Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/jTaTFtYI90FJVfSiZSUMOix5nS0.roa
File: jTaTFtYI90FJVfSiZSUMOix5nS0.roa (raw, json)
Hash identifier: 6k53zE4CoetyRqLwrOzv5Vs7NdE+xk1uaiIgCltpxjQ=
Subject key identifier: 8D:36:93:16:D6:08:F7:41:49:55:F4:A2:65:25:0C:3A:2C:79:9D:2D
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018586DFB4F13CC6061FA4BAF42FE8F99095
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/jTaTFtYI90FJVfSiZSUMOix5nS0.roa
Signing time: Fri 06 Jan 2023 11:38:05 +0000
ROA not before: Fri 06 Jan 2023 11:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 89.204.240.0/20 maxlen: 24
95.83.192.0/18 maxlen: 24
95.83.196.0/22 maxlen: 24
95.83.196.0/23 maxlen: 24
89.204.160.0/20 maxlen: 24
89.204.160.0/19 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
62.40.32.0/19 maxlen: 24
92.251.128.0/17 maxlen: 24
80.233.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:df:b4:f1:3c:c6:06:1f:a4:ba:f4:2f:e8:f9:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 6 11:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d369316d608f7414955f4a265250c3a2c799d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:24:af:c9:3f:22:ac:93:17:c6:09:d9:42:
4e:57:7c:35:aa:90:d2:f2:69:e2:73:62:f3:be:ae:
ee:c7:d0:88:13:1b:81:b2:26:93:0b:95:3e:1c:5d:
cd:2b:45:0b:35:29:c1:b5:a1:03:09:18:34:a9:cb:
4b:b2:35:49:ac:6d:26:0e:79:c2:94:d3:67:57:b1:
2e:1c:be:30:21:70:0b:6c:bc:3a:be:52:3f:79:63:
b7:a2:fc:e2:e1:ac:cd:c0:c2:b8:15:9c:37:4b:17:
32:f3:5e:6d:a9:99:ff:ba:8e:a1:9f:14:23:bd:f8:
7f:da:4b:ed:de:0a:b4:ea:1c:c7:ce:03:ef:c8:99:
85:4e:50:f1:f0:c0:e7:7d:78:93:cc:21:e7:d8:0a:
e2:24:5c:b0:1b:29:87:3b:f5:90:29:36:40:9d:00:
67:86:47:a8:85:ef:40:d1:07:c7:6f:a5:78:30:0b:
c2:e3:dc:09:b9:e3:a9:a0:a8:06:aa:a3:50:26:56:
c4:14:26:a0:a8:00:ab:69:89:a9:21:e8:75:e1:83:
25:59:61:78:52:92:7f:06:54:e5:c6:1e:b1:3c:ad:
ab:1c:0a:b8:89:91:4e:bc:a2:50:b4:2f:85:f4:46:
c2:31:84:1d:20:77:1a:2e:c2:21:ef:56:08:7d:72:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:93:16:D6:08:F7:41:49:55:F4:A2:65:25:0C:3A:2C:79:9D:2D
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/jTaTFtYI90FJVfSiZSUMOix5nS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:ce:73:a4:e9:87:e1:b1:b8:dc:40:ef:d5:4e:4e:4d:60:d1:
fa:3c:2f:99:02:18:6b:81:ff:26:83:96:ed:74:21:14:0e:14:
d6:03:7a:e7:b0:c0:7d:ba:cb:4d:50:fc:d2:f4:57:9a:42:8e:
14:06:44:e8:63:80:c8:78:28:2c:51:47:dc:0a:d6:4c:3a:13:
37:0f:d8:37:6d:90:3b:86:e7:44:a5:65:bf:25:b4:b0:01:78:
13:ba:1f:be:cb:5f:a8:69:49:18:40:79:e8:05:de:9b:a0:f0:
2d:85:41:00:b6:27:d3:26:83:bc:94:24:b6:b0:66:19:89:c3:
be:1d:a8:78:02:0c:99:a5:c4:ad:0a:29:08:59:6f:3b:60:e3:
85:24:f1:c7:b6:52:67:4e:71:a1:73:ba:41:78:f3:7d:5a:5f:
e2:6c:57:cb:da:f0:b8:74:8e:13:8f:db:53:02:63:8d:41:87:
44:8d:08:0b:35:c5:5d:7f:dd:bf:df:e7:1d:d2:28:0d:29:1d:
b2:2f:61:c6:a7:63:0f:8e:3a:bc:74:9c:7e:a2:d7:30:d5:02:
1b:f3:7a:47:d0:35:75:85:de:6f:b1:a1:f0:10:1a:49:3c:83:
45:a5:23:e8:6f:15:04:2f:f3:46:89:cd:d1:42:da:aa:b3:99:
ee:5e:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:40:33 2025 by rpki-client