Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/alifCz7r8qYF0_0IcXTv6Vkj8vQ.roa
File: alifCz7r8qYF0_0IcXTv6Vkj8vQ.roa (raw, json)
Hash identifier: VL2ynUP4BX2JwPtqefDS+9AUOzkAp90tFKzqY/9zMC4=
Subject key identifier: 6A:58:9F:0B:3E:EB:F2:A6:05:D3:FD:08:71:74:EF:E9:59:23:F2:F4
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 35BF7442
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/alifCz7r8qYF0_0IcXTv6Vkj8vQ.roa
Signing time: Sat 01 Jan 2022 12:06:30 +0000
ROA not before: Sat 01 Jan 2022 12:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 195.220.0.0/16 maxlen: 16
195.83.163.0/24 maxlen: 24
195.83.164.0/24 maxlen: 24
195.83.165.0/24 maxlen: 24
193.48.80.0/24 maxlen: 24
193.48.81.0/24 maxlen: 24
195.98.224.0/19 maxlen: 19
193.48.91.0/24 maxlen: 24
193.48.104.0/24 maxlen: 24
193.48.101.0/24 maxlen: 24
193.48.0.0/14 maxlen: 14
194.167.190.0/24 maxlen: 24
193.52.0.0/24 maxlen: 24
193.52.1.0/24 maxlen: 24
193.52.0.0/16 maxlen: 16
193.48.179.0/24 maxlen: 24
193.48.106.0/24 maxlen: 24
195.221.235.0/24 maxlen: 24
195.221.234.0/24 maxlen: 24
195.83.225.0/24 maxlen: 24
195.83.226.0/24 maxlen: 24
194.254.0.0/16 maxlen: 16
194.57.0.0/16 maxlen: 16
194.254.139.0/24 maxlen: 24
194.57.138.0/24 maxlen: 24
194.199.0.0/16 maxlen: 16
194.167.0.0/16 maxlen: 16
81.194.0.0/16 maxlen: 16
195.221.0.0/16 maxlen: 16
193.52.68.0/24 maxlen: 24
194.214.0.0/16 maxlen: 16
193.54.0.0/15 maxlen: 15
193.52.216.0/24 maxlen: 24
193.52.217.0/24 maxlen: 24
193.54.149.0/24 maxlen: 24
193.51.56.0/24 maxlen: 24
194.167.41.0/24 maxlen: 24
194.57.177.0/24 maxlen: 24
194.57.176.0/24 maxlen: 24
195.83.0.0/16 maxlen: 16
193.49.96.0/24 maxlen: 24
194.57.216.0/24 maxlen: 24
194.57.215.0/24 maxlen: 24
2001:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901739586 (0x35bf7442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 12:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a589f0b3eebf2a605d3fd087174efe95923f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:3d:00:c9:2f:12:f8:0e:57:73:db:cc:f8:
41:ca:2f:5f:17:f1:70:a3:51:66:51:4f:6b:88:08:
fc:57:63:bb:4c:9c:90:09:b5:8f:98:52:73:42:d4:
93:38:01:6e:fa:0a:fa:d2:59:e6:0b:bc:9a:ff:14:
84:aa:88:df:f8:f5:5c:ad:b7:db:3d:ec:4c:d8:42:
a3:9a:dc:c1:8e:2a:5b:d4:ed:cd:fe:83:a7:69:78:
af:7f:5b:1a:ea:f6:02:05:2d:f9:80:ce:53:3c:b3:
b6:21:04:b9:a5:b5:f6:dc:d1:fa:46:25:ab:b2:1f:
6e:59:da:e7:c1:8e:89:63:d6:00:80:f3:d4:df:0d:
91:db:9a:95:a1:44:42:14:a9:fd:78:28:6f:20:ee:
94:75:ea:2a:28:c5:ef:3e:ad:8d:08:2d:0c:54:ff:
59:e1:44:c3:fb:3e:38:28:e5:c6:4a:d0:58:e8:14:
62:9b:f9:58:10:e3:c5:52:9e:59:64:e7:97:58:0d:
3b:e1:4f:d9:1c:b6:81:0a:10:9b:61:56:8e:30:d3:
31:44:8a:a1:e1:55:bd:88:e9:69:f9:d1:5a:9a:db:
93:3b:e9:1a:c7:fa:ee:75:bf:0c:4b:db:76:d5:e3:
b1:e0:e8:2b:91:21:de:10:20:66:57:13:17:74:1d:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:9F:0B:3E:EB:F2:A6:05:D3:FD:08:71:74:EF:E9:59:23:F2:F4
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/alifCz7r8qYF0_0IcXTv6Vkj8vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.194.0.0/16
193.48.0.0-193.52.255.255
193.54.0.0/15
194.57.0.0/16
194.167.0.0/16
194.199.0.0/16
194.214.0.0/16
194.254.0.0/16
195.83.0.0/16
195.98.224.0/19
195.220.0.0/15
IPv6:
2001:660::/32
Signature Algorithm: sha256WithRSAEncryption
72:8d:e2:47:07:05:85:ee:66:ed:68:fa:6a:18:4e:d5:6b:92:
e0:9c:e8:df:53:1d:c3:de:8b:3d:82:2c:fb:a5:34:b6:a4:f9:
be:86:39:cd:9a:b6:d6:b8:f0:49:5f:2a:2f:50:ea:86:ff:d2:
12:ec:48:7b:e6:f8:fe:24:e7:d5:ce:37:97:83:ca:c8:47:89:
92:08:c1:76:c2:15:f2:d0:84:e8:33:51:40:22:b8:37:f7:ec:
42:6e:1a:70:ec:a2:ce:e8:f1:99:fe:aa:56:ad:08:1b:45:38:
f9:4c:52:31:e6:c1:c3:86:62:c2:d0:3a:21:a9:dd:2f:06:34:
58:3b:5c:d1:c1:20:ed:ec:fb:66:af:04:13:03:39:de:68:d6:
9f:90:b5:0b:d2:da:b2:38:02:02:1d:08:3e:df:4a:ca:53:4a:
c0:39:5a:56:52:1d:e6:05:5e:6d:cd:c9:ac:e8:33:48:90:7d:
d4:16:bc:d0:1b:3f:a1:ea:1f:00:84:84:16:41:60:69:f2:77:
ba:a7:4b:ec:1a:a0:50:81:e8:95:3b:c3:bf:0c:f9:44:bd:a6:
86:f5:59:d8:a4:3b:76:95:2a:a4:11:e7:29:5e:2a:c9:dc:81:
5b:46:a1:f1:6c:2f:49:c5:71:29:f0:0d:8f:3d:db:af:62:4f:
16:a4:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:47 2025 by rpki-client