Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/myWf1eXsykmKvWvVKZuQubcYay8.roa
File: myWf1eXsykmKvWvVKZuQubcYay8.roa (raw, json)
Hash identifier: uOf7wqqGd2itMYQos9ooEDgu1bFxpWUiGRctGDGUiBw=
Subject key identifier: 9B:25:9F:D5:E5:EC:CA:49:8A:BD:6B:D5:29:9B:90:B9:B7:18:6B:2F
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A601B6C2586EC4FD932AD3F3BB90BAC2B
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/myWf1eXsykmKvWvVKZuQubcYay8.roa
Signing time: Mon 04 Sep 2023 12:12:04 +0000
ROA not before: Mon 04 Sep 2023 12:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
195.202.224.0/19 maxlen: 19
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
178.83.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:1b:6c:25:86:ec:4f:d9:32:ad:3f:3b:b9:0b:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 12:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b259fd5e5ecca498abd6bd5299b90b9b7186b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:d2:19:30:15:16:4d:1f:af:33:94:f1:0b:
59:fa:1d:d1:81:14:02:2e:42:3d:ba:fa:5f:0f:48:
e4:e0:9f:87:0c:c4:25:36:4d:1e:66:26:f2:47:f0:
87:91:dc:23:e1:d6:ea:d3:3f:2c:f2:09:48:3f:a2:
f5:92:64:de:a0:88:ee:31:d0:0f:9c:8b:5f:e4:18:
55:7e:0f:d7:7d:0c:8e:ae:b0:b6:c5:aa:8a:fe:4d:
eb:31:98:18:54:b7:1f:6b:7c:d0:90:e8:46:5f:54:
b8:b5:d0:f6:6a:20:ca:86:0c:68:41:99:57:ad:0b:
66:b7:b8:ba:64:1f:ba:6b:b7:28:e7:3d:c3:36:7d:
15:49:a6:37:1d:05:35:58:a6:98:fc:98:15:9a:67:
29:db:28:4f:bc:50:56:c2:bf:02:7b:c9:37:2b:14:
66:84:fe:26:8e:51:2e:1b:88:f0:a9:0b:20:24:60:
a9:8e:37:63:6e:66:e6:0d:4c:f3:88:18:ce:d8:5f:
66:34:b4:60:b4:a2:c7:c3:f4:2a:3d:2d:ed:79:b5:
ce:75:2c:fa:a6:76:8b:b3:f1:43:98:da:63:4e:d6:
20:27:51:a4:73:9f:f6:64:98:6f:f8:88:69:f6:2c:
8a:a9:90:ea:92:76:d4:bd:7c:57:3f:b4:28:ee:61:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:9F:D5:E5:EC:CA:49:8A:BD:6B:D5:29:9B:90:B9:B7:18:6B:2F
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/myWf1eXsykmKvWvVKZuQubcYay8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
Signature Algorithm: sha256WithRSAEncryption
88:16:43:9b:ff:d8:5d:83:98:7a:48:6d:cc:de:43:98:ec:98:
aa:0b:de:50:1a:72:82:b8:07:c3:75:9b:5b:73:4a:4e:06:da:
17:00:ee:0f:f2:aa:b9:99:00:cc:01:66:b6:0b:46:8f:71:9c:
a1:ab:48:cb:cd:11:b9:85:4e:98:db:35:d9:5d:01:7b:f9:f8:
a9:4a:48:99:4a:37:76:6b:c6:7b:84:e7:e1:f0:17:84:b8:e2:
c2:e9:05:51:15:8b:e4:bd:7f:76:c3:7a:60:67:e8:e1:a7:2b:
77:47:d8:f1:91:dc:45:07:e6:9c:75:e6:9a:7b:0e:44:05:6a:
b9:65:3c:07:bd:8f:c5:e7:9c:c0:02:e4:a0:7a:f4:28:96:d0:
60:ed:48:53:b3:6b:30:ee:b5:a1:1a:ea:d8:98:ed:73:15:ed:
20:38:18:18:99:e4:27:fe:48:d1:41:f2:63:9d:aa:97:0d:57:
86:c1:04:38:a1:a1:7e:cc:2b:71:79:c1:bf:d6:50:d5:ea:cd:
9b:aa:11:61:e0:12:b4:5b:59:81:6b:de:a7:41:ea:40:d2:3f:
cc:9b:f5:ce:af:ca:be:b1:2e:2d:7a:fe:8b:a1:6f:c0:21:16:
4d:62:f3:55:8d:40:6b:57:bb:b6:30:13:2d:28:b8:69:b4:87:
df:d7:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:10 2025 by rpki-client