Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/teC3Ey7ZjpQXV90DZn0PuYJKeow.roa
File: teC3Ey7ZjpQXV90DZn0PuYJKeow.roa (raw, json)
Hash identifier: seT5F6FBanNOtDM4YiJ9eDXO2lPckQ1/dBX74I5bZzw=
Subject key identifier: B5:E0:B7:13:2E:D9:8E:94:17:57:DD:03:66:7D:0F:B9:82:4A:7A:8C
Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial: 0182CAB155A716DBFDE2D2DBB0776C6D5649
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/teC3Ey7ZjpQXV90DZn0PuYJKeow.roa
Signing time: Tue 23 Aug 2022 12:33:15 +0000
ROA not before: Tue 23 Aug 2022 12:33:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59702
IP address blocks: 207.189.192.0/20 maxlen: 20
81.25.144.0/20 maxlen: 20
146.66.232.0/21 maxlen: 21
185.80.216.0/22 maxlen: 22
216.158.96.0/20 maxlen: 20
194.37.249.0/24 maxlen: 24
213.244.240.0/21 maxlen: 21
185.16.200.0/22 maxlen: 22
31.31.163.0/24 maxlen: 24
31.31.165.0/24 maxlen: 24
31.31.166.0/24 maxlen: 24
31.31.167.0/24 maxlen: 24
185.47.192.0/24 maxlen: 24
172.103.88.0/21 maxlen: 21
185.47.193.0/24 maxlen: 24
185.47.194.0/24 maxlen: 24
2a03:780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:b1:55:a7:16:db:fd:e2:d2:db:b0:77:6c:6d:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Validity
Not Before: Aug 23 12:33:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5e0b7132ed98e941757dd03667d0fb9824a7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:0b:86:9d:1b:24:65:89:13:52:3c:f9:32:
b8:d2:e1:7b:4f:f0:88:a1:f3:4e:7f:13:28:5a:f5:
3d:1d:b7:c2:3f:25:a3:0b:c8:79:3e:1b:05:16:bb:
06:08:75:35:b2:a0:8c:5e:a5:71:56:62:ee:a9:88:
27:6f:d0:16:d8:27:b8:62:ea:f6:6a:de:c3:8c:6a:
85:92:13:55:5b:68:1d:79:a6:6f:19:68:fa:f4:01:
6c:f9:03:ec:0e:bf:07:22:cb:57:04:da:79:99:c2:
22:7f:51:09:79:c0:8e:ef:61:c0:2e:73:ae:e5:be:
f4:af:af:4f:3c:cf:f5:02:26:1b:0d:12:af:67:30:
ab:29:73:bf:3d:fa:d9:89:8a:57:c8:80:c4:be:47:
b8:de:f6:22:7f:fb:8b:50:bf:d2:f4:68:4e:e2:90:
ba:91:27:f8:8b:c2:30:8a:35:ae:6d:6a:ce:ac:a0:
9c:e9:d4:c0:e9:33:d1:92:f2:a4:98:d1:80:95:b9:
1b:44:ed:3a:11:2c:8d:3b:29:0b:84:18:80:f4:1a:
91:78:e5:e1:c2:1c:ad:76:11:16:2b:2b:82:2f:6e:
81:b9:90:37:21:49:3d:0a:69:b1:26:9d:63:09:38:
43:07:e5:53:79:ce:e8:fc:19:f0:9b:90:a9:98:e0:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:B7:13:2E:D9:8E:94:17:57:DD:03:66:7D:0F:B9:82:4A:7A:8C
X509v3 Authority Key Identifier:
keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/teC3Ey7ZjpQXV90DZn0PuYJKeow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.163.0/24
31.31.165.0-31.31.167.255
81.25.144.0/20
146.66.232.0/21
172.103.88.0/21
185.16.200.0/22
185.47.192.0-185.47.194.255
185.80.216.0/22
194.37.249.0/24
207.189.192.0/20
213.244.240.0/21
216.158.96.0/20
IPv6:
2a03:780::/32
Signature Algorithm: sha256WithRSAEncryption
77:7d:c6:8e:4c:a5:21:70:0a:6c:c0:b1:7b:b2:23:8a:82:f0:
23:d3:c7:d9:90:c1:74:5d:86:a9:9b:b4:a4:9e:e2:4e:c4:9a:
d2:25:02:56:b1:3b:fb:bc:51:6a:b4:7e:28:d3:ff:d4:e9:fe:
dc:68:ee:62:54:2f:35:70:2f:a0:65:47:61:25:45:d9:db:48:
de:08:7c:0d:30:6e:a4:e0:20:2f:1a:51:38:1a:f2:78:00:72:
9b:59:4e:f5:c6:e7:97:93:90:4f:d6:fc:c9:0e:bc:1c:dc:4e:
ce:ed:96:b6:e3:e9:04:ab:43:e5:35:99:3b:fc:8a:7b:5e:3f:
36:42:3f:a9:87:5c:7f:b0:40:0d:9f:fe:1f:4b:2e:7c:11:7d:
61:e7:f9:93:f2:bf:98:9b:33:ea:a0:dc:bd:ce:6f:6d:0b:10:
e2:d9:0e:2e:67:77:a1:56:a6:49:ce:7b:6b:ab:80:2f:4e:a1:
a6:84:47:9d:44:a6:ce:17:44:75:71:0a:ad:cd:35:48:a5:9a:
88:9b:76:dd:91:71:84:62:41:53:3e:dc:fc:72:15:1e:cd:c3:
64:2f:de:90:bc:b5:cc:f1:af:da:c9:1f:67:f1:8c:6f:88:6c:
a8:61:01:e8:46:d1:f3:ab:6b:47:a7:e5:ac:b0:48:f6:d9:44:
39:b1:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:09 2025 by rpki-client