Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rLnTPNWJKplrdFhIXPT3EqmL-JU.roa
File: rLnTPNWJKplrdFhIXPT3EqmL-JU.roa (raw, json)
Hash identifier: xJMIMTmLE3WhrZLCkCtfjHK3xLyXw7b/Rhg2A2hhcnA=
Subject key identifier: AC:B9:D3:3C:D5:89:2A:99:6B:74:58:48:5C:F4:F7:12:A9:8B:F8:95
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018775B63BF44D60767A868D28F5DB0B656C
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rLnTPNWJKplrdFhIXPT3EqmL-JU.roa
Signing time: Wed 12 Apr 2023 13:44:49 +0000
ROA not before: Wed 12 Apr 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:b6:3b:f4:4d:60:76:7a:86:8d:28:f5:db:0b:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Apr 12 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb9d33cd5892a996b7458485cf4f712a98bf895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:7a:f3:3b:cb:e5:fe:13:f3:f1:31:b2:08:
eb:0c:f8:56:0f:90:0f:04:6d:79:6d:24:4b:7c:16:
96:be:05:a9:6c:22:c8:b6:b3:11:f7:3d:47:44:9c:
78:e1:b2:67:8e:64:15:53:73:1c:62:a5:c9:e2:24:
54:9b:9e:87:12:4b:e8:27:8f:b6:fb:23:02:f9:52:
1a:4d:cc:60:04:e9:24:4f:db:62:ac:7f:d1:a0:fe:
9d:9b:7e:46:2f:5c:c4:3f:ce:e9:27:19:c1:d8:a2:
65:5b:8e:aa:67:63:9c:f6:fa:ba:9f:74:3e:a0:56:
09:b0:85:b4:d2:cc:b4:90:ef:f7:df:76:ed:91:b4:
ce:12:19:31:47:9f:a8:3f:3e:ed:50:53:06:6f:a5:
d3:cd:88:3a:8e:f5:5c:1e:30:80:95:a6:e3:1e:e1:
65:c0:19:31:95:7a:ab:49:75:ce:52:06:20:b9:75:
fb:d5:bb:e0:16:40:54:8d:43:43:47:df:e7:63:ec:
3b:40:b1:f7:d2:84:bd:7e:30:43:ea:ae:2a:71:d5:
b6:0e:e4:54:75:2a:29:89:2f:25:c7:1e:9b:01:80:
95:ed:87:9f:16:ab:8d:b0:36:6e:f4:75:a1:4e:94:
35:33:15:ac:8a:4a:1e:05:32:ce:1d:2c:a5:fa:bc:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:D3:3C:D5:89:2A:99:6B:74:58:48:5C:F4:F7:12:A9:8B:F8:95
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rLnTPNWJKplrdFhIXPT3EqmL-JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/23
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
19:56:8c:5e:56:ce:fd:ed:78:9f:7a:4e:7c:c2:d7:8a:c8:89:
c9:99:39:b2:a5:7e:bc:1e:df:2c:69:cb:db:78:f4:1c:d8:d7:
10:49:d2:e2:44:be:85:7d:90:8c:e0:30:b5:1f:41:05:18:f7:
76:5d:83:0e:05:9b:31:c9:c1:f4:d3:9c:17:91:25:bb:0b:09:
4f:a4:31:98:30:04:ec:18:88:e7:2a:e4:2a:46:c8:7a:1a:92:
4b:25:16:a5:b6:63:4b:90:b0:16:ca:c1:98:26:60:ba:c2:80:
39:29:fd:bc:a0:51:c4:2c:67:66:45:3d:a7:9d:75:44:e8:68:
46:26:67:fd:f9:c1:bc:58:c3:5d:3b:04:69:5d:9d:4b:22:43:
38:3d:c2:cb:c9:88:de:48:6a:e5:b7:a4:7f:57:13:9e:20:04:
90:cf:10:a2:d2:06:6f:84:bc:6b:d5:ad:d4:2a:9f:e7:0a:c3:
d8:af:da:c0:73:d6:7a:2f:5c:72:d4:21:68:f8:3b:b3:24:99:
b4:08:f1:8b:0b:51:c7:88:c7:09:fa:b7:ff:f6:04:a4:90:44:
18:39:70:5b:77:6c:44:ac:27:29:08:36:d8:b7:d3:f5:95:da:
29:a6:62:bd:95:04:92:3a:f4:22:b0:eb:c1:fa:3e:88:73:23:
96:e3:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:56:27 2025 by rpki-client