Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/A9qW0AwUMBPQlTGEa1aeMGbdSaI.roa
File: A9qW0AwUMBPQlTGEa1aeMGbdSaI.roa (raw, json)
Hash identifier: mPHja2T0RNE3XiyqRDStqrNzsqiX0/8/EOtPHRy10wg=
Subject key identifier: 03:DA:96:D0:0C:14:30:13:D0:95:31:84:6B:56:9E:30:66:DD:49:A2
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 018AC16243CB621AFAC6949BBEAE5CF3DCF1
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/A9qW0AwUMBPQlTGEa1aeMGbdSaI.roa
Signing time: Sat 23 Sep 2023 09:32:37 +0000
ROA not before: Sat 23 Sep 2023 09:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
91.190.155.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
185.223.207.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:62:43:cb:62:1a:fa:c6:94:9b:be:ae:5c:f3:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Sep 23 09:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03da96d00c143013d09531846b569e3066dd49a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:3c:8c:7c:d1:91:1d:e8:e6:89:64:66:0b:
be:e2:a0:1d:be:e2:bd:d6:f6:6c:22:6c:8f:af:2b:
23:5a:c3:88:41:26:1a:34:05:a6:2a:c7:e1:d3:ec:
ef:7b:35:9d:18:ad:9b:df:40:ea:4a:ff:86:6c:63:
46:90:82:57:81:0b:da:f5:23:3e:64:31:37:12:9e:
e2:47:ba:f0:1e:8f:86:38:d6:2b:79:a8:dd:d8:ff:
8e:28:1c:71:18:bb:b4:fd:b4:80:6f:44:57:b3:8c:
6d:6d:63:ff:41:d5:6a:f1:ee:2b:ce:f7:d0:48:45:
b6:ae:42:a3:df:2e:c3:d2:68:cc:1a:8b:f9:f7:6b:
94:b0:25:40:d3:4b:45:e5:f6:b0:ed:6a:07:6e:e6:
a5:be:5f:2c:c5:cc:4f:8c:1c:99:a9:59:3b:5e:25:
58:70:ee:3e:57:74:7f:61:01:75:bf:e0:8d:bd:b3:
b5:2f:46:15:04:cc:59:49:6c:5c:04:11:97:fe:aa:
78:57:d9:2e:4f:39:bc:ac:b2:1a:80:76:35:5c:fa:
c0:72:45:76:16:4e:44:98:cf:6f:72:74:3a:06:9d:
74:3c:d0:54:79:27:9d:53:e6:3c:c6:f4:ff:46:04:
54:cf:5f:31:39:23:8e:34:6c:2e:f7:c6:fa:29:55:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:96:D0:0C:14:30:13:D0:95:31:84:6B:56:9E:30:66:DD:49:A2
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/A9qW0AwUMBPQlTGEa1aeMGbdSaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
91.190.155.0/24
109.205.61.0/24
185.223.207.0/24
194.29.100.0/23
194.29.186.0/23
IPv6:
2a0e:dc0:2::-2a0e:dc0:6:ffff:ffff:ffff:ffff:ffff
2a0e:dc0:8::/47
Signature Algorithm: sha256WithRSAEncryption
01:f5:82:d2:8b:27:00:42:84:b5:cb:45:ea:14:14:0b:32:73:
fe:32:0a:d8:fc:a8:6c:19:13:00:6c:09:d8:33:96:93:92:9c:
47:6d:b0:2b:1c:e7:cc:0f:de:e0:b9:fa:76:d4:bd:3c:b3:07:
fc:d8:38:bb:99:00:11:56:38:30:56:f7:be:9b:7e:72:88:e9:
77:81:a1:19:ce:2c:af:b2:22:4e:8e:75:7b:d0:f3:21:a7:77:
7b:6a:1a:5a:55:a7:fc:61:70:24:92:b2:0a:f0:0d:37:2e:7f:
b0:85:3d:07:ce:55:1e:22:d8:d0:88:2c:39:12:3f:11:6d:63:
65:5a:c5:39:3c:e9:da:c5:29:cb:a7:c6:03:4a:ba:80:95:12:
ed:2b:30:77:86:9d:e6:95:19:40:b0:23:20:26:61:b6:8b:2b:
b1:1e:b2:f1:e9:74:42:ad:b5:75:9c:e7:ab:eb:7b:d1:04:11:
e1:ef:06:28:28:74:08:c1:11:1c:66:ec:97:c3:0e:b6:65:ba:
99:5c:cc:4c:96:8c:3a:08:5d:03:9d:3b:e4:e2:d2:af:70:89:
02:82:10:e3:22:15:cc:ed:28:7e:2e:c4:3c:48:84:9d:35:b8:
8b:b8:01:42:28:f0:0b:b9:40:db:18:4c:b2:82:4e:5c:77:df:
91:27:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:05:58 2025 by rpki-client