Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Atnh4TnN8M0kmwHYylzsRN5p3VE.roa
File: Atnh4TnN8M0kmwHYylzsRN5p3VE.roa (raw, json)
Hash identifier: zQe/yVS848QstRPrRa1tzM8493pQHYF4thVNzcVEm6Q=
Subject key identifier: 02:D9:E1:E1:39:CD:F0:CD:24:9B:01:D8:CA:5C:EC:44:DE:69:DD:51
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A152DAF
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Atnh4TnN8M0kmwHYylzsRN5p3VE.roa
Signing time: Thu 28 Apr 2022 07:52:59 +0000
ROA not before: Thu 28 Apr 2022 07:52:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8262
IP address blocks: 194.12.224.0/19 maxlen: 19
194.12.249.0/24 maxlen: 24
194.12.254.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.95.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.75.0/24 maxlen: 24
82.119.74.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
89.252.223.0/24 maxlen: 24
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
89.252.199.0/24 maxlen: 24
89.252.200.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
85.14.0.0/23 maxlen: 23
85.14.0.0/18 maxlen: 18
176.67.234.0/24 maxlen: 24
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169160111 (0xa152daf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:52:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02d9e1e139cdf0cd249b01d8ca5cec44de69dd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:ab:7a:1d:a1:bf:36:4c:e1:1d:af:b2:84:
fd:21:40:47:49:9e:0d:97:a6:32:43:d7:db:72:49:
24:36:0e:17:a8:a2:cf:db:14:88:7a:7d:03:df:f4:
47:d0:a2:8a:6c:3c:e1:06:c6:55:90:6e:c5:99:44:
49:d9:09:e6:76:c8:89:9b:52:b7:4f:09:5c:89:19:
ec:f3:29:02:e8:70:50:15:3a:bd:9b:43:c4:84:1f:
6f:0c:23:7c:de:b4:b6:e9:6f:b7:a2:83:3e:d9:a4:
94:3c:92:c6:b0:dc:99:c0:13:11:03:55:53:66:ee:
fb:9e:8e:3c:7a:ef:f4:88:9b:ca:49:b9:71:81:d9:
8e:c8:0d:1b:38:0b:71:8b:2f:d2:89:96:38:2d:e2:
53:2b:c5:8e:33:31:c6:67:99:5c:bd:78:b3:d2:89:
6d:26:df:b3:85:b7:f5:99:64:0d:2a:d8:a1:d5:05:
aa:cd:46:d2:bf:ae:b2:6f:92:d7:ed:6e:5b:06:70:
ec:31:eb:53:38:64:ae:d3:e2:23:53:b3:6f:3c:02:
d0:6d:f9:4c:6a:76:d1:11:2b:3a:16:de:a8:a3:b2:
22:1e:b0:1c:72:4a:6d:f7:3e:cc:8b:33:9a:b7:44:
2e:88:0e:cc:dc:9b:15:d2:9f:ab:4e:3d:3e:c1:b8:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D9:E1:E1:39:CD:F0:CD:24:9B:01:D8:CA:5C:EC:44:DE:69:DD:51
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Atnh4TnN8M0kmwHYylzsRN5p3VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
33:52:b3:f4:56:c4:19:49:64:91:15:b7:c3:31:27:0f:b2:fb:
b4:d1:14:0b:88:6b:b7:94:8a:9d:7f:2f:9f:9a:83:23:90:a8:
94:b9:88:05:84:a4:2e:c4:89:d8:3f:4d:79:90:8e:56:d5:82:
15:3d:90:b4:db:be:d1:2b:22:3a:cb:93:b0:bd:3e:18:c3:71:
f4:7c:cb:18:d7:36:f1:08:ce:40:61:09:44:a5:b7:42:8a:1d:
c4:8b:86:70:55:c6:b1:89:96:18:73:b0:e2:29:d2:43:c0:b3:
eb:61:fb:9c:10:4f:6d:a9:0a:b4:67:da:d2:a1:a7:e3:b5:86:
83:5e:f9:e0:49:e8:45:c0:84:3d:60:36:a9:4f:0e:a8:cc:5c:
a1:bd:13:0f:90:c9:db:af:46:be:02:7e:fd:3c:e7:b3:9c:7c:
8c:79:f4:16:c9:49:ea:8e:94:61:9e:8d:eb:fd:ed:54:32:5c:
94:26:ef:37:81:63:9c:b3:b6:55:7e:45:96:f8:59:6b:f2:8a:
91:f4:50:ff:63:f1:53:33:93:3e:a6:21:08:6b:15:33:dd:40:
61:24:1a:17:86:71:af:8d:f9:ab:d0:15:c6:f4:55:ba:44:3c:
85:4d:b7:db:b5:a1:ea:d0:4c:b0:74:6f:2d:89:4d:3a:0f:a3:
2b:b1:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:37 2025 by rpki-client