Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/PErXIRFcaa6s6Qoln6i5R2ff6sQ.roa
File: PErXIRFcaa6s6Qoln6i5R2ff6sQ.roa (raw, json)
Hash identifier: Ca6ZlDG2P18hKdNKCdy7SHuxKztlN1IolaotcLBhQMs=
Subject key identifier: 3C:4A:D7:21:11:5C:69:AE:AC:E9:0A:25:9F:A8:B9:47:67:DF:EA:C4
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5FA63C27DF56E1A97DED554DA966D4F9
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/PErXIRFcaa6s6Qoln6i5R2ff6sQ.roa
Signing time: Mon 04 Sep 2023 10:04:04 +0000
ROA not before: Mon 04 Sep 2023 10:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
31.10.192.0/18 maxlen: 18
195.202.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
195.202.224.0/19 maxlen: 19
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
178.83.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:a6:3c:27:df:56:e1:a9:7d:ed:55:4d:a9:66:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 10:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c4ad721115c69aeace90a259fa8b94767dfeac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:45:ca:c5:9e:e0:a0:28:14:95:8d:a7:28:
8c:72:37:ab:ae:2c:da:dc:ea:cd:44:88:bb:08:8f:
16:f4:87:09:06:1e:96:65:22:4e:00:6f:36:9b:29:
5d:61:0a:8b:82:2c:be:a7:3c:0d:7f:b7:0c:1a:ef:
ab:27:6c:ff:d9:ca:57:02:78:a8:84:6d:00:af:70:
c3:91:3d:03:34:80:fc:c9:d7:5a:06:61:eb:64:fe:
10:81:14:d4:a5:a2:e0:12:36:15:c3:fe:2c:d0:34:
d1:0e:5f:ef:0a:26:85:23:eb:ce:1b:2f:1f:2f:98:
29:dd:4d:f0:b2:c1:f3:79:d5:0d:b8:64:3f:86:77:
fa:61:82:6d:57:31:c1:b4:70:80:12:18:90:21:22:
6f:4e:c9:76:ef:73:7b:3f:89:0e:ce:79:3e:d1:3f:
34:3b:63:6f:86:72:ba:92:b7:bf:84:5e:d6:79:ea:
c2:49:0e:72:9c:b5:b2:bd:65:2b:73:9d:33:78:6d:
3f:ad:e3:7b:c5:62:12:84:f7:33:df:ff:6c:0b:8a:
25:96:2a:46:25:2e:b5:8b:cc:36:de:b0:59:90:4b:
cb:dc:f2:0f:32:ac:3b:95:a7:8b:30:14:ee:88:19:
26:19:30:67:bc:52:22:45:c4:81:b8:6e:70:c1:05:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:D7:21:11:5C:69:AE:AC:E9:0A:25:9F:A8:B9:47:67:DF:EA:C4
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/PErXIRFcaa6s6Qoln6i5R2ff6sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
30:18:4b:5f:0c:e4:0b:4a:dd:45:4e:be:7f:f8:04:7c:ad:e5:
3d:05:f7:cb:91:cb:b4:73:5f:fd:8a:d4:bf:22:f9:64:09:12:
cb:18:e6:c8:75:93:46:9c:63:42:02:99:f4:65:e0:89:73:6d:
68:46:5d:a9:26:b9:55:23:ec:d0:0c:61:42:21:73:a1:62:a3:
6e:67:40:29:d4:42:0a:3c:54:b2:1f:06:58:28:3a:c9:3f:ba:
a5:b7:f8:3a:29:dd:49:4a:46:aa:0e:d8:1b:85:63:ed:02:b2:
af:52:e9:d7:ec:c7:80:98:4e:44:51:43:59:ae:a7:4f:64:7e:
e0:b5:9c:0e:69:6f:61:91:db:dc:71:6a:b6:ae:75:8f:5b:bf:
a3:4e:c4:cd:a8:78:18:a7:f5:70:24:47:fe:36:6f:e6:a1:4f:
bd:52:e5:9e:d8:d5:e1:92:15:bb:de:a3:52:f5:2e:dd:ff:8c:
61:7f:06:81:15:af:d9:0b:a3:87:53:e0:04:1a:d8:cc:36:c6:
33:84:02:8b:dd:81:0d:40:98:3f:ef:09:78:6e:a1:8b:7c:c3:
f1:41:41:ff:54:11:bf:89:18:65:f1:9f:84:9e:f1:b8:53:fb:
7b:39:c9:2f:4b:72:ae:e9:5f:08:b1:b4:ea:e9:bd:d2:a4:84:
fa:4c:2d:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:40 2025 by rpki-client