Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/41R-y3_SLXdtnKWnTkYVX_ZUQ6c.roa
File: 41R-y3_SLXdtnKWnTkYVX_ZUQ6c.roa (raw, json)
Hash identifier: XBTXAzy1YXPyuD5bgzozCodffJOMyG7jl44FMO1ngq0=
Subject key identifier: E3:54:7E:CB:7F:D2:2D:77:6D:9C:A5:A7:4E:46:15:5F:F6:54:43:A7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505911457AD5B9F9E8CACCC983FD86E65
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/41R-y3_SLXdtnKWnTkYVX_ZUQ6c.roa
Signing time: Mon 12 Dec 2022 09:01:12 +0000
ROA not before: Mon 12 Dec 2022 09:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
193.201.228.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
178.176.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:14:57:ad:5b:9f:9e:8c:ac:cc:98:3f:d8:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3547ecb7fd22d776d9ca5a74e46155ff65443a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:d1:d3:ca:46:4f:f8:34:5a:e5:f3:f8:01:
52:5b:d4:c5:a7:33:67:bb:cd:75:92:2f:c1:50:6c:
72:57:87:ef:0c:c1:95:04:d8:e5:4b:d7:37:79:b1:
ad:89:ba:81:f4:70:f8:93:0c:46:8d:7b:92:cf:09:
a8:8a:59:91:c7:e8:99:75:ce:0f:ec:36:b5:53:6f:
8f:0a:5b:5a:d5:76:b9:be:d9:fd:96:88:ac:13:05:
0f:12:4d:89:84:7e:c1:03:55:6d:1a:a8:63:ef:85:
1a:6f:82:88:7b:51:ea:0a:f5:dc:2d:68:23:b5:7b:
fc:aa:03:71:92:19:9c:ca:26:22:a1:3d:88:52:61:
ba:51:29:93:47:49:ff:98:2c:5d:b6:9b:28:da:72:
cc:17:9d:c4:55:78:e3:50:e3:62:96:5d:78:68:92:
95:70:e1:48:ed:43:57:3f:f8:cf:1b:52:e6:4a:5c:
c4:22:f8:e9:62:80:24:1f:26:c4:01:ce:fc:aa:63:
03:6b:43:5a:d8:da:13:43:a2:1a:77:20:f3:35:d3:
de:01:88:8c:11:34:2d:95:e7:15:c5:e2:a8:b7:75:
90:25:0a:8e:e1:6c:70:90:51:6e:95:2d:1c:33:10:
82:15:63:f7:35:2a:ed:29:5f:dc:f6:ce:70:a6:06:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:7E:CB:7F:D2:2D:77:6D:9C:A5:A7:4E:46:15:5F:F6:54:43:A7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/41R-y3_SLXdtnKWnTkYVX_ZUQ6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
99:d0:e4:a9:ae:3f:e2:fa:e3:04:4b:a4:57:21:4d:39:3a:36:
8e:04:1f:a6:99:fd:b9:65:77:22:36:72:f6:73:97:95:f2:04:
0c:86:99:10:95:4d:b9:b9:2a:fd:49:cd:4d:cb:73:2d:f5:99:
81:bb:6f:23:d0:d7:29:67:78:3e:e0:f2:30:4c:3f:ea:07:72:
44:07:c8:e8:67:f2:42:d4:b3:48:94:11:2f:9d:33:fd:86:70:
fc:77:e1:9b:dc:5f:23:3d:72:50:2a:33:8a:31:68:ca:f1:cc:
20:71:1e:5d:a8:89:2e:9f:9c:da:f2:47:c1:54:39:93:a9:74:
da:a5:9e:97:34:04:24:45:d9:31:88:e2:57:2f:ea:1c:6e:fa:
bd:ed:e2:36:dd:ea:8a:1e:56:4a:ae:91:9e:40:b7:37:34:a4:
ea:15:ed:29:07:7f:5d:95:a2:2a:ec:33:07:fd:fc:74:95:da:
86:04:89:3d:a3:dc:8d:08:27:7d:3b:24:e1:06:07:3f:53:8e:
07:1b:e3:5d:76:22:85:d5:c9:b0:1e:dd:40:07:cf:b4:0e:86:
92:2f:c2:28:10:4a:49:71:0f:75:94:10:12:9f:5f:6f:d6:17:
38:5b:60:42:e6:16:e9:99:39:fc:80:11:e9:9a:d3:95:0e:1b:
f1:a2:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:48 2025 by rpki-client