Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pXV6iqTh454U-CtSy63pEbyepWA.roa
File: pXV6iqTh454U-CtSy63pEbyepWA.roa (raw, json)
Hash identifier: ZwTFEcvLR3lZUHN8cEUcFezHnfuyYKl3fErmH97BbwY=
Subject key identifier: A5:75:7A:8A:A4:E1:E3:9E:14:F8:2B:52:CB:AD:E9:11:BC:9E:A5:60
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 389479FD
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pXV6iqTh454U-CtSy63pEbyepWA.roa
Signing time: Thu 16 Jun 2022 11:38:44 +0000
ROA not before: Thu 16 Jun 2022 11:38:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949254653 (0x389479fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jun 16 11:38:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5757a8aa4e1e39e14f82b52cbade911bc9ea560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:a7:c2:c6:fc:e7:76:d8:37:fd:55:a7:d3:
a4:d5:42:c4:97:86:84:01:91:53:1c:e1:cd:e7:11:
68:ec:f5:bd:28:f6:0b:51:ec:80:83:95:3e:62:7e:
ae:cc:cb:04:f9:c3:28:cd:f4:03:a2:2a:5b:80:3b:
ea:1d:3d:eb:e7:8a:b0:21:59:32:f5:d2:f5:a0:c7:
a6:45:ec:7c:ee:16:0a:06:7b:c7:13:89:5c:d2:81:
60:02:bf:3d:c6:db:73:65:12:21:b1:6c:8a:74:9a:
32:9e:4e:0a:1a:58:d8:d8:86:d3:78:56:6b:8a:1a:
15:34:f4:ce:2e:e9:c9:6d:09:d8:c4:63:c0:4b:02:
ce:95:b6:4d:69:02:33:86:14:b1:42:41:66:c0:87:
46:ce:d3:e6:a0:de:2c:0d:09:83:4e:b2:e7:ae:5f:
8f:e2:6f:5c:56:cc:13:fd:6d:76:a1:23:6c:ec:f5:
67:40:fc:10:4d:78:9b:82:82:07:0b:ed:35:ef:cf:
18:db:76:33:ce:04:e8:52:90:62:c4:9f:ae:9a:a9:
76:12:d9:4f:c1:88:4c:8c:8b:de:aa:21:08:43:ad:
d8:d0:a5:02:33:22:0c:c0:19:0a:ca:6f:05:64:e3:
91:48:12:2f:5a:cb:a4:9c:e6:c0:64:9c:ef:1e:0a:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:7A:8A:A4:E1:E3:9E:14:F8:2B:52:CB:AD:E9:11:BC:9E:A5:60
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/pXV6iqTh454U-CtSy63pEbyepWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/23
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
75:7c:9b:14:18:c2:1c:a4:4e:15:e3:af:e9:b0:b0:24:63:3e:
ac:ee:92:75:cc:f8:92:75:4a:b8:22:df:ec:f8:21:66:61:ee:
d4:29:2e:22:b4:bf:4a:b9:38:df:4e:a1:b4:44:d5:7b:86:d5:
57:fe:bf:d1:e4:48:aa:85:d5:23:e6:5c:7b:ae:be:72:e6:c4:
02:d4:ca:23:ca:87:6c:3e:50:74:bc:20:fd:d3:b9:44:fd:24:
5f:d5:62:4e:d3:10:09:17:08:d0:84:56:ac:2f:a2:8b:95:f7:
72:f0:71:c2:8b:14:fa:3b:9f:18:26:d5:0d:40:3e:35:73:e6:
a9:22:df:49:bb:25:07:0a:3c:a5:db:18:6a:8e:3f:4f:2c:57:
ad:af:b4:41:bf:c9:bc:56:e7:d8:52:d0:bf:59:64:32:f6:2c:
c6:f9:53:64:08:84:6f:56:70:80:88:0a:1d:5f:85:e8:3f:8e:
07:82:6e:57:dc:0c:3c:76:7a:9c:21:6c:f1:58:92:3b:3d:c6:
b2:47:56:ba:f2:a8:08:85:c2:f1:c1:dd:b9:09:ed:d3:32:0a:
c1:7d:c7:63:17:c4:98:8b:19:23:45:f3:3c:e5:82:2a:a9:b1:
10:e2:87:14:b4:34:e4:0e:01:e3:4d:a5:3b:db:d7:61:16:61:
f8:cb:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:11:09 2025 by rpki-client