Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/xWpq0L4Am4dtOP4AxBtAAXbXOKY.roa
File: xWpq0L4Am4dtOP4AxBtAAXbXOKY.roa (raw, json)
Hash identifier: n9N25Y5uBlwL5RCMBBDlRQ+oHrfodCbseWnGkqISEEY=
Subject key identifier: C5:6A:6A:D0:BE:00:9B:87:6D:38:FE:00:C4:1B:40:01:76:D7:38:A6
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0187E74B1BF68F50722AB83E731A12D7C0D9
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/xWpq0L4Am4dtOP4AxBtAAXbXOKY.roa
Signing time: Thu 04 May 2023 15:04:31 +0000
ROA not before: Thu 04 May 2023 15:04:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 87.117.68.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
217.14.184.0/21 maxlen: 21
109.224.226.0/23 maxlen: 24
178.248.128.0/21 maxlen: 21
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
94.154.184.0/22 maxlen: 22
193.35.146.0/23 maxlen: 23
176.116.116.0/22 maxlen: 22
212.59.72.0/21 maxlen: 24
91.239.57.0/24 maxlen: 24
194.146.160.0/22 maxlen: 24
213.225.224.0/22 maxlen: 24
217.20.244.0/22 maxlen: 24
79.135.122.0/23 maxlen: 24
185.231.136.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
144.178.252.0/23 maxlen: 23
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:4b:1b:f6:8f:50:72:2a:b8:3e:73:1a:12:d7:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: May 4 15:04:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56a6ad0be009b876d38fe00c41b400176d738a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:41:38:20:88:d9:e2:ab:e4:33:df:f2:07:
83:b1:f8:50:47:63:05:56:62:bf:79:e9:fc:b3:64:
5c:17:50:a3:f5:0b:93:6e:9f:8c:a1:44:09:73:11:
80:76:b6:a3:1f:61:ae:be:48:35:10:8f:93:cd:52:
45:6f:fc:b4:62:4e:ad:2f:e7:25:df:2c:40:f5:2c:
6f:16:d4:7e:1a:75:cb:f2:5a:30:ee:c4:c8:95:9e:
99:92:07:bc:4c:da:58:84:47:ad:16:8b:01:53:46:
ed:d9:8f:37:b7:b0:a2:88:af:e1:2e:f2:ac:1b:bb:
e1:c2:33:bc:43:e7:8e:87:e2:58:97:a2:c3:e1:ae:
4e:57:59:f6:03:76:f7:4c:ed:32:ff:81:d2:10:9f:
94:94:f9:ce:b2:33:ba:38:4a:ca:45:4f:ad:6f:e3:
6e:8f:86:e0:4f:29:dd:35:22:21:cc:00:7b:d7:cf:
3a:74:b9:81:a2:3b:67:8c:01:80:98:04:f6:d7:30:
33:04:40:37:54:08:38:60:0b:19:9f:d3:f6:e5:73:
32:38:89:5d:f7:d5:7b:39:3a:ff:55:0c:d0:8f:66:
db:73:67:7e:29:5a:4d:e1:01:e4:1f:73:f3:89:09:
a8:1b:ee:7c:62:a9:29:4c:4a:d2:2f:12:ad:00:42:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6A:6A:D0:BE:00:9B:87:6D:38:FE:00:C4:1B:40:01:76:D7:38:A6
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/xWpq0L4Am4dtOP4AxBtAAXbXOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.226.0/23
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.206.172.0/22
212.59.72.0/21
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
d3:8e:17:28:47:3d:24:58:25:3c:66:02:49:02:ad:a2:bc:78:
c0:65:f6:2b:34:76:76:23:72:0e:5c:e7:b1:3b:48:da:fe:2a:
82:a5:11:0c:2d:1f:f0:5e:19:e7:0c:50:74:38:8c:48:f1:19:
70:a6:f4:be:b3:7e:31:fa:38:74:b8:55:9b:ca:9e:85:30:56:
a1:49:bc:47:e5:90:19:ec:62:8f:f6:28:30:ee:9a:a4:23:34:
0b:98:10:e6:9d:e5:8a:da:3f:f7:ee:d1:18:38:eb:7d:77:91:
2c:ba:66:8d:8b:e5:33:d3:b2:31:af:8e:f3:77:7b:af:54:23:
8f:a1:2e:bc:36:0b:da:b0:61:10:0f:57:c9:ca:17:7c:92:e8:
97:5c:80:78:11:87:2e:df:86:69:67:67:bb:05:42:f6:52:55:
02:d3:60:0b:30:92:b2:e4:2e:59:b6:7f:da:9e:d7:cd:3f:11:
38:1c:ea:bc:bf:61:61:4a:36:de:e6:cd:d1:84:4e:56:3c:55:
86:ee:b8:d3:a6:65:b9:b6:c9:dd:e1:cc:73:85:12:a8:8d:3a:
74:5d:25:32:24:a9:13:47:7f:49:80:ba:44:1a:bb:6f:73:e9:
f0:34:70:75:e3:5c:13:83:4b:17:68:24:8c:a8:7b:9b:6a:06:
d3:1a:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:40 2025 by rpki-client