Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/R1HyzeP9Iqjbgt1TrCN8Q7Ox46Q.roa
File: R1HyzeP9Iqjbgt1TrCN8Q7Ox46Q.roa (raw, json)
Hash identifier: 8UTLzE6PghLxQA5MW5uUW80ntCKvzHf2DviFoWHUQCA=
Subject key identifier: 47:51:F2:CD:E3:FD:22:A8:DB:82:DD:53:AC:23:7C:43:B3:B1:E3:A4
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 370C4BC1
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/R1HyzeP9Iqjbgt1TrCN8Q7Ox46Q.roa
Signing time: Sat 01 Jan 2022 11:55:01 +0000
ROA not before: Sat 01 Jan 2022 11:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923552705 (0x370c4bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 11:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4751f2cde3fd22a8db82dd53ac237c43b3b1e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:40:e5:0a:fe:68:12:e7:41:82:73:f6:a3:
5b:a4:a6:f8:d1:c6:d3:79:71:9d:cf:88:13:4c:95:
b4:80:0b:68:ba:03:8a:f7:37:f2:eb:d7:e2:d7:60:
f1:a3:1a:da:b8:b2:88:58:41:64:8a:bd:50:56:27:
80:6c:81:8c:9c:f5:05:c7:5f:f8:04:48:4c:49:fc:
4c:78:71:0a:a0:1b:5a:05:32:98:0d:a0:ab:db:76:
9a:b0:9a:51:2f:c2:03:ea:aa:12:7d:b5:da:08:38:
88:cf:90:dd:c6:9d:51:67:bd:5c:58:f2:4f:08:8a:
82:5d:58:3c:62:94:d0:dd:8f:02:96:58:3e:5f:d7:
95:41:8a:55:c3:f2:40:94:04:07:af:8c:80:dd:e1:
c5:40:7d:27:da:eb:17:af:9a:bd:64:23:83:0f:89:
b2:6b:c5:6b:22:d3:c6:93:62:59:fa:b4:81:4a:93:
d8:60:3f:14:a4:25:d5:17:07:00:c5:a9:08:1d:6e:
8f:c4:6e:8f:7a:c9:f9:43:03:b2:83:b0:fb:4d:70:
2c:fc:68:be:35:94:3f:7d:36:64:e0:9f:ce:4d:92:
ea:3f:80:4a:34:a3:52:d9:c1:d4:e6:2b:70:b8:c6:
26:62:13:30:7e:07:b8:66:b4:d2:6a:a5:e7:eb:b6:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:F2:CD:E3:FD:22:A8:DB:82:DD:53:AC:23:7C:43:B3:B1:E3:A4
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/R1HyzeP9Iqjbgt1TrCN8Q7Ox46Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
75:55:df:bc:57:3e:ff:4c:ee:c7:d6:55:3a:68:b6:80:86:30:
18:8d:ed:20:78:af:5c:3a:8f:f8:ac:1c:21:bc:e7:82:c2:40:
0b:cd:30:18:57:30:82:36:85:68:7d:7e:1f:98:4a:4e:e3:dc:
88:3b:3f:58:67:8e:46:fa:ff:e2:0c:65:8d:bb:5b:b1:8e:d8:
1b:6d:83:37:8c:6a:66:d4:2e:8a:32:ad:65:71:f1:93:2e:3b:
e5:53:fe:c2:ba:19:6c:3f:18:b1:17:0b:e7:2c:8d:f1:2b:fb:
cc:63:60:99:3a:82:45:de:fb:72:6b:eb:2d:13:80:56:b7:aa:
9d:08:8e:8d:bc:db:5f:1d:8c:5e:aa:35:3d:60:7f:f2:85:38:
9a:f4:9d:20:ff:5c:cb:15:46:a9:9a:10:a9:a7:1b:c1:d9:9a:
ce:c0:0b:22:56:d1:03:d9:08:78:a7:66:e4:1a:d7:b0:d6:82:
a0:64:ed:4f:48:5f:5f:9f:01:02:40:c0:44:ba:c2:aa:fa:d0:
e7:e8:d7:bc:de:ab:ef:dc:b5:5c:b3:d3:5e:62:45:e0:84:5e:
a2:d3:d5:09:20:18:52:a1:30:af:1f:16:e4:4f:53:65:28:3e:
e6:ac:6e:ea:d0:f7:a5:b7:38:02:3b:41:47:9a:40:5e:16:68:
7c:e7:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:20:28 2025 by rpki-client