:38:d6:44:43:ad:c1:15:3a:60:af:80:36:2e:
cf:8b:9e:f1:a0:0b:6c:5c:3a:aa:e7:a3:57:28:6c:bb:03:98:
bd:92:72:74:1e:ef:7e:76:5b:d1:ac:0d:55:c8:99:54:71:9a:
8e:3f:69:95:06:57:65:b4:e7:f9:10:64:21:7f:d1:b4:bf:11:
58:2e:53:bc:98:8b:40:cc:5e:85:ee:dc:3e:12:1a:e9:b0:cd:
ec:c8:43:0e:0f:a0:14:a4:64:d5:92:01:36:02:23:e7:4b:29:
3c:cb:b0:75:a7:7e:a1:6a:66:89:03:35:2f:2e:68:67:94:68:
a0:66:5b:f2:e3:9b:c0:4d:9f:7d:8e:b9:b8:1b:30:ac:b2:33:
6b:36:90:b6:45:ab:96:89:d8:b2:0d:31:0a:d5:51:f0:15:19:
90:c1:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:03:52 2025 by rpki-client