Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wPcUI69utAnY2YWnF5_phAfGq5I.roa
File: wPcUI69utAnY2YWnF5_phAfGq5I.roa (raw, json)
Hash identifier: EQAVEp1p/9GNdrniJvD5kIhrZOXfNSZu4F0uVputpts=
Subject key identifier: C0:F7:14:23:AF:6E:B4:09:D8:D9:85:A7:17:9F:E9:84:07:C6:AB:92
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0187004138CFC00C432535F4F9F427447817
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wPcUI69utAnY2YWnF5_phAfGq5I.roa
Signing time: Mon 20 Mar 2023 18:21:27 +0000
ROA not before: Mon 20 Mar 2023 18:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14340
IP address blocks: 194.145.16.0/21 maxlen: 24
159.92.0.0/16 maxlen: 24
161.71.0.0/17 maxlen: 24
163.79.128.0/17 maxlen: 24
151.106.128.0/20 maxlen: 24
185.79.140.0/22 maxlen: 24
194.145.0.0/20 maxlen: 24
85.222.128.0/19 maxlen: 24
163.76.128.0/17 maxlen: 24
151.106.216.0/22 maxlen: 24
161.71.128.0/17 maxlen: 24
151.106.220.0/22 maxlen: 24
151.106.144.0/20 maxlen: 24
160.8.0.0/16 maxlen: 24
2a03:5d60::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:41:38:cf:c0:0c:43:25:35:f4:f9:f4:27:44:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Mar 20 18:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0f71423af6eb409d8d985a7179fe98407c6ab92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:8c:f4:96:50:33:98:c4:29:1f:15:2f:ef:
1b:d4:56:40:cc:87:7f:44:16:bd:d0:8d:57:d9:f4:
b9:ee:7e:91:fe:80:f5:c1:11:a5:81:86:a4:9b:45:
77:c4:e7:1e:a5:cb:9c:e2:37:12:67:9e:22:88:21:
03:e4:71:57:60:4e:2e:88:50:27:e2:3b:5c:0e:25:
45:c3:b9:e2:7b:31:b1:da:d2:b4:b4:a9:c0:92:92:
6d:6c:28:29:c4:79:8f:98:d7:cf:2a:eb:41:87:96:
3d:06:36:95:48:3c:43:c1:f1:70:9f:46:54:18:f3:
90:c6:8d:a8:14:42:dd:2c:47:c1:93:ac:ae:25:c4:
82:94:89:f6:a7:cf:88:ce:89:49:c7:0e:62:91:2e:
8c:44:19:ff:4c:ce:dc:5a:24:e4:fc:ad:73:fe:24:
4d:74:d2:82:74:ac:1a:99:90:1c:50:19:5a:ea:9a:
dc:1f:4c:82:6c:5c:25:cd:5e:4a:94:dd:60:77:23:
f5:f9:32:a0:82:e9:87:76:61:30:5b:a9:bb:7c:7e:
31:44:ae:9e:ca:5a:73:fe:5b:bb:4c:a5:86:37:5e:
36:52:91:84:6e:5b:f4:7d:3e:34:00:a4:0c:e4:13:
21:4e:c0:70:92:6b:a3:05:60:6d:29:a9:b6:24:4c:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:14:23:AF:6E:B4:09:D8:D9:85:A7:17:9F:E9:84:07:C6:AB:92
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wPcUI69utAnY2YWnF5_phAfGq5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.128.0/19
151.106.128.0/19
151.106.216.0/21
159.92.0.0/16
160.8.0.0/16
161.71.0.0/16
163.76.128.0/17
163.79.128.0/17
185.79.140.0/22
194.145.0.0-194.145.23.255
IPv6:
2a03:5d60::/29
Signature Algorithm: sha256WithRSAEncryption
1e:1b:0e:b0:26:6a:18:f5:3c:eb:f5:5d:f9:27:70:84:86:06:
d4:08:29:a2:68:b1:a9:f3:9b:f1:6e:2a:c4:ec:34:4a:63:a9:
bc:ec:6f:cd:8a:54:53:34:d0:9d:a0:28:8d:5b:7e:04:e8:76:
ba:be:37:d6:d2:f2:f8:47:c6:db:1e:9d:e9:5c:64:b1:aa:1f:
e6:8e:9d:78:8e:cf:89:5e:e0:65:71:b5:4c:80:74:ab:12:78:
ca:ff:30:c4:74:17:d1:a8:28:f1:ed:41:16:01:e8:ce:48:31:
2e:6e:70:54:8d:df:cf:15:3d:df:a3:c3:02:44:e7:99:91:71:
54:d2:a1:10:e1:0f:a9:3c:ea:7e:9c:a3:cc:72:3f:b0:39:7b:
80:79:ad:3a:5b:aa:7a:d9:08:fe:a6:aa:71:78:ee:e3:7e:6b:
7c:3b:61:08:67:51:6a:b4:82:83:eb:64:be:11:c3:58:8a:eb:
66:f5:79:de:39:04:74:75:ce:26:dc:c2:d6:c9:70:7a:96:b7:
ae:22:a6:3e:fc:56:4e:d4:f7:c2:05:1e:2c:50:34:ba:40:74:
ba:71:d4:f4:41:8f:b7:2d:ef:8b:46:46:d4:7b:93:dc:15:97:
ae:2a:c6:dd:e9:2e:3f:65:39:98:60:9a:b1:60:fe:ab:42:e9:
c8:40:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:09 2025 by rpki-client