Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/rioATNtgKsAAx-sracq0zNPO_Qc.roa
File: rioATNtgKsAAx-sracq0zNPO_Qc.roa (raw, json)
Hash identifier: GkiE7Ojo7c6r9q9Vj9etA8q/H8YB+ZAKOAAhcypBPZI=
Subject key identifier: AE:2A:00:4C:DB:60:2A:C0:00:C7:EB:2B:69:CA:B4:CC:D3:CE:FD:07
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 36350BDB
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/rioATNtgKsAAx-sracq0zNPO_Qc.roa
Signing time: Sat 01 Jan 2022 10:54:39 +0000
ROA not before: Sat 01 Jan 2022 10:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41000
IP address blocks: 194.110.243.0/24 maxlen: 24
193.23.224.0/24 maxlen: 24
176.74.16.0/21 maxlen: 21
193.33.178.0/23 maxlen: 23
185.86.108.0/22 maxlen: 22
185.176.248.0/22 maxlen: 22
195.170.173.0/24 maxlen: 24
2a00:b980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909446107 (0x36350bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Jan 1 10:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae2a004cdb602ac000c7eb2b69cab4ccd3cefd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:a2:02:0c:5c:21:4a:7b:98:21:27:c2:44:
70:fb:07:5b:6c:a4:90:5c:66:c2:c9:fc:f2:a0:15:
8b:40:10:2b:40:bf:38:74:7d:53:f7:6c:79:32:13:
c6:90:c1:7b:de:a6:48:40:af:9e:0c:17:8c:5c:3f:
18:ae:2f:0a:d6:92:13:e4:d7:31:6f:0b:0c:c3:a8:
03:b0:a1:5b:1c:28:5e:c2:8c:dc:80:e0:9d:e5:5c:
9c:be:dc:a8:f3:ca:bc:c2:61:ba:90:08:1a:20:2d:
f1:2f:b5:87:d8:bc:aa:7d:ff:93:2f:bc:b2:82:4a:
53:bf:cf:18:db:38:63:2e:39:c5:5d:8d:db:13:03:
89:7a:29:19:af:e3:e8:65:a7:60:4a:22:62:a8:58:
d1:4c:80:02:c3:85:27:4a:ba:a1:c8:31:e6:eb:7e:
34:df:88:39:43:ad:90:16:f9:46:33:f8:f6:85:3e:
71:d8:d4:54:00:e1:69:1c:21:02:5f:e0:3e:32:23:
7b:80:58:4b:13:ad:77:05:d3:33:82:4c:8a:65:75:
a3:2c:f1:e9:af:89:2e:83:4f:5c:ff:63:18:57:a3:
a6:e6:53:5f:97:62:4a:f9:cd:e5:cf:7b:80:56:11:
90:d5:60:63:39:f7:f9:8d:62:f5:f7:6e:15:f4:71:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:00:4C:DB:60:2A:C0:00:C7:EB:2B:69:CA:B4:CC:D3:CE:FD:07
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/rioATNtgKsAAx-sracq0zNPO_Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.16.0/21
185.86.108.0/22
185.176.248.0/22
193.23.224.0/24
193.33.178.0/23
194.110.243.0/24
195.170.173.0/24
IPv6:
2a00:b980::/29
Signature Algorithm: sha256WithRSAEncryption
56:da:09:9a:cf:d9:ba:a2:89:53:ac:ff:dc:c6:44:aa:9a:a3:
cb:03:fc:0f:0a:fd:d3:ed:e6:8d:26:3c:88:58:da:4e:f9:b3:
9f:a9:e1:2f:d6:4a:cd:7b:49:a3:18:a3:82:a5:41:48:11:f4:
cc:d5:56:28:be:cf:56:d4:71:18:7a:ae:d3:ab:8c:92:97:6c:
99:41:87:50:28:01:72:b7:58:cb:c5:0a:48:7b:df:fd:ea:c0:
d6:6f:e3:69:5d:53:d1:06:a7:4c:45:c9:89:4a:4c:f0:e8:a3:
a0:91:78:bb:73:01:0b:a0:af:d6:e0:a1:fa:c7:1f:f3:50:c0:
f7:de:80:ec:49:23:49:38:28:36:30:66:19:80:94:47:c9:55:
58:b8:9a:ab:d5:e5:1b:84:17:2b:f8:c2:1a:bd:f1:c3:12:1d:
8a:48:7e:65:61:65:8a:f7:2f:3f:6c:5f:f5:d2:34:a6:20:2d:
0f:e5:9e:66:44:4a:f4:ca:5b:e4:17:9d:23:9a:d6:97:a6:18:
60:a9:02:b0:14:00:cd:5b:73:4b:cb:82:e8:65:12:4e:25:2c:
7e:a1:9c:60:3c:ae:59:70:ac:e9:5d:c0:03:1e:14:47:bb:03:
6f:d8:f0:48:89:d0:4c:f1:f3:ca:9e:8f:61:75:48:fb:39:f7:
cd:e8:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:24 2025 by rpki-client