Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/S5Zf6j1IEllnBw5hYKpA9b9iYqY.roa
File: S5Zf6j1IEllnBw5hYKpA9b9iYqY.roa (raw, json)
Hash identifier: vOBskV3v5gZzuQUK9nWRP1YpFKHSo4F/Mq0FA+FqC6w=
Subject key identifier: 4B:96:5F:EA:3D:48:12:59:67:07:0E:61:60:AA:40:F5:BF:62:62:A6
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 33D77A0C
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/S5Zf6j1IEllnBw5hYKpA9b9iYqY.roa
Signing time: Thu 13 Jan 2022 09:01:50 +0000
ROA not before: Thu 13 Jan 2022 09:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25160
IP address blocks: 185.28.240.0/22 maxlen: 24
185.120.204.0/22 maxlen: 22
82.163.192.0/19 maxlen: 24
158.41.64.0/18 maxlen: 18
193.221.128.0/19 maxlen: 24
165.65.0.0/16 maxlen: 16
193.0.176.0/23 maxlen: 24
206.245.192.0/18 maxlen: 18
5.10.144.0/20 maxlen: 24
91.238.221.0/24 maxlen: 24
185.237.48.0/22 maxlen: 24
194.8.254.0/23 maxlen: 24
2a00:e342::/32 maxlen: 32
2a00:e340:3::/48 maxlen: 48
2a00:e346::/32 maxlen: 32
2a00:e347::/32 maxlen: 32
2a00:e341::/32 maxlen: 32
2a00:e344::/32 maxlen: 32
2a00:e340::/32 maxlen: 32
2a00:e343::/32 maxlen: 32
2a00:e345::/32 maxlen: 32
2a00:e340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869759500 (0x33d77a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 13 09:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b965fea3d48125967070e6160aa40f5bf6262a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:ad:1b:10:31:e2:68:73:64:2d:6f:13:8a:
6a:ac:14:68:03:94:af:ed:10:21:06:07:2f:ee:a9:
ba:61:1d:d6:66:d0:ee:84:95:3d:f4:4d:3d:e8:7e:
4f:79:81:a2:4d:ce:69:21:32:be:76:c3:16:6f:08:
80:72:94:c2:37:a0:2f:ba:1f:3b:4d:9d:87:d8:97:
d1:99:71:5c:78:97:2f:ad:ca:97:cb:ec:3f:a3:71:
0c:8e:c9:d8:8f:e9:a0:5b:24:7a:08:65:d3:ab:63:
ae:80:69:20:4d:ef:7e:a4:87:65:07:c3:05:bf:c7:
a9:c3:dd:98:80:3e:b2:20:1f:e3:de:c0:a1:9f:00:
27:b8:8b:56:68:2c:7f:22:ad:a0:2c:23:25:3c:d9:
8a:09:38:e0:21:12:6e:c6:1d:cc:ff:54:e5:63:88:
41:53:a6:21:f9:a4:7c:83:71:2c:97:cc:17:ea:08:
bd:02:5d:bd:9e:9e:01:b6:6e:79:ba:9a:8c:e9:3a:
d8:1e:91:ae:a0:7c:28:ff:b9:9c:43:02:d9:4b:44:
4c:11:15:3d:66:70:b7:5d:d8:3a:72:68:91:d9:d8:
2f:3b:f5:c0:45:83:d5:92:30:be:89:ba:0b:44:9a:
0e:59:64:d1:cf:60:53:cc:71:39:e6:66:29:e7:70:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:5F:EA:3D:48:12:59:67:07:0E:61:60:AA:40:F5:BF:62:62:A6
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/S5Zf6j1IEllnBw5hYKpA9b9iYqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
82.163.192.0/19
91.238.221.0/24
158.41.64.0/18
165.65.0.0/16
185.28.240.0/22
185.120.204.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
206.245.192.0/18
IPv6:
2a00:e340::/29
Signature Algorithm: sha256WithRSAEncryption
c2:b2:83:35:43:4f:bc:8f:6e:d7:b2:45:ee:0e:6e:cc:af:86:
19:dc:f3:26:2d:77:a3:6f:18:32:ca:df:2b:73:83:ea:b3:d9:
b0:5e:5c:a3:47:6b:54:7a:1e:4f:20:14:28:8d:9e:e3:3c:ea:
3c:91:01:48:9f:1d:26:f7:29:3b:72:d6:de:99:ec:a1:81:06:
9f:db:5f:55:63:40:93:69:2e:16:2b:b3:b8:c2:c2:15:22:b2:
54:23:a0:09:ef:8d:29:1d:07:eb:36:65:03:93:ee:33:54:3a:
ee:e9:aa:ad:2b:48:ab:2f:94:f7:a5:e8:6b:64:72:b8:21:fe:
47:30:2e:89:4d:07:53:9b:da:88:1a:2a:f5:65:cb:75:74:28:
69:18:fe:28:b6:b3:cd:86:dd:9b:b2:24:ea:93:3a:25:5b:6d:
43:19:80:07:0b:9d:40:ef:6b:29:c2:b3:5c:e1:c3:72:92:ce:
b8:d2:b3:f7:b1:b7:75:9a:8e:2d:4d:46:cb:68:5c:7d:10:96:
46:bd:1a:bc:3c:5d:1a:33:3c:1f:a0:cb:63:a5:5c:8a:e5:6b:
c1:c9:a1:be:c9:9b:20:13:ac:84:41:2c:e3:2c:c1:62:3a:4b:
cb:84:ae:3f:5a:46:84:46:31:67:9c:5e:69:b8:37:55:95:d3:
ed:1e:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:13 2025 by rpki-client