Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/ie0yTzWoCcT-K66lLr5uQ-ApILM.roa
File: ie0yTzWoCcT-K66lLr5uQ-ApILM.roa (raw, json)
Hash identifier: L5Rv6KL3cwaJO7GWdoezqWiDJOvl+VgVHrz9S/GsyKg=
Subject key identifier: 89:ED:32:4F:35:A8:09:C4:FE:2B:AE:A5:2E:BE:6E:43:E0:29:20:B3
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 0185718C3F50180F4DA4E9B44AEBD3895441
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/ie0yTzWoCcT-K66lLr5uQ-ApILM.roa
Signing time: Mon 02 Jan 2023 08:14:54 +0000
ROA not before: Mon 02 Jan 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212531
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:3f:50:18:0f:4d:a4:e9:b4:4a:eb:d3:89:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 2 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ed324f35a809c4fe2baea52ebe6e43e02920b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:0a:6d:86:c4:69:05:44:3d:f5:24:8c:71:
1c:4b:7e:02:b8:59:56:0e:0c:a9:e0:35:77:00:d0:
80:2c:80:6e:c8:05:11:27:5f:41:34:63:aa:41:6f:
9c:3a:fa:08:5e:ec:28:d9:21:a9:1c:30:d6:c0:52:
31:eb:cf:4a:58:29:4e:28:56:da:86:4b:ff:85:c9:
71:0c:16:a8:3f:26:e9:0b:b0:97:78:12:7f:84:f9:
6b:f3:a2:cd:d6:ce:e1:33:e8:5f:42:38:8b:0c:ac:
70:87:b5:9d:41:97:ba:07:2c:3e:4c:3a:26:c9:ca:
7b:64:22:d0:c3:72:cb:54:3e:cc:1e:71:47:2a:3d:
35:57:9f:11:b6:4f:8b:fe:c3:c2:73:8b:2f:84:1d:
90:37:0a:9f:b0:3c:72:74:99:62:15:35:7c:b4:e2:
54:b5:bf:4a:09:35:91:d2:96:7e:ee:66:d2:42:46:
d9:d1:71:f2:51:d3:5b:3e:a5:29:11:6c:9c:80:a4:
53:2c:cc:20:8e:84:4e:28:0d:62:ec:d5:43:e2:a5:
4c:56:a4:06:f6:ab:ba:7d:da:c5:18:dc:3a:28:12:
33:29:67:4a:9b:14:88:57:90:0c:e8:db:3c:e9:16:
1e:09:bc:83:70:60:7e:9a:0b:76:65:d2:b8:b3:1a:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:32:4F:35:A8:09:C4:FE:2B:AE:A5:2E:BE:6E:43:E0:29:20:B3
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/ie0yTzWoCcT-K66lLr5uQ-ApILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
36:c2:28:cd:8a:ae:a6:f0:20:7d:f6:00:9a:59:c5:f6:f7:9b:
a4:7e:a3:8f:e7:d5:fd:f2:7f:df:e8:66:8d:76:c1:1f:20:a7:
d6:ec:d0:cf:34:f7:c4:8a:44:38:ad:b1:7a:f1:e8:f6:32:58:
cf:a0:e5:18:9c:89:f3:79:af:69:6c:83:d7:53:87:21:6f:a3:
3f:e0:b8:db:a9:72:92:c7:53:d1:9f:2f:ca:45:e7:4f:b4:df:
c0:16:fe:d9:23:3b:02:09:a1:90:22:15:1e:b2:df:4f:d9:4b:
99:c8:2e:fa:37:15:80:e8:18:7a:9b:98:ba:f9:7f:58:a7:aa:
d8:3f:14:55:01:f0:97:63:89:d4:1a:c4:ee:51:ff:d3:1e:32:
39:1b:12:cf:3c:33:5a:bb:b9:a6:35:5b:2b:99:65:7b:25:f0:
ad:68:c8:a7:bb:ad:14:56:6b:9c:ac:37:43:15:8d:c3:07:07:
13:81:3b:14:46:fc:a8:79:fe:ea:aa:41:e4:fc:04:68:3e:43:
6c:9e:46:26:c2:15:89:62:27:2d:66:12:a2:57:31:e7:86:2a:
47:5d:b1:6f:33:a4:9e:a1:92:60:e7:48:77:91:56:0b:eb:d9:
4b:9f:a6:40:09:bd:9e:2b:ba:88:66:67:93:de:6f:5d:53:b7:
e4:bd:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:29 2025 by rpki-client