Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/r5VwbhBYhsfpT3frNpAtxWeK6oA.roa
File: r5VwbhBYhsfpT3frNpAtxWeK6oA.roa (raw, json)
Hash identifier: ymP0xevnmJ/Rv9pcGTGFgiiy0AiqjVrKDbb7VzNLq5M=
Subject key identifier: AF:95:70:6E:10:58:86:C7:E9:4F:77:EB:36:90:2D:C5:67:8A:EA:80
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 0A69C103
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/r5VwbhBYhsfpT3frNpAtxWeK6oA.roa
Signing time: Sat 01 Jan 2022 05:56:52 +0000
ROA not before: Sat 01 Jan 2022 05:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35829
IP address blocks: 193.151.172.0/22 maxlen: 24
206.190.220.0/22 maxlen: 24
2a0d:e8c0::/29 maxlen: 31
2a0d:e8c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174702851 (0xa69c103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jan 1 05:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af95706e105886c7e94f77eb36902dc5678aea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:c9:22:a7:8f:18:ee:76:39:0b:82:33:e9:
64:95:0e:d8:89:01:51:46:60:31:7f:1a:22:2e:40:
ab:5e:81:3e:4a:e2:38:31:94:08:aa:3d:91:6f:19:
a2:9b:06:de:6f:04:3e:70:2b:fb:34:54:4f:6b:67:
72:51:d5:38:62:dc:4a:22:73:13:07:45:ad:79:37:
f2:86:ba:5c:ae:38:cd:85:c1:f1:e9:3f:0b:e6:3c:
64:2a:32:cd:dd:86:99:cd:91:7c:66:2e:68:b8:94:
8d:86:29:13:da:3a:1a:53:45:d2:cf:22:1c:6a:3e:
2f:ee:11:31:62:74:15:fc:37:e9:d3:6b:1b:46:1a:
0d:d0:65:be:b8:30:27:06:a5:1a:5d:17:29:81:42:
80:59:35:a4:e7:5a:d0:12:73:fb:59:68:76:a6:d1:
9d:ac:43:bf:60:e5:df:20:6a:e1:4d:f8:bf:ec:15:
a8:5c:35:69:9a:09:9f:11:3b:28:37:90:6a:76:18:
16:b9:8a:d0:40:d7:23:16:a4:18:83:9f:25:78:55:
c4:9f:a6:10:87:8f:c0:66:5b:32:08:30:5d:a4:45:
ec:dc:8f:99:06:76:ac:ba:02:3a:2a:55:c0:27:d5:
2b:66:6b:56:cb:5e:fa:1c:d3:27:e7:48:73:08:da:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:70:6E:10:58:86:C7:E9:4F:77:EB:36:90:2D:C5:67:8A:EA:80
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/r5VwbhBYhsfpT3frNpAtxWeK6oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.172.0/22
206.190.220.0/22
IPv6:
2a0d:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:f6:96:d8:2d:a0:82:eb:6f:67:6b:2a:10:58:ac:f2:63:a7:
a9:ad:59:a3:32:a9:2f:c8:4a:fa:68:c8:c9:9c:c0:ac:35:af:
9c:68:2e:d1:7e:af:56:e1:43:0d:1e:85:cf:58:66:5d:ce:d6:
b7:ea:cf:d7:aa:02:e9:16:c5:54:88:21:9b:ff:84:9e:c2:77:
7e:92:ba:51:19:63:ac:09:2c:87:26:e7:f9:02:12:fc:37:16:
15:2f:71:18:57:07:f1:52:79:2e:17:33:c1:20:5d:9b:e6:89:
14:84:96:d1:79:49:ba:fe:60:d9:69:87:d0:bc:82:1a:b8:75:
94:d2:08:8f:51:03:15:ca:35:90:44:53:35:ef:0b:1c:e3:f8:
f3:06:da:3c:d9:1a:d9:93:61:d2:fc:d6:5b:ff:6e:a1:bf:dc:
13:4d:b1:5c:28:b9:14:f9:73:f2:91:d1:43:1e:33:67:8a:7f:
55:01:11:72:b9:93:2c:d7:14:82:91:9b:33:b5:24:12:98:64:
9e:18:37:e1:c3:96:da:2e:8c:b3:6f:8b:89:f5:50:e2:06:b9:
26:94:96:14:53:e9:1e:dd:13:36:e1:ee:71:f0:f3:d6:2e:64:
15:9a:8e:cd:f9:2f:7a:0c:e6:0a:06:11:63:f2:76:da:19:e8:
66:1b:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:02 2025 by rpki-client