Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/go9qCCfzhXB-jysmK8EcaJwmC4Q.roa
File: go9qCCfzhXB-jysmK8EcaJwmC4Q.roa (raw, json)
Hash identifier: E4fEAeTNOLRYud3b54iQRzkCnjHL8Xuxq6rcEdUPL3U=
Subject key identifier: 82:8F:6A:08:27:F3:85:70:7E:8F:2B:26:2B:C1:1C:68:9C:26:0B:84
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 180F896D
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/go9qCCfzhXB-jysmK8EcaJwmC4Q.roa
Signing time: Sat 01 Jan 2022 08:05:10 +0000
ROA not before: Sat 01 Jan 2022 08:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34814
IP address blocks: 193.151.104.0/22 maxlen: 24
46.149.80.0/20 maxlen: 24
195.60.174.0/23 maxlen: 24
91.203.12.0/22 maxlen: 24
193.37.156.0/24 maxlen: 24
193.16.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403671405 (0x180f896d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Jan 1 08:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=828f6a0827f385707e8f2b262bc11c689c260b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:6b:1b:ea:c3:ba:cf:82:67:b9:fc:2f:34:
5d:e9:ae:b3:a4:ca:42:cd:54:35:c0:f7:13:dc:d3:
5e:e5:67:5a:85:61:f5:32:7e:d8:ce:b3:ea:80:46:
0f:f4:ac:ef:91:1f:1a:84:e3:27:d2:1a:77:4c:0c:
3c:f1:67:45:c0:c7:ae:7e:01:ec:e5:08:ed:db:7f:
8d:48:f1:24:b8:0d:75:73:84:d7:a6:0d:0f:ab:97:
56:98:1a:88:51:2c:42:2a:b8:c7:9b:aa:85:1e:45:
b9:00:e2:20:a0:3c:5d:ca:5e:dd:e4:2d:8e:35:c5:
ba:39:c8:ad:e6:13:65:7a:98:70:25:38:f4:f4:29:
08:55:46:d8:4e:45:cc:f1:a2:e7:a5:75:d7:8c:e2:
00:11:6e:46:3b:10:ee:a6:01:b0:ab:4b:6d:41:7a:
43:7b:8e:63:10:a7:00:ca:32:66:d7:8d:af:9d:e0:
50:5b:0f:5a:b0:ae:82:26:c4:f0:db:2b:8d:be:36:
9a:7c:72:d4:69:82:22:e6:7f:04:77:84:be:86:81:
06:6c:a8:03:af:3a:ed:18:be:2a:4b:4c:ba:ab:82:
de:96:ff:5b:1f:00:72:0b:2b:a1:95:ca:1a:7c:86:
cd:47:98:94:56:11:29:54:6a:26:78:d7:57:8c:3f:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:6A:08:27:F3:85:70:7E:8F:2B:26:2B:C1:1C:68:9C:26:0B:84
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/go9qCCfzhXB-jysmK8EcaJwmC4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.80.0/20
91.203.12.0/22
193.16.45.0/24
193.37.156.0/24
193.151.104.0/22
195.60.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:06:a7:7e:e2:e6:0e:80:63:b8:db:84:00:37:26:2d:74:c3:
11:8d:83:5f:0b:78:b1:2c:95:22:56:77:62:ee:ee:76:3e:79:
b8:79:5c:02:ef:86:d0:9f:17:11:b0:8e:80:2f:07:22:47:1c:
f7:0c:b5:a7:20:78:b0:e9:49:66:fa:03:3b:55:9c:c9:08:fb:
50:3f:32:30:c9:30:66:18:bf:aa:56:62:9c:b5:72:1f:e2:a6:
ac:a0:c1:f2:05:12:ce:7f:bf:5e:23:7a:6e:ea:59:df:d5:32:
19:97:ac:4e:10:28:67:52:0d:4f:27:88:a7:9c:46:4e:9d:51:
ec:68:73:51:13:69:1d:da:f5:65:29:12:83:05:e2:e2:38:34:
c8:e7:74:ec:a6:e3:1d:20:83:0a:7c:fb:0b:d4:5d:35:72:9b:
17:2d:bf:ab:aa:06:8f:12:e5:d4:6c:8f:fe:1d:07:2a:1b:0d:
b5:0e:0e:57:d0:93:ff:73:ad:37:c7:80:11:49:ff:2f:5b:f9:
aa:ba:ae:e2:e1:75:2a:f1:f1:8a:67:d2:31:82:07:7c:27:4a:
a9:ab:c2:97:8b:1e:7e:95:84:3b:0a:b2:e9:a3:96:07:c0:c3:
e9:a9:e9:fa:7f:a1:30:02:ab:67:de:41:d7:03:a5:af:77:aa:
3a:72:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:57 2025 by rpki-client