Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/v6Va4a_kgjNaVEZV4IXg_iySTNs.roa
File: v6Va4a_kgjNaVEZV4IXg_iySTNs.roa (raw, json)
Hash identifier: qp8YzbJ1a/mpkxbQLBsAP402CyXt96zVk9JS7E4rpt4=
Subject key identifier: BF:A5:5A:E1:AF:E4:82:33:5A:54:46:55:E0:85:E0:FE:2C:92:4C:DB
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 061AC9D6
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/v6Va4a_kgjNaVEZV4IXg_iySTNs.roa
Signing time: Sat 01 Jan 2022 11:56:25 +0000
ROA not before: Sat 01 Jan 2022 11:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13101
IP address blocks: 82.97.128.0/18 maxlen: 24
176.119.214.0/24 maxlen: 24
86.103.0.0/16 maxlen: 24
217.70.192.0/20 maxlen: 24
213.158.96.0/19 maxlen: 24
213.178.64.0/19 maxlen: 24
185.118.20.0/22 maxlen: 24
2a00:12d0::/29 maxlen: 29
2a03:c140::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102418902 (0x61ac9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Jan 1 11:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa55ae1afe482335a544655e085e0fe2c924cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:ca:74:52:41:cc:09:6c:eb:9b:ce:b4:2c:
6e:c8:e5:2c:2a:0d:d2:f2:b2:19:f9:10:26:c0:43:
87:0b:4d:b5:a3:92:08:66:01:43:5f:ab:f2:0c:73:
d2:d1:ff:f2:f0:47:dd:ac:a8:10:4f:26:30:c7:36:
cc:ea:2c:d9:95:d2:c8:e9:36:6d:43:77:72:77:ef:
f3:b8:55:a0:67:91:5f:4a:f2:d6:1d:80:0f:26:b0:
56:cb:fb:25:bf:7f:4f:a8:62:64:43:6c:e7:74:6e:
3e:9a:2b:c9:ca:d9:6d:da:99:28:ab:f0:82:5f:21:
04:8f:37:e6:b6:42:61:68:fb:7b:6e:96:e3:79:79:
17:8a:4a:6e:57:b0:ac:76:6c:c6:91:2b:be:1a:6e:
28:f2:e2:5d:21:17:af:04:a8:fa:8a:85:8e:95:0a:
20:85:9a:5d:29:76:c5:7e:6d:66:28:e3:c0:58:aa:
56:96:75:58:78:c4:a0:91:85:22:a6:bc:cc:53:c3:
57:f4:e8:b8:49:df:32:a1:cb:3d:22:67:39:69:88:
57:3c:8c:10:b5:44:e2:ce:b4:c7:74:31:1d:95:55:
9c:84:06:91:c3:78:bc:4a:f6:6e:b7:71:fa:94:bf:
8a:0c:d1:4e:06:e9:02:59:f7:ed:26:60:16:f5:1b:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A5:5A:E1:AF:E4:82:33:5A:54:46:55:E0:85:E0:FE:2C:92:4C:DB
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/v6Va4a_kgjNaVEZV4IXg_iySTNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.128.0/18
86.103.0.0/16
176.119.214.0/24
185.118.20.0/22
213.158.96.0/19
213.178.64.0/19
217.70.192.0/20
IPv6:
2a00:12d0::/29
2a03:c140::/29
Signature Algorithm: sha256WithRSAEncryption
39:19:35:14:ee:84:6d:7b:30:2e:1d:20:a1:1f:08:61:ff:55:
66:ec:77:50:c8:20:ba:e4:d3:8d:de:c7:84:fd:0e:ee:c9:68:
ea:54:c6:f0:30:25:10:80:8a:d8:b7:d0:39:aa:a7:0c:39:3a:
ed:61:32:30:ee:c5:a0:ed:27:dc:08:7a:ef:1f:85:1b:3b:08:
65:e0:4f:59:9c:cc:df:3c:cb:71:8d:fc:21:56:d8:56:00:68:
05:75:d4:36:cd:e1:c7:f3:3b:29:38:0b:56:6a:60:83:6a:45:
31:f2:cd:5a:0d:49:2e:1c:50:e2:63:f6:02:ed:6e:fb:77:6f:
cc:39:93:91:90:cb:3f:c1:e4:13:b3:cf:8c:c9:54:d6:2a:61:
67:83:6c:9b:ad:07:2d:62:3e:3d:6b:2c:1e:43:08:ff:6b:c6:
cc:95:70:51:a2:87:2f:7a:35:7f:23:23:61:0c:67:fd:0c:7d:
ec:12:e3:cc:3d:23:6a:cb:17:43:47:13:b6:dc:03:c3:2a:78:
bf:2a:a2:73:e7:ff:91:cd:d0:82:78:47:aa:ca:57:91:c7:b5:
a8:99:43:80:28:8a:b1:bf:7e:7b:3a:9c:7e:4b:e5:50:b3:ad:
d4:30:6d:09:11:db:09:6e:d9:01:5c:07:3f:23:d4:18:0f:75:
f6:9a:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:45:15 2025 by rpki-client