Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/kUi8GhfCUXrxyrnX1OGsAEmmvLo.roa
File: kUi8GhfCUXrxyrnX1OGsAEmmvLo.roa (raw, json)
Hash identifier: 2R3rSXDRvNnaQiBkUsKATzPYAW/H12EvdFnz2dQY9fw=
Subject key identifier: 91:48:BC:1A:17:C2:51:7A:F1:CA:B9:D7:D4:E1:AC:00:49:A6:BC:BA
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 0188C32C0E354EEADC7A8E160B3391222989
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/kUi8GhfCUXrxyrnX1OGsAEmmvLo.roa
Signing time: Fri 16 Jun 2023 07:47:04 +0000
ROA not before: Fri 16 Jun 2023 07:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5410
IP address blocks: 31.32.0.0/13 maxlen: 13
80.214.248.0/21 maxlen: 21
62.201.128.0/19 maxlen: 19
80.215.0.0/16 maxlen: 16
62.34.0.0/15 maxlen: 15
80.214.192.0/19 maxlen: 19
89.80.0.0/12 maxlen: 12
80.214.0.0/17 maxlen: 17
5.48.0.0/14 maxlen: 14
128.78.0.0/15 maxlen: 15
94.238.0.0/15 maxlen: 15
80.214.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:2c:0e:35:4e:ea:dc:7a:8e:16:0b:33:91:22:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jun 16 07:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9148bc1a17c2517af1cab9d7d4e1ac0049a6bcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:4e:c9:bf:ba:68:46:ac:98:c8:8e:97:9e:
32:60:98:43:e0:f3:c9:42:a6:23:ef:3b:a9:c4:53:
53:07:bd:5a:7d:bd:47:c3:40:c8:2a:0f:2f:18:fe:
bc:1e:f9:9e:61:b7:73:f0:f6:b1:78:ad:88:15:ac:
62:c0:40:c2:7b:c8:c1:63:44:4e:ea:7f:d0:64:31:
30:c6:a7:ed:85:90:24:40:d4:d0:05:db:13:f7:e1:
59:55:75:17:de:1d:5c:71:5d:94:c6:3a:34:3c:42:
31:86:c0:26:dc:8f:c4:10:1b:34:04:fb:90:7a:29:
b8:ee:d6:36:a6:94:ef:59:de:ac:68:2a:a5:da:87:
88:2a:46:72:ad:25:b1:e1:6b:78:4f:a7:e4:03:af:
67:28:0a:34:79:f4:33:2a:5f:17:42:0e:24:b6:21:
de:a7:43:c2:c6:70:53:2f:03:68:fa:ae:4a:72:fa:
cd:9f:b2:ce:a6:95:67:f0:e1:c7:07:84:28:4b:79:
3f:a8:1e:9d:a3:49:b8:9e:bb:39:90:42:95:c8:3c:
a9:98:fe:ad:7b:d6:49:69:0b:06:85:0d:1e:9d:d2:
7c:66:3a:a9:aa:e2:38:05:23:a9:cd:49:c3:a1:3a:
da:28:80:08:ae:ff:5d:67:ca:dd:f4:e2:d1:ef:64:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:BC:1A:17:C2:51:7A:F1:CA:B9:D7:D4:E1:AC:00:49:A6:BC:BA
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/kUi8GhfCUXrxyrnX1OGsAEmmvLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.48.0.0/14
31.32.0.0/13
62.34.0.0/15
62.201.128.0/19
80.214.0.0-80.214.223.255
80.214.248.0-80.215.255.255
89.80.0.0/12
94.238.0.0/15
128.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
af:82:4f:84:a6:62:86:2b:cf:68:fd:d8:74:67:5c:7d:33:c8:
af:8f:09:89:16:cf:c5:9f:7b:81:f4:07:fc:a8:63:f3:e0:39:
ce:69:27:f7:a8:9f:a1:e8:34:bc:9e:24:c8:df:e2:fd:22:62:
9c:1c:74:2e:38:c4:f7:ee:54:84:6e:a4:63:03:13:4d:ad:0f:
9a:5a:2c:65:9c:37:c8:66:b4:ff:b1:6d:fd:e0:74:d2:cd:74:
42:3e:9c:a5:88:93:97:e3:97:00:ca:c8:ea:09:ac:c2:c8:69:
7c:f9:f1:2c:1b:75:a2:9b:01:07:af:85:92:ac:0b:63:6c:93:
90:ee:b7:f9:83:4c:a0:07:1a:89:c9:c2:1f:3d:62:a1:12:9d:
ef:e7:12:7d:93:4e:f1:b3:0c:4c:53:2d:d8:a3:0a:a0:11:0a:
f9:95:d8:47:f7:0b:fa:3d:39:f5:b7:3e:05:fc:6c:4f:4e:09:
54:03:f2:fc:81:8f:e5:ce:72:33:1f:e6:f8:1e:b0:fc:9f:14:
26:af:3a:53:47:81:4f:fc:0d:a5:11:22:2e:90:5f:d5:88:b5:
24:87:f3:ed:fe:59:29:0a:c6:a4:a1:41:36:b1:b3:45:5a:03:
19:06:ba:25:d9:55:de:23:12:98:bc:56:45:19:3c:2c:7b:4b:
45:0e:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:22 2025 by rpki-client