Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/j2aTZYk3BUJDRBQ1pL0LOJuhtU8.roa
File: j2aTZYk3BUJDRBQ1pL0LOJuhtU8.roa (raw, json)
Hash identifier: H5jViI0VTf0JkrHje2kPaVBCvtacoQyqxqX8AwJkFIo=
Subject key identifier: 8F:66:93:65:89:37:05:42:43:44:14:35:A4:BD:0B:38:9B:A1:B5:4F
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01889F6F5008DF4ACDFB9948857E575464A3
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/j2aTZYk3BUJDRBQ1pL0LOJuhtU8.roa
Signing time: Fri 09 Jun 2023 09:14:12 +0000
ROA not before: Fri 09 Jun 2023 09:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41039
IP address blocks: 92.242.96.0/19 maxlen: 24
195.184.192.0/19 maxlen: 24
5.153.176.0/23 maxlen: 23
5.153.179.0/24 maxlen: 24
5.153.178.0/24 maxlen: 24
5.153.185.0/24 maxlen: 24
5.153.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:6f:50:08:df:4a:cd:fb:99:48:85:7e:57:54:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 9 09:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f6693658937054243441435a4bd0b389ba1b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:8b:b7:0a:a5:89:63:da:56:54:f8:1a:82:
b3:d2:bd:72:13:f2:4a:fa:3f:15:91:d5:f3:1b:77:
1c:4c:49:d6:3e:01:fc:7d:16:25:6a:0a:1c:5a:7c:
dc:0f:ff:b9:f7:b2:21:a2:ef:7a:bf:0e:e5:d3:0b:
6b:2f:ca:2d:a4:4a:c4:01:61:0d:6c:3f:75:d1:cd:
21:3d:d4:e1:be:71:79:bd:63:a4:54:33:7e:38:bf:
42:57:9c:80:f9:9f:72:b0:24:73:c1:12:72:fa:a1:
d5:2f:d0:12:e5:59:36:06:f5:ec:06:d4:af:5b:16:
f7:d3:8e:d5:c5:d0:6b:7c:fa:11:72:c8:5d:0b:1c:
53:ac:5d:5d:14:72:ec:bb:6b:25:9c:e3:f0:b8:00:
ed:64:e2:8f:93:13:33:3d:3d:ca:75:89:0e:38:ac:
ca:56:bb:5e:af:0c:8a:8c:70:f5:59:f6:e8:0d:fd:
bb:eb:bf:02:95:1e:b1:97:06:1e:75:32:ea:10:47:
fd:3b:73:cf:bd:d5:f2:b0:22:4a:b6:1d:9d:62:b3:
e7:f3:33:db:b0:ed:15:e6:d3:e6:0c:80:32:5e:b0:
8e:40:52:19:7b:7b:05:02:a5:a1:2e:d4:d9:73:fa:
b3:dc:3e:c5:10:aa:6b:65:74:08:13:09:a7:da:71:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:93:65:89:37:05:42:43:44:14:35:A4:BD:0B:38:9B:A1:B5:4F
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/j2aTZYk3BUJDRBQ1pL0LOJuhtU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.176.0/22
5.153.181.0/24
5.153.185.0/24
92.242.96.0/19
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
57:e0:37:a4:ed:a8:e4:d2:7d:14:b5:f6:59:da:9f:db:e1:6d:
01:e0:bc:f1:e0:6e:b2:c1:60:80:05:c1:b6:1f:f5:de:ce:42:
d8:64:cc:7b:94:1a:9d:c9:f2:60:09:0d:cc:30:bf:e8:74:32:
b1:43:58:d7:f9:e7:73:7e:8f:e0:4f:ed:43:54:bc:d1:a2:66:
2b:0a:63:b8:f3:bf:bb:4a:07:42:6a:99:7d:b0:31:5b:8c:c0:
39:36:1c:8b:af:b6:39:8f:06:f7:80:30:d6:4f:7d:23:51:97:
e2:2a:8f:2b:da:e7:09:ca:64:8e:a1:c6:4d:be:a3:9b:29:83:
92:89:35:04:1e:2f:c4:c4:ae:90:c1:77:a5:28:ec:5e:27:75:
0a:a5:a8:21:d9:9d:61:fe:18:7d:bf:3c:bf:2b:6f:96:1e:73:
94:e3:11:10:33:0c:cf:ae:28:d9:5b:20:cb:72:45:b1:95:ca:
e1:f9:25:6a:03:82:d4:99:2c:0b:73:e1:d6:c9:c9:de:23:39:
4e:75:28:20:bb:64:37:0a:fa:6f:1e:d7:36:26:d3:dc:d2:9a:
5b:66:ca:e7:3a:34:ad:c3:eb:36:ca:d9:0e:28:57:16:78:77:
21:a8:12:80:9c:95:c6:c0:1c:16:d7:a4:b3:61:12:24:3a:20:
7c:eb:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:19 2025 by rpki-client