Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/cE6eOPcb35Yt0JuopXUERkIurA4.roa
File: cE6eOPcb35Yt0JuopXUERkIurA4.roa (raw, json)
Hash identifier: NePaK1o7hHK6CRhAdx8SvaoFhDRxAGCtWEg58vkcfqc=
Subject key identifier: 70:4E:9E:38:F7:1B:DF:96:2D:D0:9B:A8:A5:75:04:46:42:2E:AC:0E
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 37BBC71F
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/cE6eOPcb35Yt0JuopXUERkIurA4.roa
Signing time: Sat 01 Jan 2022 12:06:53 +0000
ROA not before: Sat 01 Jan 2022 12:06:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15744
IP address blocks: 213.227.64.0/20 maxlen: 20
212.106.128.0/19 maxlen: 19
83.230.80.0/20 maxlen: 20
212.106.160.0/20 maxlen: 20
83.230.0.0/18 maxlen: 18
195.82.160.0/19 maxlen: 19
2a01:1df::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935053087 (0x37bbc71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 12:06:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=704e9e38f71bdf962dd09ba8a5750446422eac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:92:2a:00:3b:22:34:90:b1:a2:82:f9:dc:
10:06:9b:df:cb:27:c6:25:d9:e6:8c:f0:bc:f3:e1:
c4:b0:ae:e4:98:41:e4:04:0e:87:d8:0f:ee:75:f3:
09:00:7c:da:9c:93:07:e0:e4:cd:ca:af:8a:31:77:
65:3b:71:f7:9b:2e:f7:80:1a:2b:b4:48:b3:e0:19:
c4:9b:3d:8c:c8:40:22:0b:e9:bd:34:70:05:1a:46:
3f:50:82:62:fd:f8:7a:5a:d4:24:f6:04:2e:d1:cd:
82:9d:15:c2:9c:42:47:6c:d2:17:45:fb:94:ca:8f:
1a:91:b1:41:08:9d:a3:d5:c8:0f:8d:00:be:67:4c:
29:e8:bd:c0:fc:e5:cd:33:2b:33:09:b2:62:ab:d4:
fc:f1:07:f2:92:82:2a:27:90:e4:ea:21:71:5f:3c:
9a:52:f6:6f:82:b3:94:d3:ab:e5:f1:3f:02:0e:9a:
22:00:45:28:2c:fb:7f:94:70:1f:6b:c9:3b:23:f3:
5a:a3:98:20:4a:b0:8d:ea:2e:fc:87:c6:b7:89:b4:
8e:b2:23:9f:39:ff:76:d0:2e:46:fe:b8:56:78:7e:
7e:63:d8:88:8d:bc:70:d0:9c:5a:89:32:ed:c8:08:
52:26:01:a7:fc:53:f7:dc:3d:bd:a8:fd:59:fe:b4:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:9E:38:F7:1B:DF:96:2D:D0:9B:A8:A5:75:04:46:42:2E:AC:0E
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/cE6eOPcb35Yt0JuopXUERkIurA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.0.0/18
83.230.80.0/20
195.82.160.0/19
212.106.128.0-212.106.175.255
213.227.64.0/20
IPv6:
2a01:1df::/32
Signature Algorithm: sha256WithRSAEncryption
35:b5:b7:db:8f:95:a2:89:9e:69:1e:b6:71:cc:59:5a:4d:38:
68:a8:a5:74:99:b1:20:59:b3:b8:52:83:dc:b3:79:d4:4e:1b:
61:e1:c7:5e:57:59:05:43:f4:74:26:75:31:f1:14:a4:52:a5:
df:22:82:8e:b5:6e:78:87:85:13:63:3e:57:f7:27:bf:a2:ca:
f4:b0:6a:c4:8f:83:50:44:66:b4:96:c0:83:b7:44:6a:10:0f:
26:b6:91:0c:7b:37:25:a7:00:22:cc:05:01:51:53:33:84:55:
d6:87:b5:f3:5e:0c:ae:fa:38:a8:55:7d:77:db:2b:05:d7:e9:
e6:29:19:e5:be:1e:2d:bd:1e:f2:61:80:1a:c8:0b:2b:45:01:
28:b0:da:8b:3e:a1:f3:33:18:4b:a4:5c:92:66:11:d3:13:4e:
b5:41:4e:9e:f7:45:72:2e:fa:93:67:5f:0f:9d:17:e4:a3:06:
1d:b3:5f:55:fe:fd:0c:8b:b5:7b:6e:64:bb:47:63:15:28:43:
bc:1f:62:6b:9f:bc:fd:0f:e3:d8:e5:d0:a2:32:21:50:de:fa:
6c:63:67:37:b0:5b:f3:48:78:38:51:89:f5:93:76:a4:9b:78:
e1:f7:18:54:90:83:e1:85:87:f2:2e:42:c2:b3:6f:d1:bd:21:
38:ec:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:48 2025 by rpki-client