Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/KqR3j3tjxq-Ogk52w8RCtts8FYc.roa
File: KqR3j3tjxq-Ogk52w8RCtts8FYc.roa (raw, json)
Hash identifier: yULFZPZQR3sbMGfejyjoVRPuLBnpQGynjMPiACLh2XQ=
Subject key identifier: 2A:A4:77:8F:7B:63:C6:AF:8E:82:4E:76:C3:C4:42:B6:DB:3C:15:87
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 268FA6
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/KqR3j3tjxq-Ogk52w8RCtts8FYc.roa
Signing time: Sun 06 Feb 2022 11:46:03 +0000
ROA not before: Sun 06 Feb 2022 11:46:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212661
IP address blocks: 212.146.188.0/24 maxlen: 24
212.146.190.0/24 maxlen: 24
212.146.164.0/22 maxlen: 22
212.146.160.0/22 maxlen: 22
212.146.172.0/24 maxlen: 24
212.146.175.0/24 maxlen: 24
212.146.176.0/22 maxlen: 22
212.146.180.0/22 maxlen: 22
185.123.148.0/24 maxlen: 24
193.3.37.0/24 maxlen: 24
2a06:dac0:200::/44 maxlen: 44
2a06:dac0:100::/44 maxlen: 44
2a06:dac0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2527142 (0x268fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Feb 6 11:46:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa4778f7b63c6af8e824e76c3c442b6db3c1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:b1:0a:1f:d6:bc:f1:02:03:d5:0e:51:8f:
b2:b9:33:ca:fe:aa:41:61:58:ea:8c:70:de:ba:6d:
71:68:0d:29:f6:83:14:8c:6d:e0:1e:2d:eb:57:86:
3c:71:57:5f:f9:f3:05:ef:cb:84:82:17:b4:8e:30:
1e:3c:87:41:61:5a:eb:05:14:29:1b:56:6d:a0:1b:
86:47:06:92:3b:72:82:25:e7:b6:33:92:20:5f:3c:
4b:ba:58:cd:b4:65:81:6a:5b:9d:2d:e4:a2:5f:6d:
71:26:b1:95:44:47:90:2e:ef:69:3a:db:36:f2:a9:
e3:d3:6f:f7:81:9c:54:4a:50:eb:14:1f:0e:19:43:
d0:96:cb:e7:08:04:a6:03:ab:5c:1a:2b:59:0f:e2:
b5:87:d5:11:4d:ce:a4:60:d0:87:bb:82:ae:3d:a4:
6e:d4:0f:f8:e8:32:78:fc:e1:e8:5d:4c:e5:b9:69:
74:bd:d1:f9:e9:67:8c:79:62:29:15:1b:57:6a:8c:
b2:8d:6a:c0:81:06:b9:09:9a:a6:28:0a:f9:86:b4:
3d:0f:32:10:9e:e1:14:1b:8c:23:ae:d2:a8:d8:e9:
60:cd:fd:56:f2:bf:35:e9:71:66:4e:a2:47:74:9b:
cb:04:10:07:6f:f1:99:18:df:5d:b7:79:35:06:6f:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:77:8F:7B:63:C6:AF:8E:82:4E:76:C3:C4:42:B6:DB:3C:15:87
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/KqR3j3tjxq-Ogk52w8RCtts8FYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.148.0/24
193.3.37.0/24
212.146.160.0/21
212.146.172.0/24
212.146.175.0-212.146.183.255
212.146.188.0/24
212.146.190.0/24
IPv6:
2a06:dac0::/44
2a06:dac0:100::/44
2a06:dac0:200::/44
Signature Algorithm: sha256WithRSAEncryption
ac:c1:d0:96:5a:17:f4:c0:41:c9:03:e7:72:e6:4e:1a:09:b4:
93:e9:9a:b9:25:62:50:12:55:1f:b4:5d:45:86:35:f9:90:38:
64:e3:4e:d7:f7:aa:e9:ff:3e:72:3e:70:fc:15:80:c6:d0:e1:
d0:48:30:fc:d6:4c:be:a8:cb:f6:ac:91:5d:fc:71:0f:11:cd:
c3:17:66:2c:76:d7:66:c6:34:b4:e4:31:cf:58:6b:8f:3c:03:
f4:37:b4:e7:d2:18:87:75:bd:e5:4b:f9:57:0c:e9:a0:7d:01:
61:b5:13:78:7b:db:86:d4:e9:89:2c:3b:93:9b:66:0c:b7:5d:
60:b0:68:13:51:4c:e6:b0:13:7b:24:56:c3:5a:c5:81:41:ef:
e4:0b:30:14:29:70:2e:b6:1b:19:c4:31:de:4b:dd:ab:5b:bc:
3d:ee:e2:19:a4:16:08:d8:9f:09:51:29:74:c2:aa:dd:88:91:
90:4f:05:49:cb:9a:f5:d9:a9:2f:36:5b:f7:0e:59:6d:be:c7:
76:b3:75:a3:af:3a:d0:80:c6:ab:43:5a:02:98:62:5f:71:94:
2e:9c:0e:38:f3:6c:87:52:04:d6:bb:5c:42:34:f7:2c:3b:ca:
96:fe:02:25:3d:11:76:25:ba:83:52:84:25:5c:01:04:b7:76:
79:ad:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:58 2025 by rpki-client