Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/G-RUue9bTeAgSpfZXC1sCIV87KI.roa
File: G-RUue9bTeAgSpfZXC1sCIV87KI.roa (raw, json)
Hash identifier: n0bjIze60s0d57RL7KCozV5jbXQHh1cabT98itDF/UM=
Subject key identifier: 1B:E4:54:B9:EF:5B:4D:E0:20:4A:97:D9:5C:2D:6C:08:85:7C:EC:A2
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 37986CC8
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/G-RUue9bTeAgSpfZXC1sCIV87KI.roa
Signing time: Wed 23 Feb 2022 08:21:39 +0000
ROA not before: Wed 23 Feb 2022 08:21:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
185.1.98.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932736200 (0x37986cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Feb 23 08:21:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1be454b9ef5b4de0204a97d95c2d6c08857ceca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:5b:28:b8:31:dd:d7:67:31:af:3a:dc:cc:
9e:d7:c2:5f:b3:50:6f:21:d8:78:1f:88:c7:3e:0a:
bf:ed:50:89:39:60:1b:7a:c3:55:56:59:d6:cd:3b:
e4:7e:d5:c3:3f:cc:41:88:f0:70:a2:23:b1:2c:cb:
09:17:38:69:22:83:e6:4c:6b:ff:1d:de:cc:5a:fd:
03:c2:4c:ed:d2:92:4c:bc:0f:a6:b1:b2:24:ef:77:
ed:e5:7c:fa:3a:f7:30:1a:f3:47:55:08:d5:10:24:
00:12:94:03:f3:50:e6:bb:ce:d7:9a:c1:f8:3a:52:
ef:f7:13:5e:53:bb:03:35:19:7c:6f:bb:9c:4a:a3:
3d:35:b2:3f:9c:fa:13:18:45:c3:d0:99:1c:46:6d:
2e:6e:57:69:83:64:65:ab:d0:d6:f9:b8:2a:0b:16:
ad:96:85:ec:20:81:8a:b4:62:51:7f:f6:2f:4d:92:
bf:e8:47:a4:1e:84:18:e5:21:ab:1f:b6:9a:76:da:
e7:74:3d:ea:0a:98:18:2a:e9:87:c9:c5:25:84:2d:
41:6f:df:67:a1:15:4c:88:08:ac:8c:f7:84:65:9b:
57:4e:d6:8b:dc:c8:8c:9f:98:22:fc:b3:4a:8e:4b:
11:f8:9b:bc:b3:9e:72:24:d1:80:35:e5:f1:61:f9:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:54:B9:EF:5B:4D:E0:20:4A:97:D9:5C:2D:6C:08:85:7C:EC:A2
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/G-RUue9bTeAgSpfZXC1sCIV87KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.1.98.0/24
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
28:99:6f:db:b5:1b:81:f4:10:7b:ca:a6:9d:68:d1:69:06:52:
83:b2:e1:a9:75:dc:af:a8:06:2b:36:16:7b:9c:fd:37:df:68:
78:ad:a0:88:7c:a8:4b:c0:28:08:d1:2e:32:a1:84:0f:aa:5d:
c1:0f:46:4f:02:5b:c4:89:87:7c:1d:45:88:bd:90:56:c6:1a:
1f:d8:63:bb:c7:99:d0:dd:bd:af:4a:c2:34:4e:9e:21:ff:d6:
ab:ee:7f:dd:6c:34:68:6e:70:4f:a7:1e:a6:fa:52:6c:91:ab:
8f:c1:e1:3f:88:00:89:19:bf:80:6a:c9:53:58:e7:a6:1b:72:
70:13:34:ef:5f:0d:1e:42:9f:d2:e9:80:d4:81:24:3a:f7:c2:
35:36:11:f3:7d:cc:45:c2:4d:2d:cc:6a:bf:5b:54:5d:d0:76:
f5:00:20:41:f6:c7:66:99:46:57:c5:5d:60:90:ca:85:cc:1b:
af:97:42:e5:c0:1f:ef:38:ce:e3:0f:55:30:23:91:3a:f0:bc:
bb:b2:a5:7f:50:20:65:62:d9:ac:e3:3f:09:5a:2f:c7:a9:52:
c6:b3:c2:97:b1:df:97:ef:f0:f6:9c:ab:d5:d1:57:a9:c2:e8:
a9:74:35:3e:52:39:96:20:99:a5:7a:cf:d3:d6:0a:1b:92:52:
86:19:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:13:29 2025 by rpki-client