Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/OEzVY42tBxU4gkaBSwjiK0-cZn8.roa
File: OEzVY42tBxU4gkaBSwjiK0-cZn8.roa (raw, json)
Hash identifier: 25jhUNqtOjhN8ETqORQtvoiaiPo1Xp8JCl9h01SBY7U=
Subject key identifier: 38:4C:D5:63:8D:AD:07:15:38:82:46:81:4B:08:E2:2B:4F:9C:66:7F
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 018CB4EB988011038AD3B142F66676FED6CB
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/OEzVY42tBxU4gkaBSwjiK0-cZn8.roa
Signing time: Fri 29 Dec 2023 09:33:07 +0000
ROA not before: Fri 29 Dec 2023 09:33:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24953
IP address blocks: 185.34.196.0/22 maxlen: 22
83.216.192.0/20 maxlen: 20
185.167.240.0/22 maxlen: 24
185.213.124.0/22 maxlen: 22
185.224.120.0/22 maxlen: 22
195.95.163.0/24 maxlen: 24
89.185.96.0/19 maxlen: 19
80.64.140.0/22 maxlen: 22
2a0b:c200::/29 maxlen: 32
2001:1ad0:c4fc::/46 maxlen: 48
2001:1ad0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:eb:98:80:11:03:8a:d3:b1:42:f6:66:76:fe:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Dec 29 09:33:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=384cd5638dad0715388246814b08e22b4f9c667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:58:e6:37:16:3e:77:70:82:b0:1c:c6:21:
7e:76:b6:39:43:8e:19:0c:80:1a:ae:b6:f3:b6:72:
43:da:17:86:3e:5d:5e:d2:cb:6e:96:3f:5f:78:4d:
7d:eb:92:44:e2:d5:08:ab:38:82:f7:68:09:de:d9:
64:17:42:27:ea:07:94:51:92:af:b8:09:b1:d2:4d:
88:ea:2e:d6:5e:30:9d:62:95:ff:da:5e:c3:32:a5:
6c:3c:56:f9:87:0d:fc:91:6b:05:5a:aa:70:02:e6:
1f:49:45:24:01:98:a0:13:d4:39:95:08:64:b5:1c:
ae:48:ef:42:b5:e1:b2:09:f6:a0:a2:6b:33:48:fb:
44:22:e5:80:bb:56:e6:ff:89:18:81:58:b4:dd:43:
92:ff:a5:c0:ca:5c:57:6b:0a:09:aa:4d:8f:ce:73:
45:91:e2:f3:e3:e0:4c:48:e0:f5:0e:91:89:33:ec:
e7:b3:59:71:e1:9d:e8:2b:13:74:c9:a8:5b:a5:94:
9c:1f:ee:0b:f5:f7:21:c5:63:85:98:3c:87:69:49:
2a:10:fc:a4:c3:7b:ae:92:86:9d:ef:e8:9c:e7:5c:
8b:d0:09:f2:db:aa:d1:d8:5e:ed:a5:59:62:a4:bd:
76:a6:ac:e4:f1:c8:ee:89:2c:a6:49:f5:4b:0c:7c:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:D5:63:8D:AD:07:15:38:82:46:81:4B:08:E2:2B:4F:9C:66:7F
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/OEzVY42tBxU4gkaBSwjiK0-cZn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.140.0/22
83.216.192.0/20
89.185.96.0/19
185.34.196.0/22
185.167.240.0/22
185.213.124.0/22
185.224.120.0/22
195.95.163.0/24
IPv6:
2001:1ad0::/32
2a0b:c200::/29
Signature Algorithm: sha256WithRSAEncryption
af:89:2f:c8:0c:6f:3d:6d:98:34:f3:2b:f1:ad:21:31:91:d0:
0b:d1:47:26:3e:2e:0e:75:e2:ff:42:5c:c3:1e:8d:f1:ff:cd:
92:dd:17:e6:4f:2d:72:e3:90:7b:f0:66:4b:b6:6a:60:68:be:
d5:e7:46:1e:56:2f:d6:3d:22:b9:d0:76:04:cf:c4:1b:87:11:
62:44:28:cb:ec:d8:08:42:0b:4b:f9:3e:eb:a4:ea:9e:23:a1:
c5:4b:95:9f:99:5b:5b:4b:c0:d8:2e:2b:c7:fc:4b:32:1b:aa:
4a:96:bf:2d:49:a8:cd:af:0e:b0:b9:8f:f0:1f:3d:65:b2:50:
79:80:cc:eb:0a:5b:3f:12:14:56:0a:59:47:ac:f1:d3:c6:17:
71:d5:15:50:48:09:27:97:74:0e:5a:2b:b5:ea:6d:04:cc:db:
59:cd:b3:58:74:33:f0:68:b2:01:82:c5:65:a6:5f:82:e2:d1:
34:a6:6a:18:85:25:36:56:ee:57:3f:9e:66:71:0c:09:c0:08:
72:30:77:e1:d0:2a:19:6a:d2:45:01:f1:17:0e:dd:20:24:bb:
bb:5f:75:3d:6e:7d:f7:57:a6:d8:ab:21:14:1c:be:da:bc:08:
99:6d:82:42:bf:db:69:6a:9f:c9:e9:a9:f4:c7:0c:2d:68:79:
a0:ab:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:24 2025 by rpki-client