Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/ewWkCqUP20kNcWXYcUAnmVQtb1M.roa
File: ewWkCqUP20kNcWXYcUAnmVQtb1M.roa (raw, json)
Hash identifier: ACbrg/+7pvj5jeVoXMdc5ZiqH/EMCcVkAqXdr/V2riE=
Subject key identifier: 7B:05:A4:0A:A5:0F:DB:49:0D:71:65:D8:71:40:27:99:54:2D:6F:53
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 01856FF95CBBA6067EFBE75B5918D529CEA5
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/ewWkCqUP20kNcWXYcUAnmVQtb1M.roa
Signing time: Mon 02 Jan 2023 00:54:51 +0000
ROA not before: Mon 02 Jan 2023 00:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208808
IP address blocks: 94.156.26.0/23 maxlen: 23
212.73.152.0/24 maxlen: 24
31.13.210.0/24 maxlen: 24
212.73.153.0/24 maxlen: 24
87.120.203.0/24 maxlen: 24
78.138.26.0/23 maxlen: 23
78.138.28.0/23 maxlen: 23
92.243.94.0/23 maxlen: 23
185.201.76.0/22 maxlen: 22
78.138.42.0/23 maxlen: 23
45.140.196.0/22 maxlen: 22
213.255.210.0/23 maxlen: 23
213.255.216.0/23 maxlen: 23
213.255.224.0/23 maxlen: 23
92.243.71.0/24 maxlen: 24
87.120.80.0/23 maxlen: 23
92.243.68.0/24 maxlen: 24
213.255.244.0/23 maxlen: 23
92.243.86.0/23 maxlen: 23
78.138.18.0/23 maxlen: 23
92.243.90.0/23 maxlen: 23
2a0a:bd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5c:bb:a6:06:7e:fb:e7:5b:59:18:d5:29:ce:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Jan 2 00:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b05a40aa50fdb490d7165d871402799542d6f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:c9:f0:52:1d:b5:b9:3c:4a:ff:79:e2:77:
fc:02:40:e8:6f:be:81:7e:8c:ef:74:4f:ce:65:16:
12:7d:ac:b3:07:50:9b:43:19:08:af:53:85:ab:21:
8e:b5:9f:45:a9:70:f3:82:55:5c:37:26:bb:ed:f0:
aa:44:be:fe:7c:81:ac:fb:7b:37:50:bc:01:b2:b6:
31:a5:21:cc:9e:2b:85:e7:1a:5d:ba:af:e9:8a:52:
9a:2b:b9:44:f6:d7:83:69:ce:01:fa:cb:d0:70:df:
68:75:20:d4:71:e8:4f:60:90:7e:a2:1f:92:5f:6d:
de:a5:df:03:d7:51:02:90:a6:e3:d2:6b:02:17:52:
ba:d1:4a:88:b7:79:41:9c:28:eb:8b:58:76:76:28:
b7:a4:bf:04:41:28:24:e5:eb:56:37:cd:71:e4:c7:
2a:af:8f:07:f0:e2:9a:b1:79:dd:6c:af:0c:a8:69:
4a:da:09:56:16:9e:d3:57:36:99:b6:98:71:18:a1:
b9:e8:d8:d7:7d:02:17:0a:02:1f:70:a7:77:e8:7e:
29:51:b6:56:84:1f:ae:15:ec:f5:58:fe:c2:3c:09:
d0:73:c8:46:53:67:eb:5f:4b:58:e9:80:0e:7f:43:
26:af:a1:dd:d3:00:68:1e:ed:60:f8:86:4f:e8:83:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:A4:0A:A5:0F:DB:49:0D:71:65:D8:71:40:27:99:54:2D:6F:53
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/ewWkCqUP20kNcWXYcUAnmVQtb1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.210.0/24
45.140.196.0/22
78.138.18.0/23
78.138.26.0-78.138.29.255
78.138.42.0/23
87.120.80.0/23
87.120.203.0/24
92.243.68.0/24
92.243.71.0/24
92.243.86.0/23
92.243.90.0/23
92.243.94.0/23
94.156.26.0/23
185.201.76.0/22
212.73.152.0/23
213.255.210.0/23
213.255.216.0/23
213.255.224.0/23
213.255.244.0/23
IPv6:
2a0a:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
8f:73:de:de:4a:a6:78:29:5f:15:c7:70:20:a6:c9:4c:70:63:
98:7b:0a:53:5c:67:5d:19:6a:a8:f9:1d:30:85:eb:46:12:7a:
5b:e9:29:9f:3d:f8:6e:0a:3d:4e:af:68:76:72:01:26:72:23:
f0:e3:5b:5b:c8:67:06:22:41:59:1f:07:dd:9a:16:3d:6a:fc:
45:27:cf:76:95:6c:e8:8d:5c:da:03:ff:25:6b:64:96:bc:6d:
51:c0:96:f2:bf:80:eb:6b:71:2b:32:4d:5f:ab:bb:9f:0b:35:
c1:fd:47:b5:93:51:94:e5:f3:07:83:4c:3d:19:b9:80:64:f9:
da:10:1d:08:e7:fb:ea:4c:37:38:7f:a0:91:87:42:18:91:76:
34:87:6c:f4:0c:ba:4a:1b:7a:8b:33:b5:d6:1a:ff:0d:dd:19:
04:6f:21:a8:63:87:02:3c:0b:9a:d2:13:2c:11:21:e3:39:58:
e5:c8:b9:5b:22:57:ab:ec:d3:9d:96:4a:e0:e1:17:12:ac:85:
bb:2f:e1:20:26:73:d7:9b:7c:5a:72:c8:ed:ae:14:e9:ed:39:
96:20:26:b2:86:ad:66:47:1e:eb:1c:8e:0f:e1:d9:c9:82:bf:
ac:34:7d:90:2b:03:db:e3:59:cd:13:6a:b9:61:dc:42:ac:8a:
e0:28:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:20 2025 by rpki-client