Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zYrqwPBZve2pEQvM-6_PoKR3ibw.roa
File: zYrqwPBZve2pEQvM-6_PoKR3ibw.roa (raw, json)
Hash identifier: jaNYhcPKihFBrFS1rOYumTlnhRyLbdTmIxX3kXpveqQ=
Subject key identifier: CD:8A:EA:C0:F0:59:BD:ED:A9:11:0B:CC:FB:AF:CF:A0:A4:77:89:BC
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1AF91E46
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zYrqwPBZve2pEQvM-6_PoKR3ibw.roa
Signing time: Sat 01 Jan 2022 13:05:41 +0000
ROA not before: Sat 01 Jan 2022 13:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12626
IP address blocks: 213.203.64.0/18 maxlen: 18
212.30.96.0/19 maxlen: 19
62.62.128.0/17 maxlen: 17
81.185.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452533830 (0x1af91e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 13:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd8aeac0f059bdeda9110bccfbafcfa0a47789bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:a5:59:9c:6e:bb:b2:14:ed:61:8e:ca:c4:
fc:0e:44:4d:a9:8a:b3:60:5e:a4:72:d3:61:32:5e:
b1:35:ef:b7:b1:a0:30:93:75:47:72:21:9f:6c:61:
53:38:2c:19:74:9f:49:fb:f9:eb:01:81:a9:cf:cf:
b4:bb:43:64:33:8d:42:bc:f5:04:5e:21:cf:81:41:
1d:2e:96:57:86:12:00:7a:dc:8e:c0:f9:eb:5b:f7:
0b:de:71:6c:e9:72:73:48:b1:cd:26:8e:c3:dc:f1:
20:07:55:b6:96:5a:23:ea:7f:19:a9:b7:15:f9:58:
36:3c:25:b6:0e:d1:9b:2f:8f:2e:7e:89:00:ac:12:
f4:9e:61:76:92:15:04:ca:35:a7:45:4c:24:26:dc:
4b:5a:6d:f8:18:ef:86:05:d8:15:bf:3d:8c:66:4a:
2f:5e:d2:9a:63:63:8f:4c:dc:3f:07:48:82:02:25:
c8:6c:b4:7f:6c:d7:e6:46:36:96:9c:66:ee:6e:32:
9d:98:25:fa:48:fd:83:1c:83:d0:98:5c:b2:e1:45:
61:e9:d2:26:70:e3:0c:d7:89:78:8e:25:30:c8:1b:
93:5c:e8:42:0b:6e:ef:39:cc:59:87:dd:f0:31:94:
be:51:5d:45:43:21:01:e7:1f:a8:d9:28:1a:89:bd:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:EA:C0:F0:59:BD:ED:A9:11:0B:CC:FB:AF:CF:A0:A4:77:89:BC
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zYrqwPBZve2pEQvM-6_PoKR3ibw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.128.0/17
81.185.0.0/16
212.30.96.0/19
213.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
44:ac:86:55:4e:f2:21:f1:4c:64:ae:3d:09:a3:6d:ed:a6:8e:
41:12:8e:e1:bd:62:46:3f:fb:8c:c1:63:ac:33:7d:c9:46:01:
33:69:fd:f5:56:33:a2:5b:be:0b:ff:49:18:51:4e:c0:25:20:
61:8c:de:a2:f3:42:cd:c7:84:70:d4:34:18:86:c0:4b:7b:9c:
c8:09:ae:19:b4:38:16:2b:eb:d1:7d:01:7a:64:10:d4:67:15:
fb:d5:6f:e3:b6:ee:34:62:d2:9f:cf:6a:6f:37:74:d7:2e:41:
f5:75:93:bd:b5:e7:c5:b7:8a:bf:52:46:a7:89:7b:f3:1d:a3:
53:1d:5d:53:a6:db:fa:99:e6:8c:2a:fa:84:67:86:74:bc:df:
ce:67:b6:0b:73:61:41:bb:87:5f:ed:1c:c9:cf:2c:89:74:3d:
71:11:fd:86:c1:76:59:b0:d1:82:42:64:f1:43:5b:6f:f5:df:
97:8a:78:d3:02:e0:28:f9:eb:77:69:5f:96:3c:b0:f6:b6:c3:
32:1d:d2:23:ce:b8:10:1f:ea:ab:70:a5:9e:61:d4:8e:34:c8:
7c:03:0f:77:9b:95:7b:f0:60:46:7e:0d:10:3e:29:93:8c:3c:
ca:ee:ee:0a:b9:21:a2:9f:22:07:7f:75:4f:5d:5d:c5:d1:53:
4a:69:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:58 2025 by rpki-client