Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/iG0zSoWLWoNTltQMKzGCOKzhgDg.roa
File: iG0zSoWLWoNTltQMKzGCOKzhgDg.roa (raw, json)
Hash identifier: A0OS/CiK8/TZrR+Hy9+FX3tnL9J6AZ9SwnXcdFAix+Q=
Subject key identifier: 88:6D:33:4A:85:8B:5A:83:53:96:D4:0C:2B:31:82:38:AC:E1:80:38
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 07503E0F
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/iG0zSoWLWoNTltQMKzGCOKzhgDg.roa
Signing time: Sat 01 Jan 2022 03:54:52 +0000
ROA not before: Sat 01 Jan 2022 03:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12601
IP address blocks: 185.113.40.0/22 maxlen: 22
80.94.176.0/22 maxlen: 22
80.94.185.0/24 maxlen: 24
80.94.182.0/23 maxlen: 23
80.94.184.0/24 maxlen: 24
185.211.140.0/22 maxlen: 22
185.194.80.0/22 maxlen: 22
213.159.9.0/24 maxlen: 24
80.94.188.0/23 maxlen: 23
194.5.134.0/24 maxlen: 24
64.126.200.0/22 maxlen: 22
64.126.208.0/24 maxlen: 24
64.126.212.0/22 maxlen: 22
194.126.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122699279 (0x7503e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jan 1 03:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=886d334a858b5a835396d40c2b318238ace18038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:be:a5:2d:d2:db:db:6e:76:13:7c:70:d1:
db:84:ce:e8:a4:e8:b5:df:77:cb:8d:c0:dd:a3:75:
c5:cb:04:21:18:8f:18:6d:a1:ac:25:a6:cb:3d:55:
20:be:b0:a0:22:1a:c4:7d:51:01:8e:c4:d2:28:c7:
6d:b1:58:69:6b:f3:e8:48:d1:98:5a:c2:a6:d3:3c:
dd:2b:de:31:a8:a8:20:6a:a0:67:85:b9:a7:79:28:
38:85:05:74:ee:49:b7:6c:af:4f:0c:4c:ef:07:95:
b9:35:47:00:b7:1d:c3:dc:cd:d1:74:34:31:ef:97:
43:8f:59:80:77:e6:c6:20:f2:92:cc:6f:96:75:e7:
88:b3:35:1d:7c:c5:80:6a:d9:6e:a7:ec:39:fc:5d:
8a:c1:14:e7:b5:c9:60:40:15:fb:bd:ce:b1:95:61:
a6:cd:cf:1e:2b:2c:54:4c:35:04:b4:b6:99:43:09:
58:dd:78:90:f8:52:31:ef:86:16:6f:55:94:9f:5c:
b6:3b:6d:35:22:92:23:8f:1e:ee:9b:a2:29:04:d9:
ba:93:2b:24:a7:8e:48:f3:06:c1:23:a8:df:d3:04:
aa:26:85:1d:88:6b:e0:41:ea:bf:1a:b3:c8:40:8e:
41:4f:31:d3:ba:13:4c:35:a2:a1:1a:85:8e:68:0b:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:33:4A:85:8B:5A:83:53:96:D4:0C:2B:31:82:38:AC:E1:80:38
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/iG0zSoWLWoNTltQMKzGCOKzhgDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.126.200.0/22
64.126.208.0/24
64.126.212.0/22
80.94.176.0/22
80.94.182.0-80.94.185.255
80.94.188.0/23
185.113.40.0/22
185.194.80.0/22
185.211.140.0/22
194.5.134.0/24
194.126.236.0/24
213.159.9.0/24
Signature Algorithm: sha256WithRSAEncryption
01:df:91:74:94:a8:11:de:82:bd:6d:86:a0:86:71:58:6f:57:
5d:d9:d5:23:61:af:80:a4:be:33:b7:5e:ae:dd:64:48:13:2e:
3b:35:e7:99:69:fc:c2:bf:f9:0a:c7:7b:7b:79:ee:09:70:1f:
8e:73:62:2c:93:3f:36:c6:fb:06:62:08:78:44:88:d4:f7:86:
5f:9d:44:1d:c7:a3:0b:b7:45:6a:d5:e7:c7:2c:10:8c:5e:4f:
fd:08:bf:0e:e4:b8:b0:07:57:a6:07:88:98:7a:c8:71:e2:3a:
a4:61:00:53:55:81:87:79:a4:c5:55:4c:c0:b2:42:c8:b6:82:
c6:8c:3f:b1:56:aa:81:99:2e:7d:9f:7a:dc:22:71:f3:47:da:
8c:21:ff:39:8f:25:86:8e:6d:cd:78:a0:cd:4b:87:a8:46:7c:
c7:9a:14:2b:75:cd:02:46:24:4e:b6:78:07:a8:9e:0d:83:87:
a4:e8:50:5e:50:f1:25:fa:06:49:06:c9:a2:21:17:07:2e:26:
ba:21:e9:f2:a1:c8:16:3b:aa:15:f3:61:5a:18:0f:9d:17:5e:
b1:0c:df:9f:8c:07:4b:e2:eb:ef:22:de:2e:e4:b3:49:f4:b7:
bf:e3:d4:e1:8a:0c:77:e1:70:66:90:7b:1d:26:aa:bb:93:53:
6f:4e:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:06:20 2025 by rpki-client