Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/_1w9lYpai8lm_-4rroXiJeN4obU.roa
File: _1w9lYpai8lm_-4rroXiJeN4obU.roa (raw, json)
Hash identifier: O7kK9Snba2wWvu83erlgIvn3hzQOndILX6ukVxC++ME=
Subject key identifier: FF:5C:3D:95:8A:5A:8B:C9:66:FF:EE:2B:AE:85:E2:25:E3:78:A1:B5
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 018A0316E05139CB0664C895517AACE8DC6B
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/_1w9lYpai8lm_-4rroXiJeN4obU.roa
Signing time: Thu 17 Aug 2023 10:42:25 +0000
ROA not before: Thu 17 Aug 2023 10:42:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
185.223.207.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:16:e0:51:39:cb:06:64:c8:95:51:7a:ac:e8:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Aug 17 10:42:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff5c3d958a5a8bc966ffee2bae85e225e378a1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:01:f5:0f:0d:93:da:c1:01:b1:da:07:34:
21:bc:a5:b2:b8:f9:81:26:43:98:4a:18:a2:70:a0:
46:63:28:05:5b:19:55:b8:78:6c:fa:c3:1d:50:e1:
af:4c:67:95:f6:c8:05:a0:95:13:ec:f8:45:2c:fe:
26:40:ba:a2:87:aa:2e:a1:bc:13:b5:70:79:21:6c:
ad:94:db:99:d2:f3:2f:eb:c0:fc:8e:6e:0a:16:42:
cd:67:a6:a6:01:11:36:53:57:42:b3:40:42:d9:5a:
89:8d:c7:92:2e:c1:65:b0:7a:cc:a8:ac:5a:2c:4c:
32:fd:e3:cf:5b:ea:af:b4:5b:ac:32:16:0f:31:da:
d9:1d:0e:75:2c:2c:50:2c:56:ba:ef:39:c1:28:0f:
7a:f5:df:8e:8c:12:1d:63:92:eb:e7:f9:d5:13:9c:
e8:00:ad:da:63:4b:c0:4c:6a:6c:4f:a9:48:2f:c7:
2b:7e:24:7a:93:56:5d:04:26:1b:49:bd:cb:19:2e:
9f:27:c7:13:af:f8:93:df:15:23:ee:d1:fe:b2:63:
44:a4:a2:06:10:5e:e5:f0:07:51:88:49:85:55:c7:
98:ed:20:12:55:ed:0d:42:02:af:fb:a2:e0:1b:e9:
16:64:7e:2a:78:d7:b5:3a:f1:ca:46:b3:68:7a:4c:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:3D:95:8A:5A:8B:C9:66:FF:EE:2B:AE:85:E2:25:E3:78:A1:B5
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/_1w9lYpai8lm_-4rroXiJeN4obU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
109.205.61.0/24
185.223.207.0/24
194.29.100.0/23
194.29.186.0/23
IPv6:
2a0e:dc0:2::-2a0e:dc0:6:ffff:ffff:ffff:ffff:ffff
2a0e:dc0:8::/47
Signature Algorithm: sha256WithRSAEncryption
71:74:32:e8:64:12:bd:1a:87:6e:ef:43:20:a7:01:29:24:70:
fd:c5:92:a9:b9:f1:94:50:7b:ab:51:17:b2:06:23:de:b6:6b:
5d:54:d8:31:5f:16:69:8e:4d:a4:17:a9:9d:d3:3e:b5:e1:d8:
bd:81:63:f0:55:db:3b:d4:32:f2:f6:95:a9:f5:27:32:0d:a0:
94:cf:a8:de:dd:17:ee:49:a4:95:20:b1:4c:68:02:b8:d4:c8:
dc:56:2a:c7:06:af:c2:13:bd:1e:a5:3e:67:45:64:a0:d5:0e:
7b:de:7a:ef:67:ba:ca:63:1a:2f:9c:c4:9f:31:74:81:ec:72:
ee:42:0c:79:9f:f8:d6:cc:f0:8c:1d:c2:bd:7f:fa:4d:66:43:
b4:bd:c0:c1:c4:b7:af:fe:54:a2:db:47:ac:b0:e6:53:55:89:
2d:21:e2:52:5b:98:b4:b4:b7:69:b4:d0:cd:6d:41:f4:31:72:
eb:5a:0a:a6:4a:e2:0c:5b:ef:b2:ee:8b:9f:49:91:7d:4a:5a:
23:0e:f6:74:8d:59:f6:f3:54:04:f1:39:5f:93:c9:42:be:f4:
a0:6f:9e:8a:80:e6:54:e4:1c:c5:72:15:44:24:18:35:a3:77:
8d:82:a8:d3:9a:0d:e5:83:ff:86:ae:a2:2b:cd:b7:dc:0d:0e:
ca:bb:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:17:16 2025 by rpki-client