Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/oE5NcrSqNFT44RW4D4oGio4R7QU.roa
File: oE5NcrSqNFT44RW4D4oGio4R7QU.roa (raw, json)
Hash identifier: rwhBcW2ZIt4FHi/1WAbqBFW92NficjFA+LfV3scuI0E=
Subject key identifier: A0:4E:4D:72:B4:AA:34:54:F8:E1:15:B8:0F:8A:06:8A:8E:11:ED:05
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 018748820960FFF5E5C53254932823D06DB7
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/oE5NcrSqNFT44RW4D4oGio4R7QU.roa
Signing time: Mon 03 Apr 2023 19:04:54 +0000
ROA not before: Mon 03 Apr 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
77.74.80.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
85.195.192.0/20 maxlen: 20
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
109.202.192.0/19 maxlen: 19
185.72.64.0/22 maxlen: 22
185.72.67.0/24 maxlen: 24
80.253.88.0/21 maxlen: 21
185.201.248.0/22 maxlen: 22
141.195.80.0/20 maxlen: 20
193.47.153.0/24 maxlen: 24
85.195.208.0/20 maxlen: 20
185.246.104.0/22 maxlen: 22
45.80.136.0/22 maxlen: 22
2a07:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:82:09:60:ff:f5:e5:c5:32:54:93:28:23:d0:6d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Apr 3 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04e4d72b4aa3454f8e115b80f8a068a8e11ed05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:0a:1b:a9:59:aa:de:84:4a:6e:cb:bd:21:
e9:1d:32:84:26:4a:60:7f:34:f2:b0:ed:a3:8e:bb:
20:d0:94:a1:29:5e:92:53:fb:0c:d2:16:36:d6:04:
71:d3:57:41:55:cb:d2:d6:45:d0:5d:33:ff:1d:d1:
96:8a:3f:8f:7f:e6:2f:16:85:0c:53:3e:8e:1e:7f:
df:09:5b:a7:20:2d:bc:ce:03:a4:20:9d:0f:fe:c6:
a9:62:82:f2:62:c5:f5:6c:da:91:e3:4b:b0:36:72:
b3:2d:55:33:54:b5:0e:f2:49:7b:68:b8:34:88:48:
3c:4e:cb:98:4b:16:ea:9f:5b:47:d0:b8:79:9b:ff:
0c:16:bd:01:04:64:93:d1:79:31:b2:83:7a:80:23:
b4:7f:8d:31:21:fe:0e:f0:9e:a3:3f:ee:58:69:5c:
db:21:51:59:33:b0:22:9a:06:a6:da:a4:0c:85:79:
02:01:fc:53:a6:46:95:a6:08:e4:c9:2b:ce:71:2d:
03:7a:6d:ee:59:8e:16:dc:60:e3:ef:70:8b:97:2e:
4c:5b:be:4b:6a:53:bf:0d:00:5e:40:25:1c:1b:1b:
54:3b:87:34:91:84:da:bd:e7:44:98:a5:71:c9:82:
6a:ab:7a:49:44:44:ac:05:b7:20:b9:64:57:98:ce:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:4D:72:B4:AA:34:54:F8:E1:15:B8:0F:8A:06:8A:8E:11:ED:05
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/oE5NcrSqNFT44RW4D4oGio4R7QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
77.74.80.0/21
80.253.88.0/21
81.6.32.0/20
85.195.192.0/19
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
IPv6:
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
80:06:2f:cc:fe:3f:ba:23:62:c6:46:e1:99:e5:1d:f9:67:fd:
e0:0f:5b:17:a4:41:f1:18:d2:4c:a0:e1:e3:6f:22:b8:44:21:
82:e1:a4:ec:ce:39:c4:eb:d7:a7:d4:de:f9:02:45:62:b1:fe:
de:9d:93:49:5a:25:ef:be:bb:c2:e4:54:39:76:8b:f4:0a:f5:
83:2e:45:92:7f:89:e2:0f:64:b8:d5:3d:e4:42:8f:f6:c6:fe:
b8:a0:b7:d1:3a:c2:cc:54:d2:8b:34:ed:bc:88:59:07:6f:fe:
76:40:f9:4f:39:63:c2:a4:cf:2f:51:c3:ae:f3:61:8a:9c:58:
ef:10:50:34:3c:c6:00:08:fd:63:50:b0:1e:33:4a:bf:5e:cf:
d3:30:8b:ea:78:b0:86:e3:bf:69:d1:67:38:9a:22:5f:3c:e9:
9d:6c:5e:0d:bd:57:3d:9d:4a:cf:22:56:3f:61:8e:bd:0f:aa:
c1:0d:93:dd:e1:cb:63:3b:84:51:85:88:95:12:a0:87:82:f4:
1a:29:e6:05:7e:72:4a:fa:71:04:c6:2b:2c:09:e5:c0:57:7e:
5c:94:20:43:56:67:a0:ea:92:e9:3f:0e:26:f1:10:45:6d:00:
27:a0:fa:dc:d7:30:68:75:b3:30:91:93:c5:e9:01:22:f9:2c:
a5:05:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:47 2025 by rpki-client