Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/7_WCrW6zuiApgpD6hRb708FviaQ.roa
File: 7_WCrW6zuiApgpD6hRb708FviaQ.roa (raw, json)
Hash identifier: xW+vq6B0GtbUBlaBOY9TngCQv9RN+ADZQCudwjbbJrU=
Subject key identifier: EF:F5:82:AD:6E:B3:BA:20:29:82:90:FA:85:16:FB:D3:C1:6F:89:A4
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0A38381A
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/7_WCrW6zuiApgpD6hRb708FviaQ.roa
Signing time: Sat 01 Jan 2022 11:58:11 +0000
ROA not before: Sat 01 Jan 2022 11:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 185.26.96.0/22 maxlen: 22
212.224.75.50/32 maxlen: 32
212.224.75.51/32 maxlen: 32
212.224.75.52/32 maxlen: 32
84.200.39.0/24 maxlen: 24
212.224.64.0/18 maxlen: 24
212.224.70.0/23 maxlen: 23
212.224.71.130/32 maxlen: 32
212.224.77.0/24 maxlen: 24
212.224.71.131/32 maxlen: 32
212.224.72.0/24 maxlen: 24
212.224.88.0/24 maxlen: 24
84.200.205.0/24 maxlen: 24
212.224.104.0/24 maxlen: 24
79.133.32.0/19 maxlen: 24
159.100.0.0/19 maxlen: 24
84.201.17.0/24 maxlen: 24
159.100.6.0/24 maxlen: 24
159.100.8.0/24 maxlen: 24
84.201.18.0/24 maxlen: 24
159.100.18.0/24 maxlen: 24
212.224.125.0/24 maxlen: 24
212.224.126.0/24 maxlen: 24
31.172.80.0/24 maxlen: 24
31.172.80.0/20 maxlen: 24
82.211.17.0/24 maxlen: 24
2a01:7e0:1fc::/48 maxlen: 48
2a01:7e0:2f::/48 maxlen: 48
2a01:7e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171456538 (0xa38381a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 11:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eff582ad6eb3ba20298290fa8516fbd3c16f89a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:bb:71:1f:c6:db:c0:dc:51:6f:0e:83:4f:
a8:e5:bf:7d:8a:d6:9c:f3:a1:21:cb:d4:3e:33:ba:
e5:df:2a:c5:3c:af:a7:47:c3:39:bd:2b:bb:24:4d:
5c:b1:63:09:4b:f2:67:57:ab:7b:51:fc:b6:15:fe:
ff:12:e0:15:e0:9a:56:69:4b:13:95:b2:fa:0e:c4:
90:8c:7b:64:c4:09:d4:d0:ff:fb:7e:74:c1:be:16:
2a:08:ad:89:b1:b2:da:91:fe:4b:3a:f0:70:24:1d:
18:a7:21:b2:83:88:e0:4e:ad:3d:56:0f:22:45:0b:
48:32:db:2e:74:41:e7:5f:84:21:4a:2a:b9:8c:32:
b5:93:8f:9f:b7:dd:82:9a:a4:55:75:e7:00:d2:42:
8b:9d:58:56:f4:75:ed:df:4e:28:7a:9f:35:b0:73:
0a:ab:42:a4:17:1d:f4:66:c6:fb:68:99:d1:39:ce:
36:02:d6:5c:a7:85:c4:81:ec:e3:b8:b2:40:1e:ee:
11:75:03:6a:b6:f0:f2:8b:25:59:7a:96:19:3b:e8:
65:2c:a3:25:92:4a:52:31:a3:b4:a3:3d:fb:fe:c3:
4e:c9:da:81:c2:1e:f8:61:a0:26:75:90:27:c9:ca:
cd:b2:31:40:a3:04:b6:c4:70:4a:da:62:45:27:97:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:82:AD:6E:B3:BA:20:29:82:90:FA:85:16:FB:D3:C1:6F:89:A4
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/7_WCrW6zuiApgpD6hRb708FviaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.80.0/20
79.133.32.0/19
82.211.17.0/24
84.200.39.0/24
84.200.205.0/24
84.201.17.0-84.201.18.255
159.100.0.0/19
185.26.96.0/22
212.224.64.0/18
IPv6:
2a01:7e0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:cc:a8:c4:5c:12:ff:2d:1a:a2:25:a4:c5:31:37:e4:19:6b:
73:2b:64:2a:12:bb:6c:40:b2:26:1a:ad:34:72:65:ae:26:39:
31:be:2a:c8:da:bc:6a:44:c6:5f:e1:95:9b:cc:89:a0:56:46:
33:a8:a9:7e:1f:b6:92:e6:b5:8e:75:1a:4b:95:37:42:8f:49:
cd:36:9c:46:95:1c:4a:29:b2:0b:e2:96:2f:b5:45:49:a7:1b:
fb:80:98:66:20:b5:50:1c:d4:73:58:a1:a1:23:e9:cf:80:68:
49:b2:c7:cb:c3:e1:35:13:fd:4f:6b:4b:78:d3:71:0d:da:5f:
e5:d1:78:27:38:be:c2:5d:1a:d3:bb:44:eb:c5:fe:ab:38:61:
53:86:49:22:42:da:79:03:fd:05:48:55:db:3b:45:87:95:87:
d1:36:cc:62:1b:49:b4:6a:ef:08:c6:0b:64:66:a4:a5:67:ac:
0c:1d:41:34:89:65:54:36:11:3b:63:86:6e:16:14:0d:14:01:
3f:79:1d:66:58:23:d4:af:1a:b3:05:ed:4e:2c:c8:24:0c:5f:
9c:7f:4e:98:ac:14:2d:83:ec:b5:79:80:fb:3a:80:26:83:46:
97:5a:55:9f:29:fc:2a:b2:4b:63:af:3f:1d:fb:a6:5f:8b:5a:
2e:46:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:39 2025 by rpki-client