Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/jl1WKRs3Z5siCzSvIeCPG6eLzl8.roa
File: jl1WKRs3Z5siCzSvIeCPG6eLzl8.roa (raw, json)
Hash identifier: StTmrJpje9IR1GP3jUePW9Xh4rgdCgMkNyNLrgiVR4w=
Subject key identifier: 8E:5D:56:29:1B:37:67:9B:22:0B:34:AF:21:E0:8F:1B:A7:8B:CE:5F
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 0188FCB146120A190AC7BC61AEBFF1D775F9
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/jl1WKRs3Z5siCzSvIeCPG6eLzl8.roa
Signing time: Tue 27 Jun 2023 11:50:56 +0000
ROA not before: Tue 27 Jun 2023 11:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205806
IP address blocks: 149.249.240.0/22 maxlen: 22
185.206.44.0/22 maxlen: 22
185.147.168.0/22 maxlen: 22
149.249.160.0/19 maxlen: 22
185.178.24.0/22 maxlen: 22
149.249.192.0/19 maxlen: 22
213.208.40.0/21 maxlen: 22
213.208.40.0/22 maxlen: 22
213.208.44.0/22 maxlen: 22
149.249.224.0/20 maxlen: 20
213.208.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:b1:46:12:0a:19:0a:c7:bc:61:ae:bf:f1:d7:75:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jun 27 11:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5d56291b37679b220b34af21e08f1ba78bce5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:a5:fe:24:bc:5f:d1:5d:5e:7c:19:c1:6c:
b1:55:2b:1a:83:46:0b:d3:08:55:5f:1f:b0:ca:dd:
d4:84:49:e2:2d:34:e9:47:bf:56:dd:66:79:77:e1:
55:8c:49:82:c2:f5:18:16:78:83:6b:b9:4c:fa:83:
30:a7:1d:c9:c1:e0:66:17:40:c5:ae:d1:b8:9e:cb:
fb:20:22:dd:96:17:55:f3:05:4a:c5:98:b9:63:f4:
65:b9:03:4e:fa:e8:36:cf:89:56:73:68:79:ac:3a:
27:50:c4:62:2a:0f:d0:f8:6c:c3:79:8d:bb:f4:ca:
45:66:ae:cc:5b:04:45:0a:07:13:a5:e4:75:c7:d7:
97:82:bb:81:2f:28:ce:75:96:2b:f1:40:f0:e3:c3:
c5:07:38:c2:47:4f:14:76:8d:c9:27:51:2b:6e:ab:
83:ad:a5:10:04:84:82:2b:9d:7f:6a:47:33:8a:58:
e3:03:81:90:6d:df:4f:ae:2a:4f:43:d2:75:7d:85:
91:41:c1:91:e8:6e:ce:62:69:54:b2:0f:83:51:05:
48:8d:8d:a6:0b:c7:c0:8f:f8:b0:30:3c:af:14:b4:
99:8b:a9:05:8b:f0:33:ae:c9:1d:f3:77:1f:d5:d2:
44:db:ed:fd:86:c3:59:5c:5d:d0:3c:28:fe:4f:d1:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5D:56:29:1B:37:67:9B:22:0B:34:AF:21:E0:8F:1B:A7:8B:CE:5F
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/jl1WKRs3Z5siCzSvIeCPG6eLzl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.160.0-149.249.243.255
185.147.168.0/22
185.178.24.0/22
185.206.44.0/22
213.208.40.0-213.208.51.255
Signature Algorithm: sha256WithRSAEncryption
74:aa:d2:a0:38:9d:8d:e7:ec:81:44:98:c6:9d:a2:36:63:7a:
40:08:74:39:2b:a8:9d:dc:0a:8d:63:96:b7:af:c5:7f:dc:98:
4b:50:7b:aa:36:e8:ad:24:b8:57:9d:79:72:9b:25:17:f2:26:
41:a9:d3:04:a4:b6:7e:d2:be:e9:8f:29:9c:54:d3:5b:fb:d7:
50:35:ae:bc:2d:9a:06:de:cd:32:7b:d7:72:46:3c:20:88:7a:
f1:74:f0:b5:e3:34:48:25:ff:4a:53:5e:7f:95:97:1d:6c:5f:
34:62:67:7a:ac:27:93:9a:ae:9f:c6:35:02:35:b5:e6:9e:7b:
0a:14:86:17:88:2c:ba:2a:31:c5:f5:23:82:b4:2c:9d:47:32:
b0:07:69:2e:b3:61:73:4f:a7:cf:21:d9:c9:fc:3f:31:fc:6d:
30:bb:99:58:87:91:e8:04:e6:1a:5c:e5:55:6e:7f:b0:49:d3:
9f:9e:de:fe:1d:27:c6:c0:1a:af:e6:6a:6f:1d:47:df:9c:65:
76:04:06:ae:c4:43:4d:66:18:b1:14:03:83:12:50:ac:2f:9c:
5d:10:ea:d3:c2:af:d8:8d:09:77:0c:38:d1:f8:53:69:8c:15:
b7:74:e4:37:16:ce:cf:0c:f7:a2:7c:7f:88:05:8a:8a:38:c6:
4a:ba:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:31:54 2025 by rpki-client