Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/y44QRSdC6d__K8E32q5McDvP0IY.roa
File: y44QRSdC6d__K8E32q5McDvP0IY.roa (raw, json)
Hash identifier: +4LXr/u/jVrL8eB7Y2QWFXZQVYNSIbcjBYxvCLY5Yqc=
Subject key identifier: CB:8E:10:45:27:42:E9:DF:FF:2B:C1:37:DA:AE:4C:70:3B:CF:D0:86
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018746957BE008BE8868BE11973437BF520F
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/y44QRSdC6d__K8E32q5McDvP0IY.roa
Signing time: Mon 03 Apr 2023 10:06:54 +0000
ROA not before: Mon 03 Apr 2023 10:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13280
IP address blocks: 95.83.192.0/18 maxlen: 24
89.204.160.0/19 maxlen: 24
89.204.160.0/20 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
92.251.128.0/17 maxlen: 24
62.40.32.0/19 maxlen: 24
80.233.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:95:7b:e0:08:be:88:68:be:11:97:34:37:bf:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Apr 3 10:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8e10452742e9dfff2bc137daae4c703bcfd086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:2d:a1:5b:e1:f2:28:52:03:c2:4b:3d:30:
06:2b:6e:36:9e:cd:04:e5:58:df:1e:8f:e5:22:af:
af:3b:ea:91:e6:f5:0f:e4:f1:46:c4:fc:d5:f0:84:
30:39:db:f1:9a:98:1b:e6:31:bc:30:88:01:22:4a:
67:af:b5:cd:c3:b5:4d:76:cc:14:57:f1:bf:ef:86:
ae:06:33:ee:37:e0:50:18:38:70:b9:4f:37:53:3f:
2b:5d:23:87:26:4b:99:29:79:f7:75:c4:65:a1:b8:
cb:33:32:c4:a8:2f:f0:cf:b9:97:50:1f:31:86:ab:
98:8c:66:7b:96:bf:1f:ae:4b:af:21:0f:6d:8f:72:
75:33:7d:a5:35:e9:8a:17:a0:9b:7f:8b:57:de:ce:
ad:4e:7a:8e:31:55:d1:56:fd:59:27:12:f1:8b:56:
76:39:ab:c8:96:6d:d8:d2:3d:cc:e1:a1:24:ea:db:
cf:88:ed:54:3e:e7:1c:b6:f6:7d:ff:c3:32:6c:a2:
7b:f5:ba:75:b1:c5:2f:89:3b:33:7b:86:2d:76:b7:
e2:11:96:0c:e7:c4:e6:48:3d:a0:45:7d:3b:f6:a9:
66:58:aa:55:88:1a:9e:41:3a:32:15:4d:fa:3c:1a:
b6:e9:da:1b:1d:ec:90:b2:77:6b:c4:1f:cf:92:2c:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:10:45:27:42:E9:DF:FF:2B:C1:37:DA:AE:4C:70:3B:CF:D0:86
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/y44QRSdC6d__K8E32q5McDvP0IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
47:f8:f7:f4:74:53:92:02:fb:54:36:1e:08:d1:eb:b9:2e:c4:
d6:ee:7e:ad:38:ae:7b:54:1e:12:0e:39:4a:f7:4e:12:6b:7a:
40:c3:f8:16:49:db:11:d3:ba:e7:b1:25:76:08:b3:24:56:83:
b5:98:48:87:24:fb:4b:56:ff:a7:25:b6:a1:54:06:22:2f:f8:
77:06:e6:34:f4:e2:cb:58:73:56:be:b5:0f:ef:6c:a7:fe:99:
de:95:e5:4e:1a:15:34:a1:81:ee:39:84:9d:38:7e:29:24:f2:
b0:51:38:a5:d4:1c:7e:7b:db:15:8a:bf:0f:49:36:a0:f2:e5:
5a:77:e6:1c:10:39:cd:50:97:cd:91:29:9a:fe:82:bb:cf:cc:
75:c7:e3:ef:73:b1:2e:92:01:39:fb:91:49:c3:9c:54:93:a0:
62:12:32:a4:ac:7f:a2:73:25:0a:30:86:8e:ed:bf:6a:5a:34:
84:65:f5:43:81:1a:75:37:30:bf:22:00:40:8c:9b:0c:ee:11:
30:9a:d4:00:19:52:04:45:45:46:03:4f:da:cb:41:9d:c2:bd:
9e:d2:db:8b:18:22:32:58:a3:30:15:80:1d:82:69:cb:57:38:
d4:19:1f:2f:dd:d3:14:83:48:61:d6:cf:d2:7d:28:63:8c:72:
36:c6:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:04:51 2025 by rpki-client