Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/pfwQYUJcOaD5OG83c2sK0K9prGg.roa
File: pfwQYUJcOaD5OG83c2sK0K9prGg.roa (raw, json)
Hash identifier: nWCdWSgfExej7q1oRNWMaInaLWNLfWLfJ63Xxui7xhs=
Subject key identifier: A5:FC:10:61:42:5C:39:A0:F9:38:6F:37:73:6B:0A:D0:AF:69:AC:68
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 062D1D75
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/pfwQYUJcOaD5OG83c2sK0K9prGg.roa
Signing time: Tue 26 Apr 2022 06:36:28 +0000
ROA not before: Tue 26 Apr 2022 06:36:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47262
IP address blocks: 212.120.192.0/19 maxlen: 19
46.245.0.0/18 maxlen: 20
95.81.64.0/24 maxlen: 24
95.81.66.0/23 maxlen: 23
95.81.65.0/24 maxlen: 24
95.81.68.0/22 maxlen: 22
95.81.68.0/23 maxlen: 23
95.81.104.0/21 maxlen: 21
2a00:d20::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103619957 (0x62d1d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Apr 26 06:36:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5fc1061425c39a0f9386f37736b0ad0af69ac68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:8e:1d:e5:0f:82:bd:02:9b:8f:3a:f5:a1:
12:0c:4e:ad:03:25:c4:0f:5b:3a:67:e1:85:b3:b9:
38:52:ea:76:cc:29:a6:99:dc:cb:11:d1:d0:32:4a:
68:ff:da:2c:f9:97:de:b0:0e:e2:0e:bf:a6:39:a7:
fe:2f:7e:99:55:07:4a:c1:2f:4f:55:e9:2a:c9:0d:
cf:ec:0e:6f:58:70:85:e5:17:c8:3c:d7:6f:9a:29:
fe:f3:69:ad:7b:6e:d1:61:e7:a3:e7:b3:77:5b:57:
62:98:c8:02:38:44:90:5b:df:6d:8d:34:ef:2d:7c:
dc:ee:69:ba:00:fc:d4:bd:89:ac:99:1c:45:8a:d1:
b5:77:e8:0e:32:94:c5:65:08:2c:6f:a4:71:0f:c3:
63:03:c7:37:6d:8e:4d:2a:88:62:55:e9:69:e5:12:
3c:93:ec:4a:50:a7:f5:e0:99:9a:88:a7:17:0a:93:
49:16:0e:26:2a:da:26:cb:02:8e:37:54:77:77:ae:
f3:7b:c8:56:1d:45:76:28:8a:b1:fc:4f:c6:c7:1c:
f3:52:2c:f3:dc:ff:96:22:1e:5d:c4:9f:a4:cd:f4:
8c:e8:bf:5a:1e:a7:8d:24:d1:57:09:66:67:8f:cb:
46:60:77:05:59:bb:f9:66:43:b2:54:2f:ba:10:fe:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:10:61:42:5C:39:A0:F9:38:6F:37:73:6B:0A:D0:AF:69:AC:68
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/pfwQYUJcOaD5OG83c2sK0K9prGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.0.0/18
95.81.64.0/21
95.81.104.0/21
212.120.192.0/19
IPv6:
2a00:d20::/32
Signature Algorithm: sha256WithRSAEncryption
23:34:3f:8c:76:b5:42:a0:58:39:dd:78:fa:f7:ed:92:75:05:
4f:be:3a:a1:c1:43:7a:6f:43:b3:70:09:73:68:05:2a:e1:ca:
75:16:91:09:72:7d:c8:05:09:50:7c:5c:b9:b5:3f:09:40:29:
b7:d7:2e:cb:ec:1f:cb:7a:08:17:47:e7:8f:ec:72:77:7a:3f:
cc:1a:66:df:5b:68:56:bf:1b:0d:5d:f2:0d:cb:2c:6d:e7:73:
5d:f8:c8:01:1c:1d:f8:70:27:f4:04:79:bd:1c:10:28:82:eb:
a2:32:6b:d7:02:97:00:d4:3b:09:48:e4:9c:0c:c0:ff:ae:48:
98:aa:eb:38:55:79:c0:6c:3d:e8:05:ae:4b:b7:e5:dd:f3:1d:
34:79:57:92:20:a7:45:d1:8a:9a:8b:3a:fc:a1:d8:0f:ed:e4:
3a:c5:e1:7f:13:79:d2:12:63:e0:38:66:93:51:3e:3f:07:be:
91:77:c6:18:ca:b4:17:ec:fb:43:fe:5c:fe:fa:93:a3:ed:c0:
a6:21:75:97:54:f5:78:d1:df:ae:fd:43:36:df:30:92:56:dc:
cd:31:19:11:fe:c5:38:43:41:89:c1:97:ad:79:ba:83:c9:e2:
e9:a0:43:55:24:97:0b:32:b5:7d:5a:d8:ad:ff:4a:d5:4e:e4:
26:4a:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:50 2025 by rpki-client