Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/T8O9mtlT18EeSxMf3WzAarhRsZo.roa
File: T8O9mtlT18EeSxMf3WzAarhRsZo.roa (raw, json)
Hash identifier: TOim8qRSk+/9QUJ8aACArIG/U03AoRnUXLv04647Vvc=
Subject key identifier: 4F:C3:BD:9A:D9:53:D7:C1:1E:4B:13:1F:DD:6C:C0:6A:B8:51:B1:9A
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 018CA5BD08EDA2E1B58E4D2CE786A85D90C0
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/T8O9mtlT18EeSxMf3WzAarhRsZo.roa
Signing time: Tue 26 Dec 2023 10:47:58 +0000
ROA not before: Tue 26 Dec 2023 10:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50596
IP address blocks: 188.68.8.0/21 maxlen: 21
46.254.160.0/21 maxlen: 22
37.75.200.0/21 maxlen: 22
185.8.220.0/22 maxlen: 22
188.68.168.0/21 maxlen: 21
93.179.104.0/21 maxlen: 22
109.201.96.0/21 maxlen: 21
188.68.192.0/21 maxlen: 21
178.57.208.0/21 maxlen: 21
109.201.104.0/21 maxlen: 21
109.201.112.0/20 maxlen: 22
2a03:3cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:bd:08:ed:a2:e1:b5:8e:4d:2c:e7:86:a8:5d:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Dec 26 10:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc3bd9ad953d7c11e4b131fdd6cc06ab851b19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:e3:50:c5:ae:50:df:b9:66:05:a1:6a:fd:
07:d1:7b:e4:8b:73:c7:e1:c2:9c:19:d6:07:0b:1c:
ce:5e:07:b4:41:6c:79:7c:de:56:a3:73:b7:88:3c:
4f:c9:69:fa:83:5f:ea:a6:1d:bf:2a:6e:f5:7d:b1:
74:fc:58:a3:06:ef:bf:91:ff:d6:89:2d:5e:bc:04:
e6:59:22:0b:b3:ea:78:6c:bb:f8:7b:f4:ca:fb:0d:
71:03:b7:1c:d3:a6:b0:3b:fc:0e:9c:b7:72:1e:ad:
97:a8:ef:8e:91:90:79:3f:44:c5:90:30:04:5e:a5:
43:e0:f1:55:b9:21:42:42:91:57:a2:06:f9:40:a0:
e6:a9:22:fb:b7:ab:28:ef:d7:25:55:9d:f5:4e:2b:
21:44:ef:52:02:26:4e:97:20:5c:b4:e2:0e:67:01:
e0:f8:c9:bd:65:09:e3:d8:ef:59:f3:9f:fc:b7:0d:
ee:12:64:dd:24:f1:65:f5:6e:8a:9c:3e:b8:52:4f:
d0:eb:ef:f6:15:18:fa:01:e1:b9:9d:4b:01:62:88:
77:40:4f:49:b4:07:3d:6d:88:cd:ae:68:d2:b0:fd:
69:50:ab:50:77:9e:f5:bb:9c:85:2b:b3:8d:32:52:
9e:ec:f1:43:43:13:9c:c5:04:e5:46:0a:f8:d2:c5:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C3:BD:9A:D9:53:D7:C1:1E:4B:13:1F:DD:6C:C0:6A:B8:51:B1:9A
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/T8O9mtlT18EeSxMf3WzAarhRsZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.200.0/21
46.254.160.0/21
93.179.104.0/21
109.201.96.0/19
178.57.208.0/21
185.8.220.0/22
188.68.8.0/21
188.68.168.0/21
188.68.192.0/21
IPv6:
2a03:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ac:bc:46:38:fd:fb:24:c7:f5:b5:eb:a2:cd:3d:de:e2:1c:
5a:e1:5c:8f:f5:b4:33:10:a1:5b:56:87:16:8b:77:61:be:d0:
26:02:8b:0a:3e:46:cb:56:a1:e4:be:2e:ab:99:b0:8c:99:24:
34:6e:60:6d:20:c5:88:c3:34:91:da:56:a7:d8:91:da:db:5c:
97:fb:f7:92:95:b4:07:b8:f8:08:5c:01:fd:b4:ec:a4:ed:a9:
ff:6e:c0:1b:4e:60:a4:dc:72:c9:2e:95:41:28:26:c2:85:bc:
81:4f:1b:f5:c8:02:1f:18:ea:49:7e:61:d6:15:0b:bc:87:46:
4c:27:32:7a:8e:6f:f2:3c:86:ab:49:cb:9c:68:73:7e:12:39:
5e:7f:d9:c6:c9:15:b5:46:34:60:e5:37:d0:97:75:e5:9e:b5:
4e:fa:23:d3:04:b5:7c:34:96:f9:97:0e:93:c9:18:c6:2b:42:
08:3e:9c:0a:4e:07:e7:67:35:70:a2:e7:f7:94:e6:76:ad:57:
3c:c3:97:0d:eb:58:a2:4f:6f:cd:57:08:36:1a:73:28:3b:f8:
9a:1f:49:35:92:0a:53:7e:1d:c6:ea:8c:8c:b3:54:d6:f3:fa:
9e:53:7e:97:b3:ac:cc:9a:d1:4b:12:d6:6d:a6:17:97:a2:f0:
27:28:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:12 2025 by rpki-client