Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/vqtYfZ3H-aNMQ2QgbzZwxO-Mqs0.roa
File: vqtYfZ3H-aNMQ2QgbzZwxO-Mqs0.roa (raw, json)
Hash identifier: a3B2oXZzKBRU4LAG7DxlB4fYaEuP8VEA0uFf8JYwwqQ=
Subject key identifier: BE:AB:58:7D:9D:C7:F9:A3:4C:43:64:20:6F:36:70:C4:EF:8C:AA:CD
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018746957D043FA5806EE9E8992F00AFCE8A
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/vqtYfZ3H-aNMQ2QgbzZwxO-Mqs0.roa
Signing time: Mon 03 Apr 2023 10:06:54 +0000
ROA not before: Mon 03 Apr 2023 10:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 95.83.192.0/18 maxlen: 24
95.83.196.0/23 maxlen: 24
95.83.196.0/22 maxlen: 24
89.204.160.0/19 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
62.40.32.0/19 maxlen: 24
92.251.128.0/17 maxlen: 24
80.233.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:95:7d:04:3f:a5:80:6e:e9:e8:99:2f:00:af:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Apr 3 10:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beab587d9dc7f9a34c4364206f3670c4ef8caacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:98:68:c8:c4:e2:be:63:f7:96:45:86:c3:
65:ea:4f:1d:b2:a2:2c:3b:0c:44:0c:fc:64:1a:e8:
bc:0d:c4:ce:a3:44:89:6f:1b:39:81:3b:d9:b1:09:
c7:bd:a9:1f:67:15:29:ce:17:21:43:24:78:14:15:
94:f7:88:6c:3b:7e:2b:02:60:7b:b6:e5:94:fc:0a:
2d:5a:21:68:c6:2f:a2:6f:72:ff:91:48:74:46:42:
27:da:eb:78:f6:93:f2:6a:53:e1:47:96:17:94:36:
bd:06:11:6a:8f:ed:b7:3b:1e:fc:05:e5:d5:ee:cc:
58:59:10:19:c5:4c:00:5e:75:77:63:e5:8d:17:5b:
b2:29:fc:c6:75:03:42:0e:74:79:64:42:07:3f:ad:
08:4b:f8:0b:22:37:9a:cd:bc:8d:86:04:9f:77:42:
2d:19:91:70:ef:ad:8f:a7:9b:e7:12:6e:ad:8e:6e:
a3:2b:4b:84:ff:37:7d:92:b9:6d:a3:c4:d0:95:72:
c8:70:09:58:dc:2e:bc:34:59:8e:5b:e6:6f:57:a0:
a4:27:d9:a5:ba:50:b9:af:9c:f9:43:55:19:9b:9f:
8a:bc:62:de:83:2d:e2:81:d6:d4:52:89:62:09:2c:
ec:33:d2:11:59:2b:74:1f:af:f1:d3:c7:2b:cd:66:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:58:7D:9D:C7:F9:A3:4C:43:64:20:6F:36:70:C4:EF:8C:AA:CD
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/vqtYfZ3H-aNMQ2QgbzZwxO-Mqs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:a1:c1:4e:96:5b:f2:0b:56:5d:e0:77:6d:0f:f3:9d:e8:2b:
0b:71:51:9e:f5:aa:78:97:29:93:ec:05:0d:8a:56:e8:bb:8d:
6c:3d:77:fb:cc:6f:37:f6:d0:40:7f:30:69:3d:9a:22:d1:3f:
88:f0:de:55:18:14:d1:be:84:17:fe:58:9a:dd:58:b1:63:c9:
ee:c9:b0:32:50:4b:24:04:fb:be:d5:69:38:b5:5a:d4:57:bf:
44:4d:1d:9f:49:c2:33:b3:e4:82:fe:79:01:f1:94:85:a4:dd:
67:7e:31:ba:0b:a9:10:c0:24:d3:ad:3d:0e:0e:5f:0c:79:a8:
a4:9e:98:b2:28:de:10:50:08:02:98:dd:78:74:05:53:d4:bf:
0e:d0:4f:68:86:56:23:c1:87:7d:db:d3:75:df:34:9d:ea:90:
7e:09:24:02:66:7a:1d:31:9b:78:d2:b7:94:24:48:bd:a1:fb:
78:e2:dd:6e:f6:68:56:fd:e3:a8:1d:78:03:35:c3:ee:bf:ae:
90:2d:29:7e:fd:1b:32:87:2d:51:7c:be:e2:8a:3f:3a:e4:66:
48:31:1b:8d:e9:a8:5a:88:5c:67:f3:72:4f:49:46:ad:e2:3c:
51:8d:bb:c1:76:5a:e8:22:bf:ac:5a:78:f3:05:c7:f3:48:75:
cd:0f:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:02:13 2025 by rpki-client