Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/19U5fHbBWRaUFWDK7p0xnrnbBig.roa
File: 19U5fHbBWRaUFWDK7p0xnrnbBig.roa (raw, json)
Hash identifier: FZ5gUL96kGsdL+2b4CejD+6GDBjP/jLyIhGSGWmN/SQ=
Subject key identifier: D7:D5:39:7C:76:C1:59:16:94:15:60:CA:EE:9D:31:9E:B9:DB:06:28
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 01838D53943210FD1A69A4EEAF28171F2B84
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/19U5fHbBWRaUFWDK7p0xnrnbBig.roa
Signing time: Fri 30 Sep 2022 07:36:48 +0000
ROA not before: Fri 30 Sep 2022 07:36:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14907
IP address blocks: 91.198.174.0/24 maxlen: 24
185.71.138.0/24 maxlen: 24
185.15.56.0/24 maxlen: 24
185.15.57.0/24 maxlen: 24
185.15.58.0/24 maxlen: 24
185.15.59.0/24 maxlen: 24
2a02:ec80:500::/48 maxlen: 48
2a02:ec80:600::/48 maxlen: 48
2001:67c:930::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:53:94:32:10:fd:1a:69:a4:ee:af:28:17:1f:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Sep 30 07:36:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7d5397c76c15916941560caee9d319eb9db0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:44:e1:5b:f2:9d:84:1e:5b:c2:7a:4b:0d:
1c:fc:cb:b2:95:d0:79:0a:9d:bd:ea:55:a6:92:4a:
87:db:2e:9d:c5:d9:4f:9c:2d:de:ae:07:a3:60:2b:
6b:38:2d:41:37:0d:25:cc:b0:1b:ff:46:e0:3f:91:
85:02:fb:b2:83:67:58:45:48:20:7b:32:de:61:b1:
f6:c0:56:ec:1b:f3:aa:b9:53:b1:ad:a0:3c:88:6e:
b5:49:6d:92:80:a6:5d:36:24:ea:fa:e4:c7:09:a2:
94:25:ad:13:7f:6c:0c:2f:0e:48:68:1d:36:c4:2d:
fd:3b:2d:79:d5:4c:71:fb:a7:eb:fe:99:08:f4:80:
f4:1f:6d:23:05:81:40:6f:cb:a6:c9:e7:76:4d:83:
fc:3c:2b:e3:09:e6:c1:a2:e9:4f:da:e7:df:21:c1:
18:e2:d2:49:51:7b:d9:c5:a5:fb:f5:01:54:63:2d:
14:23:c2:f0:be:e2:12:b9:3f:90:19:c5:75:62:4e:
d8:c4:51:2c:6f:95:ee:84:7f:24:45:c2:af:8c:9f:
27:60:ed:6c:53:da:fb:5a:3c:1d:ab:ad:45:db:06:
7d:3f:2e:56:d0:f1:c5:2c:28:15:ed:25:20:df:e7:
89:9b:c6:33:17:52:06:84:a7:67:75:7f:b0:04:36:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D5:39:7C:76:C1:59:16:94:15:60:CA:EE:9D:31:9E:B9:DB:06:28
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/19U5fHbBWRaUFWDK7p0xnrnbBig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.174.0/24
185.15.56.0/22
185.71.138.0/24
IPv6:
2001:67c:930::/48
2a02:ec80:500::/48
2a02:ec80:600::/48
Signature Algorithm: sha256WithRSAEncryption
b0:0e:f5:5f:f7:20:1e:81:cc:5c:d7:be:3d:fc:b9:35:99:a5:
75:d9:96:f4:d8:2f:ec:0d:25:c5:55:77:6d:12:be:1e:28:42:
e9:6e:14:68:a7:30:3a:9d:dd:2c:63:72:ee:a5:ef:14:c8:8c:
0b:3e:49:a1:2c:1e:c4:66:66:49:75:ad:66:51:ae:62:35:e8:
8b:dc:3a:9a:85:49:4d:fc:dd:c2:c6:ef:ed:1f:47:f3:d0:62:
8f:b4:27:2c:c2:11:8a:78:8f:76:6a:13:73:9f:b1:b6:90:84:
4e:35:9a:82:4b:3c:16:a6:5b:e7:34:e8:e9:72:34:8b:4e:a8:
2e:fd:31:5b:42:43:fa:ca:06:f3:e5:64:3f:56:54:4c:46:3c:
c3:7f:96:df:14:d7:7e:f8:7d:3f:8d:d8:66:ab:63:27:32:0d:
d5:4e:8e:5e:ad:fc:e1:e1:f7:00:99:ac:4a:95:6e:28:e9:e8:
f4:d7:9b:35:ed:04:77:39:cc:e8:86:b4:f2:43:64:08:56:fc:
a0:f1:ef:d6:43:b9:7c:f0:c3:ea:42:50:6e:7b:0c:22:1b:42:
6c:42:4e:ab:70:3f:08:64:cd:9b:5f:a7:db:3d:4f:63:db:13:
1c:2c:b0:d0:a0:d1:2a:9a:37:df:6b:6b:32:ef:d5:4a:ff:69:
11:72:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:53 2025 by rpki-client