Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gV8MzO5cxirC6BQHWqiWBIhPYhE.roa
File: gV8MzO5cxirC6BQHWqiWBIhPYhE.roa (raw, json)
Hash identifier: HaoEtEcOet/KvHDbNeU+WnW0vVPTCD4n2mDmQX5gHNM=
Subject key identifier: 81:5F:0C:CC:EE:5C:C6:2A:C2:E8:14:07:5A:A8:96:04:88:4F:62:11
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018290BA9C7A4A067292B3215B2AA4688D67
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gV8MzO5cxirC6BQHWqiWBIhPYhE.roa
Signing time: Fri 12 Aug 2022 06:25:24 +0000
ROA not before: Fri 12 Aug 2022 06:25:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 209.35.158.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/22 maxlen: 22
64.226.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:ba:9c:7a:4a:06:72:92:b3:21:5b:2a:a4:68:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 12 06:25:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=815f0cccee5cc62ac2e814075aa89604884f6211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:42:30:70:a1:02:b9:60:d4:de:0b:33:d5:
92:92:c9:20:e0:84:58:12:ea:f7:d8:95:05:49:d1:
67:40:0c:65:0f:c7:03:df:13:ae:7b:1d:00:58:83:
7b:86:13:72:bd:15:c8:df:2a:b3:77:f8:19:96:66:
ad:4a:1a:69:97:38:3c:ef:41:23:0e:67:a1:ab:c7:
20:6d:75:07:6c:95:91:ba:7a:2b:88:6a:90:7b:c0:
74:4f:59:b7:0a:f1:59:80:e6:01:a2:00:e1:ce:be:
5c:06:ad:26:23:8e:3f:5e:03:03:56:85:70:2d:16:
5b:a9:5b:7a:c1:74:98:73:17:4e:ae:47:31:1f:14:
7f:7d:29:0d:3f:77:a0:ba:b6:84:f4:d5:28:40:38:
71:b5:10:1b:22:15:34:7f:12:9b:03:b2:04:73:81:
d5:37:8f:11:39:ea:1e:f3:22:05:8e:e4:e8:2c:45:
4d:2a:77:24:b2:c7:0f:c4:5e:c8:61:d4:e7:6d:02:
71:91:92:1d:3e:23:f4:5c:36:19:36:a7:f0:17:d6:
0b:f7:63:c3:07:54:33:8e:ca:75:ac:8a:12:94:b4:
ef:bc:a9:8a:07:72:35:a2:51:25:00:0b:ff:51:1d:
76:49:1a:cd:c0:4a:3b:50:2e:68:81:5a:38:d9:88:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:0C:CC:EE:5C:C6:2A:C2:E8:14:07:5A:A8:96:04:88:4F:62:11
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gV8MzO5cxirC6BQHWqiWBIhPYhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
209.35.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:03:f9:4b:40:92:e9:52:d9:a3:cf:67:87:ec:b0:93:bb:e1:
e3:c2:d2:28:8d:14:c2:cc:8a:85:95:ae:a0:3d:3d:3c:af:07:
a3:a6:6b:e9:2d:b8:c9:31:b5:e8:0e:12:5b:08:63:c7:61:68:
c5:c3:f8:c6:06:77:3b:17:e8:9e:61:1c:e3:8f:c1:f4:6d:34:
94:45:ae:3c:d7:3c:83:69:3c:d7:43:07:d4:bb:2a:cc:3e:98:
37:7b:a7:cc:5d:96:88:f9:35:f5:eb:74:9a:e6:2f:f9:d0:3d:
76:6f:74:02:72:a3:70:3e:05:db:f1:1b:e7:36:0c:95:5c:5f:
a0:52:d5:65:72:48:d7:11:3c:71:58:54:90:f4:7e:36:46:b1:
c2:a8:ac:28:6e:08:dc:4f:69:d3:1e:43:26:e2:6c:52:d6:7f:
3f:dc:45:f4:e8:a6:9c:3d:16:7e:d0:1b:8e:96:1a:f1:a2:5c:
44:a0:85:4c:44:c0:28:1b:29:ee:7b:08:14:7e:ac:ac:56:38:
6b:fc:70:42:36:a1:2c:90:a8:70:0d:55:68:7a:5c:b3:fe:fc:
6e:a5:d8:f6:70:2d:03:be:81:63:a7:18:8c:f4:a8:3f:52:1e:
16:03:a5:13:87:f4:d9:31:e6:f6:83:88:2b:45:04:66:94:8c:
4c:e2:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:26 2025 by rpki-client