Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/m19U-HlI0lYo65OdCg1GZ8-HVbQ.roa
File: m19U-HlI0lYo65OdCg1GZ8-HVbQ.roa (raw, json)
Hash identifier: NY076rT2zF09gVPu/uLFppUZWr5x4Sz5bafDm/9z5QU=
Subject key identifier: 9B:5F:54:F8:79:48:D2:56:28:EB:93:9D:0A:0D:46:67:CF:87:55:B4
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 018571D7A92974141A8AF118FCE288B75A92
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/m19U-HlI0lYo65OdCg1GZ8-HVbQ.roa
Signing time: Mon 02 Jan 2023 09:37:16 +0000
ROA not before: Mon 02 Jan 2023 09:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21230
IP address blocks: 84.43.160.0/19 maxlen: 19
84.43.192.0/21 maxlen: 21
84.43.200.0/21 maxlen: 21
84.43.208.0/21 maxlen: 21
84.43.216.0/21 maxlen: 21
84.43.224.0/21 maxlen: 21
185.221.32.0/22 maxlen: 22
84.43.232.0/21 maxlen: 21
193.110.216.0/21 maxlen: 21
84.43.128.0/19 maxlen: 19
84.43.240.0/20 maxlen: 20
2a00:82a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a9:29:74:14:1a:8a:f1:18:fc:e2:88:b7:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Jan 2 09:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5f54f87948d25628eb939d0a0d4667cf8755b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:af:04:66:a0:11:07:ea:ed:4b:a3:7c:00:
33:86:0e:1c:42:d2:1e:4e:1e:92:a4:89:ba:b5:da:
5b:be:f5:8a:d9:33:25:7e:07:68:58:93:25:e5:fa:
f6:b5:e2:7a:3a:c0:a7:29:04:bb:04:af:40:ed:22:
25:34:f1:46:13:99:de:7e:80:d2:a3:e5:b0:c2:15:
dc:b2:e3:83:ad:d0:2a:6a:b2:4f:8a:6a:bf:89:fe:
fe:52:ff:08:54:67:66:3c:04:db:00:3b:3c:7e:52:
36:62:b8:02:9f:cf:bb:72:04:bd:cf:a6:03:11:62:
6c:31:5d:17:72:97:5e:5a:43:ef:0e:3c:1e:df:25:
d2:78:21:0f:64:0b:5f:2f:a9:1b:63:a3:e5:0c:e0:
e2:b1:5f:1a:53:24:1f:98:2a:e1:59:33:a0:cf:92:
a0:6f:12:dd:13:d5:99:3e:ae:a8:89:2f:53:74:f6:
6f:bc:5b:a2:45:cc:37:55:09:14:16:42:aa:dc:65:
3f:83:f2:f8:ab:c7:a4:97:ef:93:e1:22:69:34:42:
f6:f2:89:9b:bc:8f:c8:1f:18:75:a7:b9:e6:c9:18:
5f:c1:90:ed:d5:8e:bb:2b:65:52:e3:db:d2:93:b8:
29:12:9f:41:44:4a:e6:6f:81:e0:56:d5:14:ed:ab:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:54:F8:79:48:D2:56:28:EB:93:9D:0A:0D:46:67:CF:87:55:B4
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/m19U-HlI0lYo65OdCg1GZ8-HVbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.43.128.0/17
185.221.32.0/22
193.110.216.0/21
IPv6:
2a00:82a0::/32
Signature Algorithm: sha256WithRSAEncryption
25:1e:e1:18:ba:ec:19:f9:59:5e:1e:7b:10:3b:2f:eb:f8:89:
16:d6:d5:c4:b7:b8:3d:a4:40:2d:72:13:a3:a3:c0:7d:8b:4d:
5c:37:1a:63:3c:22:f4:db:7d:3a:40:8b:d1:ee:20:58:10:1e:
d0:e4:e3:c8:f8:f1:d3:b4:48:64:7c:e2:24:c2:8c:02:9b:93:
53:c2:92:af:a1:bb:09:04:22:c5:3a:42:b8:27:3c:02:37:e8:
ab:4b:f2:3e:92:e7:26:86:23:96:dc:8c:0b:c9:c1:84:84:bc:
76:11:38:be:4e:f6:20:49:92:16:31:37:b0:07:e2:7a:6f:06:
42:90:d1:e0:bc:f1:4c:ee:a5:0e:e4:13:b0:69:44:29:1b:76:
64:90:b8:c6:9f:e3:9a:cc:71:76:29:06:70:02:82:e6:53:25:
e6:cf:6a:9d:fc:3d:4e:b4:0e:4b:40:90:00:1c:d6:62:bc:f6:
dc:c2:3f:ed:f4:7e:b6:f2:37:cc:55:8f:85:bf:a9:fe:0e:40:
ca:4b:bd:63:cc:0a:11:bd:21:46:08:50:5f:0d:7d:b2:7e:a0:
a1:c6:35:e8:93:56:b0:5e:2c:ef:a6:b0:cb:19:1e:3b:46:7d:
b8:de:a9:80:d5:3e:3e:dd:49:6d:1d:04:39:e6:0b:3c:18:55:
85:ae:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:20 2025 by rpki-client