Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1NTLcqFXqKY6dAniu9Mp1zCm194.roa
File: 1NTLcqFXqKY6dAniu9Mp1zCm194.roa (raw, json)
Hash identifier: rwq2n4+Qg0e19m3czCXhylFiu2V2Z4mm0QbEBpO0qQM=
Subject key identifier: D4:D4:CB:72:A1:57:A8:A6:3A:74:09:E2:BB:D3:29:D7:30:A6:D7:DE
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 0182D515B8F0A910A42FE5DCA127C064626B
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1NTLcqFXqKY6dAniu9Mp1zCm194.roa
Signing time: Thu 25 Aug 2022 12:59:06 +0000
ROA not before: Thu 25 Aug 2022 12:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25319
IP address blocks: 89.32.224.0/20 maxlen: 24
89.32.226.0/24 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.180.0/22 maxlen: 24
185.108.180.0/24 maxlen: 24
185.108.182.0/24 maxlen: 24
185.108.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:15:b8:f0:a9:10:a4:2f:e5:dc:a1:27:c0:64:62:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Aug 25 12:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4d4cb72a157a8a63a7409e2bbd329d730a6d7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:fb:0d:d9:11:07:30:5b:5b:02:78:38:6d:
c5:85:3d:0b:22:e2:da:85:5f:60:a9:84:bb:07:1a:
97:00:a8:52:08:a3:fe:d4:69:45:0b:e6:09:24:9c:
90:ac:7c:f6:69:aa:2c:20:e0:68:84:4f:83:64:93:
2d:29:e9:55:e5:c9:89:1c:d5:af:75:6d:28:b8:cd:
26:ce:f9:55:a3:85:af:f0:11:65:5c:22:19:23:68:
f7:4a:c8:b2:aa:56:c9:54:b8:db:46:0b:b3:c2:5d:
4f:29:37:43:20:3d:60:db:da:59:b8:fb:87:c8:1d:
38:66:c1:a4:84:02:4e:dd:83:2b:c5:62:3a:ac:ff:
53:7f:fd:65:0a:68:6a:81:5e:9d:b8:bd:ef:39:50:
71:72:0e:9c:87:a5:43:10:29:d2:06:e6:81:a9:b9:
f3:44:ce:e8:d8:99:93:93:dc:6f:c0:55:4d:2c:00:
0e:a1:86:33:2d:b1:09:a7:72:8e:61:c6:92:be:d4:
55:7e:1d:2a:c5:52:b7:6d:58:1b:d1:45:43:6b:52:
f8:43:6c:e7:70:e9:6e:22:47:e1:3c:ad:50:3d:9c:
72:6e:29:cc:00:3b:7a:4e:c5:55:3c:b4:26:63:0e:
d7:e2:c5:e1:4d:16:eb:b9:2e:64:9c:19:55:95:f1:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:CB:72:A1:57:A8:A6:3A:74:09:E2:BB:D3:29:D7:30:A6:D7:DE
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1NTLcqFXqKY6dAniu9Mp1zCm194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.108.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:22:33:bc:fd:0c:bc:21:4c:5b:3a:63:f0:1b:c3:d4:21:8f:
c3:26:6c:2f:64:47:68:67:e8:61:20:ed:38:1e:2f:9a:54:cb:
95:cc:b7:80:25:28:8d:13:33:04:c2:40:93:a8:cb:87:0c:da:
95:6e:c0:6b:89:51:9a:b4:18:dc:0e:2a:08:54:86:c5:d5:d6:
91:8b:cc:da:72:43:67:b8:a1:b2:48:5b:ab:89:a4:9c:1a:fe:
20:05:38:cb:e4:cb:46:ff:14:f6:15:47:c5:c9:c6:df:53:d6:
e4:e5:4c:37:82:95:52:c8:c4:d6:45:c7:a2:f0:36:01:f8:70:
90:9c:74:1c:10:16:da:94:60:04:2a:b8:61:13:5e:f9:0a:5a:
73:7e:69:5b:8e:2d:e5:8b:2e:e7:9b:26:0a:28:c8:56:fb:01:
2b:92:c2:4c:fe:3f:bd:ae:e3:06:3e:4d:d4:9e:62:d0:40:2a:
c0:00:c1:9d:2e:92:76:67:ea:39:56:58:45:ac:6e:58:26:98:
06:ff:ab:ca:50:56:2f:f6:a0:ba:0c:9c:09:f9:9e:fc:09:45:
9d:79:67:ee:52:39:8f:f1:e7:87:6f:88:bd:67:a5:cc:76:f6:
73:37:8e:c1:f7:23:87:0f:7f:ff:c4:82:94:c5:cf:f2:a0:2c:
7c:82:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:32 2025 by rpki-client