Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kjRg73etsmpr-V4ubnCsvXNLS4M.roa
File: kjRg73etsmpr-V4ubnCsvXNLS4M.roa (raw, json)
Hash identifier: xScw5Cf67t6kRm87TMC9CwuDzNwHectFO46DtcALuq4=
Subject key identifier: 92:34:60:EF:77:AD:B2:6A:6B:F9:5E:2E:6E:70:AC:BD:73:4B:4B:83
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0183EFEF79802C1ABB86EB405FD76CB2017E
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kjRg73etsmpr-V4ubnCsvXNLS4M.roa
Signing time: Wed 19 Oct 2022 11:09:52 +0000
ROA not before: Wed 19 Oct 2022 11:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8262
IP address blocks: 194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.254.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.95.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.75.0/24 maxlen: 24
82.119.74.0/24 maxlen: 24
82.119.83.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
89.252.223.0/24 maxlen: 24
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
89.252.199.0/24 maxlen: 24
89.252.200.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
85.14.0.0/23 maxlen: 23
85.14.0.0/18 maxlen: 18
176.67.234.0/24 maxlen: 24
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:ef:79:80:2c:1a:bb:86:eb:40:5f:d7:6c:b2:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Oct 19 11:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=923460ef77adb26a6bf95e2e6e70acbd734b4b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:66:18:08:5a:09:26:a7:68:71:bb:aa:b5:
53:8e:34:cf:17:04:ee:66:01:9e:37:e6:2b:d0:d7:
60:9d:11:b0:98:2c:cb:ea:13:de:ab:b0:b2:2e:ef:
4b:54:43:b8:0c:b5:c7:3b:90:cc:9e:6b:aa:91:f5:
15:29:d7:96:00:e7:fe:3d:64:d6:7f:70:a4:f4:27:
41:a1:cd:97:31:87:18:16:0c:05:d7:4e:f3:f2:a1:
c2:ea:cf:cb:87:29:ee:72:72:b7:79:9b:13:c3:41:
7b:13:1b:71:4f:30:be:30:72:c2:6c:19:84:89:8b:
1c:ab:bb:77:06:67:12:95:41:c4:1a:c0:fb:f3:66:
10:e0:77:55:2c:dc:0f:07:58:da:25:31:19:5b:b4:
9a:77:db:57:a9:0d:8d:be:21:1a:06:8c:5a:a9:3f:
a4:c1:42:c9:f5:65:8e:2d:68:17:6c:67:8f:77:c2:
bf:f7:42:73:90:c7:f6:7a:73:17:dd:dc:8f:67:e2:
f3:b3:8b:0b:26:a5:66:e3:0a:20:31:05:5f:12:48:
05:91:91:2a:4f:72:7d:08:e8:95:05:59:45:83:fd:
fe:d4:75:26:dc:04:24:0e:f4:4c:67:8e:28:99:a0:
a1:cc:82:03:ee:f9:a9:a5:d4:7e:ca:9b:ca:a7:ae:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:60:EF:77:AD:B2:6A:6B:F9:5E:2E:6E:70:AC:BD:73:4B:4B:83
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/kjRg73etsmpr-V4ubnCsvXNLS4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
53:d1:3e:6d:0f:dc:3d:b0:54:df:bb:f8:2a:47:cc:5c:89:c5:
1b:09:77:0e:09:5e:64:0b:52:87:69:28:c4:3d:0e:81:60:72:
74:24:25:29:6f:89:ab:e7:7b:61:8f:0f:bb:55:39:33:0f:36:
60:fb:65:82:bc:23:3b:69:55:42:9c:55:36:94:fd:d7:35:16:
91:2f:20:01:05:36:e2:1a:53:1d:c1:98:7f:48:3d:11:7d:fc:
bc:05:90:04:6e:48:4a:1e:c5:d0:7f:40:17:9c:9c:b9:83:b6:
f8:f9:20:fc:e5:2b:b0:95:4d:83:cc:7c:ed:9e:d7:4b:e6:ea:
fb:c1:85:f1:00:e1:63:f3:6b:cf:02:1a:c2:90:4b:04:6a:a1:
a4:16:39:4e:57:96:31:c3:53:74:8a:3e:20:da:65:4f:df:92:
91:1e:9a:1f:5d:e5:bb:39:66:d0:ff:2a:f3:54:91:dd:78:de:
f9:11:e4:1e:2c:4f:39:7b:ab:48:d6:30:00:f9:2b:78:63:45:
d6:f9:95:13:b1:64:1c:c8:17:41:ec:cf:25:8c:2f:d3:48:80:
73:c2:a9:30:ff:16:1e:f8:3a:c3:41:c6:4e:19:76:3a:b7:2e:
92:14:7b:c7:06:dd:ae:9d:4f:8d:84:82:e1:dd:0f:d1:29:af:
05:c7:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:22 2025 by rpki-client