Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Y2g-eJUdDn5WkVMyiVFU1-wW6HY.roa
File: Y2g-eJUdDn5WkVMyiVFU1-wW6HY.roa (raw, json)
Hash identifier: Tq2xQxFiVRayhxllyaO+vsUDjWP9aYlT1iEY53CN09w=
Subject key identifier: 63:68:3E:78:95:1D:0E:7E:56:91:53:32:89:51:54:D7:EC:16:E8:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01899C95251C8503E04DDB8DB8CEFBA2C159
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Y2g-eJUdDn5WkVMyiVFU1-wW6HY.roa
Signing time: Fri 28 Jul 2023 12:59:27 +0000
ROA not before: Fri 28 Jul 2023 12:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57073
IP address blocks: 176.101.88.0/21 maxlen: 24
85.198.76.0/22 maxlen: 24
185.138.253.0/24 maxlen: 24
185.138.252.0/24 maxlen: 24
185.138.252.0/22 maxlen: 24
185.138.254.0/24 maxlen: 24
185.138.255.0/24 maxlen: 24
194.1.214.0/24 maxlen: 24
213.184.154.0/23 maxlen: 24
213.184.156.0/22 maxlen: 24
94.141.112.0/22 maxlen: 24
185.62.200.0/23 maxlen: 24
185.62.202.0/24 maxlen: 24
91.230.107.0/24 maxlen: 24
2a03:720::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:95:25:1c:85:03:e0:4d:db:8d:b8:ce:fb:a2:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jul 28 12:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63683e78951d0e7e56915332895154d7ec16e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:34:bc:15:39:d6:39:81:a6:8d:99:bb:71:
75:78:c3:a6:2f:36:76:b1:02:b3:a6:96:53:f9:31:
de:08:f6:28:fb:c3:9f:e6:a2:20:c2:fd:1c:cc:d0:
2d:25:1b:86:8c:e4:65:12:e5:9b:d7:fd:17:c8:af:
99:91:8a:94:02:6e:2c:98:18:af:32:ac:fd:8a:99:
92:78:6c:39:68:cc:22:aa:51:0a:7b:f1:f6:2c:7f:
28:3f:9e:cf:88:a9:d8:70:7e:27:80:27:30:88:9d:
1f:ab:b2:50:44:a1:b5:3d:0b:78:fd:83:14:52:c3:
1e:56:82:85:3f:29:7e:a3:3f:cf:89:74:fd:31:29:
f6:4a:5c:32:80:63:51:38:7d:d8:60:87:53:17:f2:
fa:4e:9f:8d:26:04:5b:70:21:af:dd:7f:0f:49:e0:
fe:75:53:a1:01:c0:e8:18:5e:f5:7a:5a:23:b6:00:
4d:b3:a5:3c:34:e9:22:50:62:36:cc:74:cc:fb:da:
7e:88:78:54:b7:f6:45:f5:07:d1:db:a3:2b:c8:ab:
05:e3:59:4c:ac:1e:51:a1:4e:2d:74:8a:9f:9b:f0:
af:83:14:94:96:b0:36:09:66:b8:38:8c:80:8d:93:
31:52:4e:0d:ae:00:bb:30:6d:86:48:d2:e2:84:67:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:68:3E:78:95:1D:0E:7E:56:91:53:32:89:51:54:D7:EC:16:E8:76
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Y2g-eJUdDn5WkVMyiVFU1-wW6HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.76.0/22
91.230.107.0/24
94.141.112.0/22
176.101.88.0/21
185.62.200.0-185.62.202.255
185.138.252.0/22
194.1.214.0/24
213.184.154.0-213.184.159.255
IPv6:
2a03:720::/32
Signature Algorithm: sha256WithRSAEncryption
44:47:e6:a8:9d:40:6b:a1:c7:e7:5f:47:e2:aa:2d:2a:ca:a3:
40:3f:7f:72:5f:77:94:3e:5e:58:78:9d:3d:62:92:14:02:df:
ab:44:fa:5e:9c:9a:54:e9:bd:02:59:18:2c:96:71:e0:42:51:
9a:2f:2c:e8:c6:45:6a:8c:ea:f0:3d:a9:06:5d:79:cc:92:90:
c6:d6:c6:d5:eb:94:dc:98:dd:52:d5:2c:0b:d6:19:df:f2:51:
d4:a6:b2:68:7f:da:d1:27:4d:f0:65:9e:8a:c4:67:fd:89:f1:
2c:0b:7c:51:98:18:ce:48:44:9c:f5:60:5d:a2:09:29:f4:90:
6b:ea:a2:3f:ad:a9:f0:d7:46:a5:56:fb:ca:6a:9a:ee:c7:5f:
16:fe:37:19:95:96:b2:77:f9:8f:76:59:8d:df:c8:5f:67:76:
cd:69:44:01:10:86:10:66:7e:d6:01:e8:2f:66:e0:61:1d:6c:
27:34:73:04:82:3d:d6:d8:8e:7e:f3:de:57:ee:b9:9d:55:c1:
ad:2a:05:f1:8c:8b:dc:fe:7a:b1:b5:9f:90:1a:f7:d1:30:51:
8a:b3:e6:9b:d2:c3:8a:25:03:c5:8f:76:27:a3:3e:d2:e8:e8:
b8:02:3a:3c:7d:63:26:39:16:25:50:7f:f7:47:ed:1a:23:14:
bd:72:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:56 2025 by rpki-client