Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/jgfWUQYC75Ew18AVJaRiJegRTLg.roa
File: jgfWUQYC75Ew18AVJaRiJegRTLg.roa (raw, json)
Hash identifier: 2GZL/Uiya79czeqKsJhgmivebID6yfzrgdAnXeGGma8=
Subject key identifier: 8E:07:D6:51:06:02:EF:91:30:D7:C0:15:25:A4:62:25:E8:11:4C:B8
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 1B734E6B
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/jgfWUQYC75Ew18AVJaRiJegRTLg.roa
Signing time: Sat 01 Jan 2022 07:01:56 +0000
ROA not before: Sat 01 Jan 2022 07:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 185.91.48.0/22 maxlen: 24
213.149.80.0/20 maxlen: 24
31.187.80.0/22 maxlen: 24
213.178.16.0/20 maxlen: 24
217.72.208.0/20 maxlen: 24
31.187.88.0/22 maxlen: 24
185.31.60.0/22 maxlen: 24
46.31.216.0/21 maxlen: 24
88.133.224.0/21 maxlen: 24
91.217.176.0/24 maxlen: 24
37.156.80.0/20 maxlen: 24
88.133.160.0/20 maxlen: 24
2a02:2488::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460541547 (0x1b734e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Jan 1 07:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e07d6510602ef9130d7c01525a46225e8114cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:ba:fd:c2:cb:91:22:b6:3c:d3:18:4a:b7:
4c:e1:52:28:16:ef:8d:1b:4e:a9:74:02:03:c6:d2:
21:ea:ce:e4:d1:17:28:3d:a9:af:e5:a6:3e:9c:a2:
00:8b:29:01:18:29:af:f4:95:3b:4a:71:46:2c:08:
d1:d6:10:24:64:ec:e2:76:49:74:49:89:30:17:bd:
dc:b8:e5:83:3a:aa:a0:1e:bf:51:4e:1a:01:92:3e:
d1:d6:d6:85:ec:ca:4e:50:02:bd:4c:23:48:5f:79:
cd:af:c5:c0:58:1a:c7:fe:36:1c:51:e6:a2:33:38:
74:54:8d:7a:2d:92:d3:89:1b:7e:db:fa:fe:75:24:
c2:6d:93:a2:04:55:42:72:dd:ef:8d:21:87:2d:cc:
d9:e5:e0:7f:a7:55:c7:bd:ac:c3:85:e6:33:89:9d:
e7:96:c8:c4:9a:b8:34:83:d7:d0:86:80:a4:24:f7:
b3:75:4a:a2:f0:9b:0d:ab:9e:19:39:57:0a:7e:3d:
a3:f0:a9:d1:91:69:b5:98:76:ca:44:55:d1:c9:a6:
a2:2a:6c:ab:fb:b1:67:fc:f6:e6:9a:1e:58:d7:bb:
04:90:fa:dc:7c:f3:81:2e:4a:92:5b:44:92:cb:1e:
c0:b0:5b:76:9a:b2:7f:68:07:27:25:31:d9:e4:71:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:D6:51:06:02:EF:91:30:D7:C0:15:25:A4:62:25:E8:11:4C:B8
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/jgfWUQYC75Ew18AVJaRiJegRTLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.80.0/22
31.187.88.0/22
37.156.80.0/20
46.31.216.0/21
88.133.160.0/20
88.133.224.0/21
91.217.176.0/24
185.31.60.0/22
185.91.48.0/22
213.149.80.0/20
213.178.16.0/20
217.72.208.0/20
IPv6:
2a02:2488::/32
Signature Algorithm: sha256WithRSAEncryption
55:19:54:64:0f:3f:34:bf:3b:5b:5b:51:1c:92:84:bc:88:12:
75:e7:60:d4:fe:a6:32:f9:0f:73:8d:15:d6:67:eb:87:12:95:
ee:b6:39:fb:16:bd:1b:6b:89:d2:bc:44:d2:b0:9b:b0:43:14:
d8:84:25:10:da:99:ab:fd:df:a6:8a:85:60:d4:e5:2a:34:93:
9f:9e:ae:9e:2f:06:78:d4:1b:7a:85:36:3d:70:e9:6d:d3:96:
bb:32:23:e1:ce:0c:f6:4e:65:92:bc:a4:4a:51:27:3b:08:c9:
36:cf:a3:bb:84:6f:1b:e8:7a:cf:f9:9c:29:16:21:dc:a4:35:
f3:0c:5b:cf:42:6a:f3:e1:8f:e4:81:a8:95:d2:02:18:32:25:
d5:25:3b:9d:f5:42:7e:c5:74:23:87:3d:2d:32:14:6c:9c:1d:
78:45:1c:61:bc:d2:56:e5:9a:0b:ff:31:b1:93:8a:89:aa:6d:
3c:19:d7:35:3c:24:25:d9:26:81:fd:b4:1b:d5:e6:7b:e7:25:
20:2a:e3:1f:f4:23:6c:e8:66:a4:6e:8f:72:0f:ca:83:1c:71:
de:88:01:ff:01:b7:db:43:aa:a2:e7:27:75:01:e2:90:9c:07:
d2:ad:cc:ab:51:e6:36:de:2c:7f:5e:4f:a0:76:f6:73:6f:ca:
dd:19:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:06 2025 by rpki-client