Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/X8XFS-MG7CGJ2VCviT_RJqMfOIM.roa
File: X8XFS-MG7CGJ2VCviT_RJqMfOIM.roa (raw, json)
Hash identifier: FSqkKka5OqJd7NNgAszXzKV0X2jzFS3vPnlWye3+GlQ=
Subject key identifier: 5F:C5:C5:4B:E3:06:EC:21:89:D9:50:AF:89:3F:D1:26:A3:1F:38:83
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A275387DB9D0F105836F3A512A0A433AA
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/X8XFS-MG7CGJ2VCviT_RJqMfOIM.roa
Signing time: Thu 24 Aug 2023 11:35:00 +0000
ROA not before: Thu 24 Aug 2023 11:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8966
IP address blocks: 195.229.3.0/24 maxlen: 24
195.229.0.0/24 maxlen: 24
195.229.1.0/24 maxlen: 24
195.229.4.0/24 maxlen: 24
195.229.0.0/19 maxlen: 19
195.229.2.0/24 maxlen: 24
195.229.6.0/24 maxlen: 24
195.229.5.0/24 maxlen: 24
5.195.166.0/24 maxlen: 24
5.195.167.0/24 maxlen: 24
5.195.166.0/23 maxlen: 24
5.195.175.0/24 maxlen: 24
5.195.173.0/24 maxlen: 24
5.195.174.0/24 maxlen: 24
195.229.12.0/24 maxlen: 24
195.229.27.0/24 maxlen: 24
195.229.31.0/24 maxlen: 24
195.229.34.0/24 maxlen: 24
31.219.177.0/24 maxlen: 24
31.219.177.0/25 maxlen: 25
31.219.179.0/24 maxlen: 24
31.219.177.128/25 maxlen: 25
31.219.180.0/24 maxlen: 24
5.195.208.0/24 maxlen: 24
5.195.223.0/24 maxlen: 24
194.170.186.0/24 maxlen: 24
2001:8f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:53:87:db:9d:0f:10:58:36:f3:a5:12:a0:a4:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Aug 24 11:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc5c54be306ec2189d950af893fd126a31f3883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:c8:e7:61:09:86:7a:31:e8:58:84:61:6a:
c3:3a:0a:31:3d:31:d1:23:37:49:e8:dc:2c:74:1d:
97:ac:55:a2:e1:44:28:6d:b3:2b:eb:c8:ab:6b:1e:
89:c2:f6:a2:51:ed:11:8a:01:5e:95:ab:3d:5b:8c:
76:0b:a8:48:ce:5d:45:c7:d1:c1:aa:b7:d2:ef:5b:
71:70:4d:65:70:bb:9d:48:a1:03:07:92:cd:0c:8a:
0a:be:da:7c:46:cf:23:34:ad:83:c8:47:39:d7:f5:
b8:3e:6b:84:d2:3d:02:8b:94:be:7b:ed:3a:f5:12:
e0:7e:dc:aa:ae:f2:6d:98:b8:1c:ab:17:6b:b4:02:
23:2c:18:1c:79:d5:1b:be:f9:1a:53:b8:40:4b:bd:
46:21:29:55:71:63:86:6d:61:38:65:e4:62:aa:f4:
6b:13:ea:25:2c:79:43:b7:dd:87:bd:9d:c9:da:a0:
fa:22:7d:77:2d:96:e0:80:e5:6c:5c:03:d5:b7:9d:
46:40:ef:92:c3:ad:ac:43:0d:7b:08:b3:d4:b0:0a:
26:2c:80:ed:cc:76:7e:74:95:ee:2d:73:d7:62:73:
13:d5:57:b4:a1:e4:c0:bc:03:86:96:2c:bd:a3:a7:
a9:95:9f:db:95:7c:12:6c:f1:29:17:49:8e:48:54:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:C5:4B:E3:06:EC:21:89:D9:50:AF:89:3F:D1:26:A3:1F:38:83
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/X8XFS-MG7CGJ2VCviT_RJqMfOIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.195.166.0/23
5.195.173.0-5.195.175.255
5.195.208.0/24
5.195.223.0/24
31.219.177.0/24
31.219.179.0-31.219.180.255
194.170.186.0/24
195.229.0.0/19
195.229.34.0/24
IPv6:
2001:8f8::/32
Signature Algorithm: sha256WithRSAEncryption
00:e8:44:18:6e:f8:b3:09:86:69:44:8c:5b:a9:85:82:37:1c:
bc:09:1d:ab:21:64:11:14:50:96:73:5e:e9:dc:b9:42:3d:7c:
4a:56:2e:73:4d:50:d2:9f:24:0f:44:52:93:b3:ce:0b:ad:ee:
07:86:a6:da:5e:23:ce:f8:d4:21:c8:4e:31:00:e5:4f:61:fa:
b7:7e:65:fd:24:36:73:0a:cf:ab:5c:de:a1:0d:b1:00:56:41:
2e:97:3a:89:01:eb:20:92:84:34:13:0a:3e:fd:99:88:75:b6:
84:65:2f:40:5d:82:77:01:13:43:74:1f:25:52:6c:26:0d:aa:
17:5c:23:94:d9:2b:78:84:44:f5:4a:a4:12:03:01:bd:80:55:
c9:19:a6:1a:44:ae:b1:6b:dc:e9:19:c2:24:54:66:2f:8c:bf:
24:36:26:ac:cd:71:02:33:8d:90:6f:3b:4f:01:a8:af:7e:0e:
c5:83:3f:b3:a7:2f:4c:4f:cc:13:cf:1a:1a:fb:3f:0e:de:42:
6c:6c:72:0d:ad:82:e0:ee:41:66:91:f9:0c:dc:9f:f0:cd:36:
cc:54:79:5f:ee:73:0b:86:81:11:f1:d1:b9:b2:d4:87:53:9d:
3f:96:a2:a6:7e:4c:94:b0:2c:a7:de:6f:08:12:20:1d:3d:9e:
f2:6b:48:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:45:04 2025 by rpki-client