Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/o7CTIFWHf9Q1cYR0NM-Tb_2LO3g.roa
File: o7CTIFWHf9Q1cYR0NM-Tb_2LO3g.roa (raw, json)
Hash identifier: kYyKf+vf7NTA/HS+c9jkO1AI68n1XZfvo9xTy0y5rdA=
Subject key identifier: A3:B0:93:20:55:87:7F:D4:35:71:84:74:34:CF:93:6F:FD:8B:3B:78
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 01856E8B1D868D58F6565D079852D85EE01C
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/o7CTIFWHf9Q1cYR0NM-Tb_2LO3g.roa
Signing time: Sun 01 Jan 2023 18:14:48 +0000
ROA not before: Sun 01 Jan 2023 18:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28768
IP address blocks: 185.124.216.0/22 maxlen: 22
94.143.216.0/23 maxlen: 23
81.200.32.0/21 maxlen: 21
81.200.40.0/21 maxlen: 21
2a00:1bb0::/32 maxlen: 32
2a03:9060::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:1d:86:8d:58:f6:56:5d:07:98:52:d8:5e:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Jan 1 18:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b0932055877fd43571847434cf936ffd8b3b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:41:91:a6:45:a5:37:90:ce:38:4d:91:97:
f0:87:a6:df:1b:2c:cc:59:f5:d7:20:ea:ea:3d:38:
d8:88:a7:85:29:2a:8d:15:28:7b:f1:41:e9:f4:7a:
40:88:d3:76:f9:aa:ec:e6:f3:80:b0:05:23:c8:a4:
49:7a:82:60:a5:e2:e3:30:45:55:e0:37:da:c8:8e:
ed:69:05:c6:23:09:2b:eb:ca:ec:04:4e:6f:2c:0b:
33:b1:a0:38:04:fd:02:07:18:e2:fb:e7:7f:bb:d3:
8d:f4:f4:85:6e:9f:9d:99:a1:25:38:e4:0b:c9:e9:
40:c5:6d:2c:bb:b5:0d:06:29:08:94:96:b4:3e:40:
7d:ac:c7:66:1e:d1:89:60:4e:0e:36:9f:e2:be:95:
e5:ef:4a:d3:60:c3:ad:27:d1:6f:33:5d:f4:df:f4:
54:2e:0a:aa:ee:15:da:d8:1a:42:d2:91:fb:42:99:
a4:83:ff:48:63:74:1f:6c:c5:0f:a0:d2:00:c3:92:
6c:37:52:8e:1c:8b:ed:84:4c:21:9d:8d:4d:cb:10:
74:96:63:41:d9:dd:17:69:24:22:f0:19:35:63:0e:
dc:dc:06:fa:4f:96:99:1c:56:09:01:a8:1b:8c:b6:
ef:e1:5f:72:6e:2b:fc:13:e3:70:ce:3b:4f:2b:09:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:93:20:55:87:7F:D4:35:71:84:74:34:CF:93:6F:FD:8B:3B:78
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/o7CTIFWHf9Q1cYR0NM-Tb_2LO3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.200.32.0/20
94.143.216.0/23
185.124.216.0/22
IPv6:
2a00:1bb0::/32
2a03:9060::/32
Signature Algorithm: sha256WithRSAEncryption
61:2b:9a:17:a1:4a:b3:74:1f:f0:07:88:19:6c:4e:b2:3c:1b:
d6:d8:6e:e8:e5:3b:27:b8:64:28:1b:42:c4:56:3a:30:cb:43:
ca:92:7d:de:25:c4:45:ac:3e:4b:30:83:8f:15:e4:13:d0:eb:
43:0e:d4:1f:95:a6:96:ac:47:58:ea:75:22:78:fa:c5:b4:2a:
d0:85:1d:34:35:3c:1a:43:b7:eb:85:8a:a0:bc:16:3f:36:03:
da:d4:b6:98:8b:a2:bd:99:3f:8e:5c:9f:e9:ee:e8:b5:5d:cf:
97:34:a5:db:67:d9:c0:83:80:92:78:92:6e:3b:2a:6d:7c:7d:
09:a4:49:01:2a:0d:62:69:76:77:ff:f8:ec:35:21:3c:86:be:
60:09:2e:1f:7e:70:8c:89:41:33:17:77:94:20:d4:65:4c:89:
35:68:79:98:36:f3:aa:c7:08:d6:8a:5d:b0:14:46:21:f2:66:
fd:e5:b3:5b:bd:42:97:9a:14:9e:8b:15:20:9d:bb:fd:01:39:
3f:2d:66:1b:d0:f2:12:23:9d:c7:63:d2:53:81:7f:2a:47:01:
d1:67:4f:2d:5b:f3:ce:c2:f7:87:03:96:78:66:36:38:42:27:
5b:95:16:62:35:1e:4f:c5:71:dc:e3:6b:3a:07:e4:5c:57:6b:
4c:98:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:38 2025 by rpki-client