Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/pfAkFcWDB15x-y-BYarhCAMlXnU.roa
File: pfAkFcWDB15x-y-BYarhCAMlXnU.roa (raw, json)
Hash identifier: wl91QEmgTR5aswMDA3TceIiJmXINDAPiBk9ZHXq7gOI=
Subject key identifier: A5:F0:24:15:C5:83:07:5E:71:FB:2F:81:61:AA:E1:08:03:25:5E:75
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A60257F6BDB9949DC6C82FEEF71AF24E2
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/pfAkFcWDB15x-y-BYarhCAMlXnU.roa
Signing time: Mon 04 Sep 2023 12:23:04 +0000
ROA not before: Mon 04 Sep 2023 12:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
213.193.96.0/19 maxlen: 19
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
195.202.224.0/19 maxlen: 19
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
212.47.160.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
178.83.0.0/16 maxlen: 16
212.47.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:25:7f:6b:db:99:49:dc:6c:82:fe:ef:71:af:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 12:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5f02415c583075e71fb2f8161aae10803255e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:71:78:54:52:1e:91:9f:c0:22:80:98:6e:
95:9a:e2:4d:2d:c2:56:bd:43:18:64:14:1e:5c:a9:
2f:99:bb:7a:56:80:95:02:8b:7d:fc:49:06:f5:d3:
4d:a1:4b:1d:92:c4:4d:2d:87:aa:79:1f:4a:f3:ab:
ff:40:43:76:83:5e:a6:01:41:02:c6:9d:61:56:b9:
74:60:51:40:fe:91:2c:4b:9f:49:fe:ae:3f:ba:6c:
90:ae:fa:e7:60:7f:55:97:8b:46:24:4c:96:f5:77:
f9:db:a9:5d:ae:00:7a:32:fd:c3:56:ca:d9:e8:08:
b4:b5:2f:df:6f:da:32:9e:67:27:73:83:7e:30:fc:
46:42:48:37:2d:14:45:01:bd:e1:21:7b:8e:c3:26:
e9:94:0b:3e:fe:20:54:03:5e:eb:2c:ad:d0:78:8c:
21:cf:4e:54:bc:1d:c8:c1:4b:53:cb:ed:fa:16:33:
52:05:f9:8c:8d:d1:1f:11:1d:fd:2e:d1:11:dc:10:
74:46:14:e5:32:bd:d1:fc:f3:4a:e5:a3:34:c8:35:
2e:18:58:ca:94:18:77:c7:99:db:11:09:fc:89:2f:
e0:12:2b:ab:bb:74:04:53:b9:42:57:6c:ff:eb:cc:
28:9b:0a:29:e4:bf:3e:9c:e2:99:f2:f7:e0:ac:2e:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:24:15:C5:83:07:5E:71:FB:2F:81:61:AA:E1:08:03:25:5E:75
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/pfAkFcWDB15x-y-BYarhCAMlXnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
Signature Algorithm: sha256WithRSAEncryption
84:a4:77:8a:af:b9:4c:de:bc:f1:bb:93:c6:0d:ca:04:23:b2:
38:10:f1:5b:39:85:60:4c:d9:c8:4e:13:af:b7:68:23:8e:e4:
1b:d9:0f:c3:6e:ac:2c:ed:58:e4:b7:2c:91:33:ed:9b:39:46:
38:c2:82:45:cf:40:7f:10:c7:38:74:9b:05:2a:b4:8b:fd:4c:
b7:0f:b6:4a:96:b2:a2:42:d3:64:d5:a9:cb:79:d2:20:04:78:
ff:38:6b:9b:2f:7a:53:09:a6:3e:76:a5:a3:b1:fb:60:1c:3a:
8d:97:a0:e8:fc:5b:29:bf:68:86:fe:b2:49:bc:a6:64:1c:6d:
b4:5b:6c:d0:9c:9e:0d:3e:6a:68:89:1d:6d:7e:7b:24:e3:4e:
c7:01:e4:08:99:6d:58:f0:89:33:2f:ee:4f:9d:23:5c:fd:68:
3d:37:4f:a1:d8:4e:dc:e2:6f:e9:67:0d:78:d3:39:7c:9e:58:
21:5a:ad:a5:38:ed:f1:a4:c6:2f:d4:fd:2f:9e:23:d5:5e:cd:
94:2f:41:c8:4c:86:12:55:29:dd:d5:20:16:32:be:6a:1a:0f:
08:38:25:d7:ba:74:27:ca:a5:6e:f1:d6:6d:79:64:69:5d:d7:
59:a5:8b:67:85:8f:46:57:bc:21:43:8f:f7:ea:76:f5:10:20:
be:17:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:44 2025 by rpki-client