Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/tjA0C_S0MrF9owzuMHhnsDMhksM.roa
File: tjA0C_S0MrF9owzuMHhnsDMhksM.roa (raw, json)
Hash identifier: h3Oqy+OqbxMv+5koVGGaNA+jsgu5QdcoUPwCmGAMe1U=
Subject key identifier: B6:30:34:0B:F4:B4:32:B1:7D:A3:0C:EE:30:78:67:B0:33:21:92:C3
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01852729E4B64DF131D1E601516237FB38F6
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/tjA0C_S0MrF9owzuMHhnsDMhksM.roa
Signing time: Sun 18 Dec 2022 21:35:35 +0000
ROA not before: Sun 18 Dec 2022 21:35:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13030
IP address blocks: 109.202.192.0/19 maxlen: 19
185.72.64.0/22 maxlen: 22
81.6.32.0/20 maxlen: 20
185.72.67.0/24 maxlen: 24
80.253.88.0/21 maxlen: 21
141.195.80.0/20 maxlen: 20
185.137.172.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
185.246.104.0/22 maxlen: 22
45.80.136.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
2a07:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:29:e4:b6:4d:f1:31:d1:e6:01:51:62:37:fb:38:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Dec 18 21:35:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b630340bf4b432b17da30cee307867b0332192c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:02:28:eb:9b:e8:30:d7:7e:8f:f8:da:61:
94:8a:9c:1c:3f:6f:a9:a6:cf:7b:28:d8:e0:de:53:
fa:21:b1:2f:fc:ed:31:f0:a6:36:87:8a:1b:0e:36:
43:ba:75:97:a9:08:1a:89:30:19:da:e2:ae:80:12:
48:9b:43:9c:f4:f0:bb:3e:e3:a8:ed:71:6a:13:6c:
82:38:05:12:fa:b2:8e:e1:29:bd:02:ea:9a:77:29:
f8:9d:be:a3:db:d3:88:05:f9:95:d0:71:ca:6b:73:
b2:e1:1c:f8:0b:6e:07:ec:2e:e2:d9:5e:04:f4:da:
05:df:1f:fb:1b:a6:3f:6c:73:bc:cf:13:9e:3c:e7:
d0:aa:4e:00:77:7e:be:e0:76:81:45:3e:06:c5:db:
a4:e9:23:fe:fb:2d:15:1c:bd:93:ba:ec:44:68:95:
d7:37:42:79:dd:c9:f0:fc:1e:24:27:16:cf:7f:3f:
77:45:df:3c:01:66:b2:4a:e6:8c:d8:b8:53:59:3c:
45:2e:ba:e3:be:a6:5e:cf:ef:3d:99:f4:ac:65:e0:
61:56:48:61:93:57:6d:7a:a2:b2:74:69:e3:2f:0e:
e1:f1:9a:75:60:57:ef:8c:6b:a6:04:47:d7:3a:6a:
65:43:49:3c:33:ac:9e:62:15:51:55:9e:f0:34:97:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:30:34:0B:F4:B4:32:B1:7D:A3:0C:EE:30:78:67:B0:33:21:92:C3
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/tjA0C_S0MrF9owzuMHhnsDMhksM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.136.0/22
80.253.88.0/21
81.6.32.0/20
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.246.104.0/22
193.47.153.0/24
IPv6:
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
30:23:11:40:fd:c0:2d:e9:d8:90:59:b4:eb:bb:01:cd:b7:dd:
42:33:4c:82:bc:a1:45:79:9a:cd:5a:0e:fb:b8:36:3b:8a:c7:
a4:75:79:ef:9b:7b:dd:8d:b4:32:5c:48:61:44:90:f5:3f:5c:
f2:6e:93:3b:ec:25:39:cd:d4:5c:ef:5f:87:2b:3b:b7:4c:28:
ed:f9:5a:33:61:63:10:79:08:39:96:e2:f5:2c:65:fc:cd:93:
34:79:41:79:e8:86:9c:e1:22:d6:19:4c:93:c6:25:24:9e:3f:
32:c3:8a:80:eb:26:80:25:16:f1:c6:77:a2:2b:0d:19:01:68:
1f:fd:62:88:14:3c:9d:ad:f9:a2:47:be:cf:f0:17:51:8f:76:
cb:54:69:b3:5f:91:37:19:71:ab:d3:da:4b:5b:aa:04:97:d9:
05:cd:cc:0c:8d:8b:3b:ce:6c:e6:14:e9:8c:05:4d:8e:fa:ad:
ea:dc:89:06:d9:35:69:96:25:f2:c5:f8:0d:31:13:b3:71:55:
e9:a4:a6:49:bd:5b:cc:39:1d:37:52:54:2d:cf:e4:f6:90:64:
27:19:ed:72:09:e8:24:5a:9d:63:84:db:25:dc:0b:d8:3c:4c:
62:76:aa:91:6a:44:9a:cd:fb:95:12:a1:91:24:83:56:59:8c:
27:7c:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:06 2025 by rpki-client