Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/9EhIid1r8xavxrfdAlUoPqZWDxU.roa
File: 9EhIid1r8xavxrfdAlUoPqZWDxU.roa (raw, json)
Hash identifier: UeY+cmQPTNxp72SozYdbeU0Hw/kzzgQ/kDPcxS6smIQ=
Subject key identifier: F4:48:48:89:DD:6B:F3:16:AF:C6:B7:DD:02:55:28:3E:A6:56:0F:15
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0189BBB65E34ED3B740422ED57A1745E8AD3
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/9EhIid1r8xavxrfdAlUoPqZWDxU.roa
Signing time: Thu 03 Aug 2023 14:03:58 +0000
ROA not before: Thu 03 Aug 2023 14:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198203
IP address blocks: 81.4.108.0/22 maxlen: 24
81.4.124.0/22 maxlen: 24
81.4.120.0/22 maxlen: 24
185.34.219.0/24 maxlen: 24
185.34.218.0/24 maxlen: 24
185.34.216.0/24 maxlen: 24
91.229.232.0/24 maxlen: 24
81.4.104.0/22 maxlen: 24
81.4.100.0/22 maxlen: 24
185.56.60.0/22 maxlen: 24
185.56.61.0/24 maxlen: 24
176.56.224.0/20 maxlen: 24
176.56.232.0/24 maxlen: 24
176.56.237.0/24 maxlen: 24
176.56.238.0/24 maxlen: 24
176.56.236.0/24 maxlen: 24
2a00:d880::/32 maxlen: 48
2a00:d880:4::/48 maxlen: 48
2a02:50e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:b6:5e:34:ed:3b:74:04:22:ed:57:a1:74:5e:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Aug 3 14:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4484889dd6bf316afc6b7dd0255283ea6560f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:00:c1:88:c4:27:5d:15:da:79:dd:5a:73:
9a:a6:59:91:ff:7e:24:72:45:71:be:24:5f:62:90:
17:a4:dd:8e:0b:58:5b:34:93:59:75:f4:d4:68:ca:
47:11:5a:39:f7:e0:9c:5c:8b:1e:76:76:d6:d2:20:
dc:c4:75:89:83:ab:34:fd:0c:f9:69:c0:9b:1b:d9:
60:f7:5c:93:48:69:c1:66:66:f3:cb:ce:f2:b8:c9:
f0:21:b3:12:c2:99:2c:02:3a:3c:19:6d:d7:cd:7e:
b6:80:0b:c5:be:93:77:08:ab:34:17:3d:29:ec:34:
08:7a:2e:42:ab:fa:dd:71:4b:2f:08:4d:b9:92:84:
db:66:ad:b9:a2:7a:29:2a:4e:d2:5c:70:26:db:62:
d5:6c:8a:cd:5a:f5:6e:08:23:e3:50:8a:d8:55:1e:
22:83:db:f1:67:26:2d:0c:6f:b1:7a:47:81:e1:b3:
01:34:1a:d0:e3:c5:40:4f:1b:18:dd:0f:15:41:17:
f5:a1:ea:a6:df:d3:09:be:90:64:89:78:95:3b:c7:
c9:b4:1d:cb:e3:82:15:25:d2:0c:bc:d1:f1:5b:c8:
57:a9:1b:22:53:5f:98:15:2a:07:97:b5:32:5e:29:
ef:45:f3:49:88:50:e2:a8:f9:37:cf:f2:85:c5:bf:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:48:89:DD:6B:F3:16:AF:C6:B7:DD:02:55:28:3E:A6:56:0F:15
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/9EhIid1r8xavxrfdAlUoPqZWDxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.100.0-81.4.111.255
81.4.120.0/21
91.229.232.0/24
176.56.224.0/20
185.34.216.0/24
185.34.218.0/23
185.56.60.0/22
IPv6:
2a00:d880::/32
2a02:50e0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:00:e8:94:42:de:91:54:8a:d1:ed:ca:cb:8e:98:6b:6f:34:
c6:14:ba:1a:85:2b:80:92:74:2d:4a:53:8e:0a:f4:aa:fb:83:
7a:8a:a8:05:e3:06:97:cd:e2:d3:61:53:16:78:3f:58:b5:0f:
7f:52:07:57:ab:e5:c0:3a:31:77:8d:29:8c:45:91:b4:b2:0a:
a6:5a:ec:c5:1e:98:95:12:16:32:11:62:31:52:4a:57:26:7c:
cd:fb:01:4d:e1:0a:0c:ba:93:3a:04:99:46:a8:b5:8d:ff:a8:
88:d3:30:2f:c7:d8:f8:b0:8f:93:99:fc:bc:2a:ea:e8:c1:3a:
db:53:6a:67:50:c7:36:b3:0e:e0:4f:71:c0:51:0c:57:bf:94:
cc:f3:e9:49:7d:2b:48:ef:91:33:68:6b:35:5c:fa:c7:d5:a1:
db:84:46:e4:7f:0f:da:6f:a0:69:5a:22:af:60:ad:e0:84:4e:
12:60:7a:78:59:74:ac:ae:38:38:a9:c3:6d:2d:4e:f2:8d:cd:
8a:ea:df:c3:a6:10:7d:66:66:0f:5a:ee:2a:cf:37:17:7b:83:
24:33:42:7f:a3:11:d7:69:a7:fe:34:cb:84:9e:74:e3:a9:13:
fe:6c:e9:8c:b2:e9:fa:c6:96:d5:a8:9f:72:49:13:84:5d:f0:
fe:ad:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:18:13 2025 by rpki-client