Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/l25V7xunEWO4vx1lqClSsmBntCM.roa
File: l25V7xunEWO4vx1lqClSsmBntCM.roa (raw, json)
Hash identifier: s7QRw7jEHxuI0StlvuULkRz4hGxEcVDa/Ju3/LG0sqY=
Subject key identifier: 97:6E:55:EF:1B:A7:11:63:B8:BF:1D:65:A8:29:52:B2:60:67:B4:23
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 17458E0B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/l25V7xunEWO4vx1lqClSsmBntCM.roa
Signing time: Sat 01 Jan 2022 16:03:47 +0000
ROA not before: Sat 01 Jan 2022 16:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41571
IP address blocks: 89.34.5.0/24 maxlen: 24
89.42.35.0/24 maxlen: 24
86.104.124.0/24 maxlen: 24
89.35.116.0/24 maxlen: 24
89.33.196.0/24 maxlen: 24
89.36.92.0/24 maxlen: 24
89.35.55.0/24 maxlen: 24
89.34.93.0/24 maxlen: 24
89.36.19.0/24 maxlen: 24
89.42.214.0/24 maxlen: 24
89.42.14.0/24 maxlen: 24
89.41.63.0/24 maxlen: 24
89.44.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390434315 (0x17458e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=976e55ef1ba71163b8bf1d65a82952b26067b423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:fb:eb:c1:45:20:cc:87:4e:78:e3:0d:4e:
d7:50:32:bd:e3:21:62:ce:17:6f:08:d7:ff:a1:e2:
61:1e:0f:63:cc:50:c0:7e:a0:e7:50:9c:d0:30:83:
00:74:87:30:b5:b7:c2:75:62:49:24:ad:4f:c9:78:
1e:ea:32:71:f3:21:ee:b2:5c:17:39:3a:0a:2a:b1:
f2:5a:aa:be:03:b0:59:73:93:f9:2e:e6:51:08:01:
2c:b4:0c:7c:eb:b4:6a:ac:19:d6:e1:34:21:cc:7d:
e7:24:44:75:5f:b1:14:83:8d:77:aa:d0:cf:52:e2:
8d:f8:c5:a0:e6:49:11:fe:07:d4:f9:7b:9d:1f:74:
7f:4d:0a:55:22:2e:3b:e7:b5:c2:ee:65:0a:6d:1e:
5d:35:03:9d:a5:e1:f2:d7:88:16:64:cb:a4:7c:34:
0a:d2:d4:6b:9e:49:78:e3:77:1b:70:2b:ab:b5:ba:
8c:75:05:0e:57:88:8b:a4:e4:c1:99:87:ad:e5:6e:
a9:49:73:b2:a6:09:ee:ef:f4:67:47:a1:18:8b:15:
05:38:fb:60:cb:2e:e7:2f:38:5c:a9:42:60:ef:9c:
36:95:57:3f:ee:6d:9c:0b:07:04:f6:a5:0a:9a:e3:
03:06:6c:48:70:d8:c4:35:ce:45:2d:38:c3:83:44:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:55:EF:1B:A7:11:63:B8:BF:1D:65:A8:29:52:B2:60:67:B4:23
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/l25V7xunEWO4vx1lqClSsmBntCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.124.0/24
89.33.196.0/24
89.34.5.0/24
89.34.93.0/24
89.35.55.0/24
89.35.116.0/24
89.36.19.0/24
89.36.92.0/24
89.41.63.0/24
89.42.14.0/24
89.42.35.0/24
89.42.214.0/24
89.44.104.0/24
Signature Algorithm: sha256WithRSAEncryption
13:55:b2:6b:1d:83:05:ab:e7:c5:e9:f9:2f:75:6f:31:eb:95:
c2:54:9b:b2:8d:5d:ff:6a:62:86:49:b1:19:38:c7:fe:d7:fd:
78:19:36:bb:34:a3:af:78:ca:5c:ab:8f:fa:68:d8:22:7a:99:
57:b2:aa:d4:e6:88:65:b1:d0:c3:a1:8a:01:c4:98:21:a7:f6:
c4:87:73:59:2f:51:5d:b3:df:9a:99:b6:6c:b9:6a:24:4f:34:
65:55:a0:ee:d4:b8:d1:06:0c:34:1a:d8:97:1e:be:ad:c5:94:
61:e4:d8:83:05:6e:52:ab:73:ea:ed:54:a6:bd:39:ab:ee:aa:
6e:f5:c3:d9:ef:c2:34:41:c7:aa:90:2d:b1:fa:87:5a:c6:b6:
5b:59:cf:cb:e9:50:36:f1:d0:ac:bc:cf:ff:2e:7b:ca:5a:26:
27:29:9d:bb:ff:42:6b:f4:65:cd:3e:75:b9:7b:a8:ab:20:75:
85:b2:4e:25:7d:45:3d:5a:d1:ef:a1:06:5b:23:b0:ba:64:d8:
08:93:0c:7f:89:bc:bc:30:08:9e:61:53:f9:ec:c9:80:03:48:
8e:2d:44:31:7e:7b:fc:80:d3:36:7a:f7:eb:e3:29:63:59:9e:
c2:d0:88:8f:32:0c:63:2f:b5:91:71:c3:45:2b:07:4f:3f:25:
24:ac:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:02 2025 by rpki-client