Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/C_KaHgQktAcdMrgAzn3-84Z_0E8.roa
File: C_KaHgQktAcdMrgAzn3-84Z_0E8.roa (raw, json)
Hash identifier: lFjTdsv88G68NE96xboR9wQ/dfKQLooWzQbpD1uWJB4=
Subject key identifier: 0B:F2:9A:1E:04:24:B4:07:1D:32:B8:00:CE:7D:FE:F3:86:7F:D0:4F
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 04EDE2D2
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/C_KaHgQktAcdMrgAzn3-84Z_0E8.roa
Signing time: Sat 01 Jan 2022 16:11:03 +0000
ROA not before: Sat 01 Jan 2022 16:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213260
IP address blocks: 87.238.28.0/22 maxlen: 22
80.249.32.0/20 maxlen: 20
89.249.176.0/21 maxlen: 21
46.232.144.0/21 maxlen: 21
87.238.16.0/21 maxlen: 21
87.238.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82698962 (0x4ede2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Jan 1 16:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf29a1e0424b4071d32b800ce7dfef3867fd04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:98:65:fc:61:b8:3a:59:ba:12:34:52:b9:
21:d8:12:e2:eb:d2:7b:c1:d5:59:a3:92:5e:fc:97:
e3:7c:bd:d5:cd:5e:83:50:60:7d:33:be:0c:67:8d:
d4:3e:9d:ff:a9:63:99:cc:7b:dd:16:39:f6:9e:fc:
06:97:3d:23:1c:38:6a:00:90:f5:11:e1:ba:b2:a8:
88:4b:d7:12:f0:43:69:d1:43:2b:74:74:b3:65:c7:
15:a2:cd:5c:b3:79:38:28:28:ff:6d:42:76:8a:28:
b8:80:ff:82:56:58:2b:fc:fc:69:e1:c5:c4:1f:69:
c3:bf:78:bd:89:88:65:02:0f:40:ab:b3:46:08:99:
b1:68:91:02:e3:9d:ff:0d:63:5b:6c:5b:7c:c8:96:
17:3f:c5:98:e8:00:38:3f:e8:43:6a:38:17:76:cd:
e9:d5:83:7f:9b:74:9b:fa:70:d5:6e:f9:f6:61:e1:
43:09:fb:d2:69:38:7d:b5:c8:d1:9e:01:3b:c3:91:
42:06:e8:3d:f8:f1:16:c9:cf:14:c2:b0:85:42:c9:
76:30:92:81:20:87:6c:91:20:ae:0c:45:b8:cd:6c:
9e:66:a4:a1:26:a9:56:b4:c0:b7:f2:da:f5:28:b8:
50:0a:21:7f:c0:48:e0:39:92:18:91:5a:3d:52:93:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:9A:1E:04:24:B4:07:1D:32:B8:00:CE:7D:FE:F3:86:7F:D0:4F
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/C_KaHgQktAcdMrgAzn3-84Z_0E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.144.0/21
80.249.32.0/20
87.238.16.0/20
89.249.176.0/21
Signature Algorithm: sha256WithRSAEncryption
e5:7d:e9:e6:33:1b:93:92:46:dc:27:f8:bb:76:9d:94:dc:13:
81:35:71:7a:29:98:0f:03:a8:46:e5:e0:eb:24:61:db:a9:9c:
fb:05:17:dd:71:f1:c1:2e:44:8f:68:90:5c:ad:e2:2c:82:83:
e4:70:bd:6b:d1:54:5e:d1:6d:fb:ee:47:95:ac:1f:7b:dd:b0:
fc:99:1b:16:8c:70:86:73:67:46:a2:fb:55:12:b5:0f:d2:ef:
fd:70:af:ae:08:47:b8:cb:14:ed:38:95:81:ae:6d:ff:ec:26:
e0:04:cb:bb:3c:4c:7a:b2:d2:4f:86:6e:2e:79:9f:21:64:5d:
87:25:ff:f0:77:a0:33:3a:a7:bd:c4:c8:cf:fd:ec:b5:b2:a2:
69:c1:55:9d:36:3d:8a:42:71:c6:80:64:2b:e9:0b:90:a0:34:
3a:73:80:ec:0d:d6:f3:b7:43:6a:f4:4c:86:13:ab:dc:f7:0b:
63:b4:bc:91:2d:be:d1:5b:fd:f0:52:81:fe:0a:17:24:91:ad:
13:a0:dd:3d:8a:e1:5b:0a:4c:c1:cf:39:b4:23:15:62:3d:7a:
0a:fe:e6:41:80:d3:20:d4:67:f0:b4:db:b2:fe:b1:36:21:ee:
03:72:ae:7e:1a:46:3c:f6:3f:31:c4:56:23:ec:6f:a0:5d:09:
89:48:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:09 2025 by rpki-client