Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/KEgUnCpg779pkTn5bi9bJBQU8l4.roa
File: KEgUnCpg779pkTn5bi9bJBQU8l4.roa (raw, json)
Hash identifier: uHTFeX+VMkr20m3A1nzSmAj3JQjm3oUzcFrQtnKALmQ=
Subject key identifier: 28:48:14:9C:2A:60:EF:BF:69:91:39:F9:6E:2F:5B:24:14:14:F2:5E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 4141F700
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/KEgUnCpg779pkTn5bi9bJBQU8l4.roa
Signing time: Sat 01 Jan 2022 02:58:12 +0000
ROA not before: Sat 01 Jan 2022 02:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12552
IP address blocks: 213.80.64.0/19 maxlen: 19
94.246.64.0/18 maxlen: 18
213.80.0.0/18 maxlen: 18
83.145.0.0/18 maxlen: 18
213.132.96.0/19 maxlen: 19
213.212.0.0/18 maxlen: 18
212.16.160.0/19 maxlen: 19
212.112.160.0/19 maxlen: 19
62.209.160.0/19 maxlen: 19
212.37.0.0/19 maxlen: 19
82.99.0.0/18 maxlen: 18
62.109.32.0/19 maxlen: 19
2a01:2b0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094842112 (0x4141f700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jan 1 02:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2848149c2a60efbf699139f96e2f5b241414f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:8f:16:70:00:b8:60:f8:89:36:b3:90:f5:
6a:e8:30:80:47:dd:b5:0c:89:91:37:60:ce:f3:34:
3f:cd:de:42:9e:12:88:e4:21:2d:e5:09:6e:48:f1:
37:a1:fa:7e:8f:96:00:5e:db:d4:bb:9d:97:f9:5e:
08:c2:df:ac:c2:38:4e:75:4b:47:6e:b3:33:3d:59:
65:31:ad:a2:a1:ac:64:8b:d1:00:ef:30:15:7d:07:
9d:5e:8a:f0:97:6b:e1:03:06:e6:19:31:c3:fd:90:
23:f8:d8:e9:4d:2d:1d:47:29:dc:a7:64:aa:38:5f:
9e:33:dc:5a:c0:f3:fd:5e:76:88:2f:02:20:a4:a5:
16:7b:dc:98:55:14:f9:76:bf:63:9f:4b:e0:39:e0:
37:80:b3:c2:81:ba:70:23:fd:66:16:85:67:78:3e:
09:f8:07:46:2b:27:2a:3c:f8:c9:96:17:56:8a:fc:
01:fa:e1:16:e9:d4:53:58:7e:8a:c5:27:16:d6:1b:
2b:5a:c3:92:d5:f6:7a:e0:5c:e6:7d:a3:59:a6:30:
d1:32:31:2f:2a:cc:c6:07:93:cb:7a:44:f7:11:d1:
59:64:6a:d7:f7:d5:37:9e:f8:1e:2d:64:01:a9:91:
33:1b:72:2d:6f:a4:af:ce:6f:c7:b2:4a:10:ab:0c:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:14:9C:2A:60:EF:BF:69:91:39:F9:6E:2F:5B:24:14:14:F2:5E
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/KEgUnCpg779pkTn5bi9bJBQU8l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.109.32.0/19
62.209.160.0/19
82.99.0.0/18
83.145.0.0/18
94.246.64.0/18
212.16.160.0/19
212.37.0.0/19
212.112.160.0/19
213.80.0.0-213.80.95.255
213.132.96.0/19
213.212.0.0/18
IPv6:
2a01:2b0::/29
Signature Algorithm: sha256WithRSAEncryption
99:69:28:fb:d8:5e:37:4a:fc:f4:e3:c2:f5:78:6e:ae:15:33:
da:11:9b:67:02:cd:e6:2f:0c:23:b6:92:cb:04:12:3f:8e:5c:
5f:35:73:74:f4:f2:84:8f:a4:9a:70:bc:8b:23:e7:dd:66:25:
bf:4e:48:49:e4:0e:72:ae:ce:25:4d:e2:70:c7:3d:f6:df:01:
17:5a:d8:e9:94:e0:c2:aa:e5:f3:2d:7a:4d:48:2c:32:1b:6c:
b5:d6:5e:01:8c:ca:62:f1:00:97:6c:6e:e4:2d:28:b4:02:c9:
88:0f:74:89:56:a8:cd:87:77:e6:ad:05:ea:9c:4d:72:41:51:
a9:b1:0b:1b:0e:f7:8c:93:aa:1b:10:52:04:aa:fc:c6:71:e1:
ef:01:74:d6:02:78:a1:e2:09:88:0c:ef:80:13:98:d3:22:a9:
e1:f1:0c:3f:a1:5d:ad:f4:d7:1c:5b:a0:5e:2c:35:c9:4c:79:
7a:24:a2:55:a4:f0:0a:30:54:78:e4:f7:b6:21:4c:23:47:0d:
c1:74:e0:78:46:d7:3b:4e:08:d5:98:c7:f8:46:7c:c9:ca:b7:
e0:34:1e:5a:fb:6c:e4:ea:bb:73:51:d1:93:43:45:1a:d0:c4:
83:99:e6:cf:4c:13:30:ee:79:2a:3e:f8:59:a8:d7:db:9e:01:
dc:ea:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:41 2025 by rpki-client