Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5nnMt7vGj-FrUWWRqbYfkaTQxKw.roa
File: 5nnMt7vGj-FrUWWRqbYfkaTQxKw.roa (raw, json)
Hash identifier: RsL8kaTLe8U3rTa1CcnkRnGLra8krAp8NlaLT8RerGc=
Subject key identifier: E6:79:CC:B7:BB:C6:8F:E1:6B:51:65:91:A9:B6:1F:91:A4:D0:C4:AC
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 055160C1
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5nnMt7vGj-FrUWWRqbYfkaTQxKw.roa
Signing time: Sat 01 Jan 2022 09:55:25 +0000
ROA not before: Sat 01 Jan 2022 09:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39150
IP address blocks: 109.196.133.0/24 maxlen: 24
91.196.139.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
91.196.136.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89219265 (0x55160c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 09:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e679ccb7bbc68fe16b516591a9b61f91a4d0c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:d7:1f:82:d0:e1:8a:d5:4e:46:12:05:58:
9d:13:52:02:b9:ea:71:33:5a:25:a3:56:15:fc:1e:
7b:ca:62:f4:ce:e2:04:6b:4b:9b:46:e8:58:08:29:
3a:2e:70:01:7f:56:4e:51:3e:60:f1:82:d4:86:b1:
5b:2e:f6:f0:6c:9b:05:94:6b:2e:e1:72:fd:80:ab:
85:3e:c3:b2:12:d0:2d:27:80:f7:42:c4:14:fb:f7:
90:e7:1a:9a:cc:a9:e1:ce:86:00:0c:e1:0a:3e:eb:
44:91:07:33:0f:d0:0c:6d:44:5a:85:09:8c:42:9d:
2a:57:6a:97:9e:0e:67:21:3f:54:fb:a2:ee:ac:ea:
f7:6d:f0:a4:bb:2d:3e:5c:a2:30:ec:a2:5a:76:50:
92:4c:e4:fc:56:3d:8a:d1:e4:4a:cc:d2:6b:9f:20:
0c:74:dd:c9:46:ed:bc:ba:cf:66:da:c1:05:f3:ad:
0c:fb:a8:c4:d0:76:d8:c6:03:65:fe:fe:6b:ab:05:
a9:a6:ce:b1:33:7d:26:cd:ef:16:f9:fc:7c:81:10:
5a:0d:d3:62:c5:fc:3d:40:60:b1:75:fd:19:3c:a2:
74:1c:21:f5:72:fa:45:cd:92:44:30:98:e6:e2:a7:
4c:b3:c6:23:4e:eb:08:b5:96:75:12:04:ea:c9:4c:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:CC:B7:BB:C6:8F:E1:6B:51:65:91:A9:B6:1F:91:A4:D0:C4:AC
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/5nnMt7vGj-FrUWWRqbYfkaTQxKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/32
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
a0:9c:9b:04:d5:d1:61:a0:05:20:93:fd:e4:9c:de:e3:b3:a1:
71:02:f2:ba:30:d3:31:f0:71:bb:58:f3:d2:f1:3c:4b:8d:55:
9b:b8:b9:d0:0c:20:a6:04:e4:a5:cc:9c:da:34:99:aa:11:84:
50:a7:3d:2b:89:09:4a:fc:f5:b0:b6:75:8c:6d:6d:2b:87:73:
77:c9:03:e0:20:ae:5e:54:9a:9e:31:4f:ef:12:e8:3b:14:f0:
fb:f4:71:eb:10:da:a5:72:22:60:d5:0b:b0:0a:3b:b0:2d:66:
86:5f:b2:c3:f5:a1:a1:a4:91:21:ec:d9:af:2c:01:dc:90:21:
5c:72:2e:14:c4:b5:33:7b:7b:11:a0:10:ae:ce:b1:26:41:5d:
c5:86:d0:de:0b:22:47:6e:e1:46:6f:f8:c1:11:89:dc:df:40:
dd:df:01:27:79:4c:3c:41:dc:d3:5d:69:fb:ca:87:fd:fc:18:
4a:af:34:06:19:84:27:d0:51:a3:a7:72:76:6b:74:c6:8c:8a:
b8:e2:14:34:8c:a7:b4:63:ea:f9:71:4a:f6:03:28:1e:3c:1c:
72:06:de:fe:97:af:39:40:f4:52:5d:65:4b:60:91:98:d8:1c:
7e:65:39:d4:e4:2c:d2:23:67:61:e8:15:29:83:a1:34:89:bf:
bf:ea:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:33:19 2025 by rpki-client