Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/v5IcR4UbyVRCtbFEjNDFnlfBBEQ.roa
File: v5IcR4UbyVRCtbFEjNDFnlfBBEQ.roa (raw, json)
Hash identifier: dOqjCDrKFkauSh6T8XCdXES0PzztBqSr6D+CfsVF/is=
Subject key identifier: BF:92:1C:47:85:1B:C9:54:42:B5:B1:44:8C:D0:C5:9E:57:C1:04:44
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 018570F0A12E3CADD3CD8D083DA62767378D
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/v5IcR4UbyVRCtbFEjNDFnlfBBEQ.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8410
IP address blocks: 212.15.32.0/20 maxlen: 20
212.15.48.0/21 maxlen: 21
194.55.163.0/24 maxlen: 24
194.55.161.0/24 maxlen: 24
194.0.120.0/22 maxlen: 22
194.55.171.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a1:2e:3c:ad:d3:cd:8d:08:3d:a6:27:67:37:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf921c47851bc95442b5b1448cd0c59e57c10444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:cd:d1:33:ac:47:dd:25:75:10:53:40:50:
54:10:dd:c6:f0:9a:6a:2a:64:6a:34:43:d6:96:a7:
e5:c1:da:b4:2c:26:0c:cd:db:6d:f0:e5:63:15:08:
17:eb:f2:cb:76:64:79:e5:9c:f4:e6:ee:d1:fc:ba:
2d:49:c2:47:16:4b:a1:88:a0:29:2f:d1:b1:3a:55:
2a:0d:5c:4a:cc:f5:2d:91:c4:fa:78:be:d3:57:37:
04:1a:b4:c0:3e:d7:3d:0d:63:3e:2e:de:02:0a:ec:
dd:92:8c:21:06:29:4c:13:93:d9:75:4f:34:16:d4:
fd:48:76:3b:d7:fd:e7:47:22:81:cc:f0:b7:4e:c8:
12:09:05:f9:38:12:c8:ee:5f:12:41:b4:2c:85:73:
e6:74:a8:c6:d8:e4:e7:f5:c5:41:cf:43:ec:49:21:
8f:75:95:56:58:4b:21:f6:ef:9a:c6:b4:31:61:f7:
03:5b:1f:2a:27:7a:72:b5:00:05:60:52:c8:8e:2a:
2a:75:34:30:15:ac:e4:92:b3:17:d8:46:78:73:e4:
3c:10:0a:a3:9f:cb:a0:7a:de:a1:b3:66:3d:66:f8:
49:be:33:32:db:f0:c7:4f:b1:c6:56:e0:67:f4:cc:
0f:37:0c:03:cb:f0:e6:95:66:7c:8c:51:13:9a:85:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:1C:47:85:1B:C9:54:42:B5:B1:44:8C:D0:C5:9E:57:C1:04:44
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/v5IcR4UbyVRCtbFEjNDFnlfBBEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.55.255
Signature Algorithm: sha256WithRSAEncryption
17:3b:12:f3:11:29:93:ee:b4:bf:b4:2a:be:1b:fd:23:b0:64:
a2:81:11:87:df:e5:8b:35:20:1a:cd:5b:c2:fa:81:2a:12:b1:
1d:e2:da:f5:b7:6f:19:0d:cf:ed:88:54:89:eb:d6:81:b7:c8:
2b:ae:db:33:a8:2a:15:cf:ab:89:41:ef:b1:da:b5:27:b1:bd:
22:31:60:1c:b7:2f:a2:d9:8a:e1:59:35:55:22:db:8d:97:09:
b5:d6:7c:26:13:64:c7:60:25:d3:cd:13:81:0b:e2:62:e4:62:
e2:46:a6:e0:5c:20:c8:10:93:0d:4b:2e:4b:24:38:1c:c5:7e:
db:61:aa:a8:6e:0b:46:46:dc:a4:50:97:0f:ec:8f:d6:01:85:
5d:75:2d:2a:d9:f8:c7:98:7d:a0:ad:2f:4b:22:0a:6f:8c:c3:
8c:2c:e6:4d:51:d2:4c:ce:75:04:54:d1:3f:0e:25:8b:e9:90:
0a:9e:26:85:7e:21:8b:97:eb:24:0a:6f:8c:36:95:7f:f6:7e:
d0:6b:01:d5:68:b0:33:97:54:29:4b:6e:b3:69:24:ce:9c:bc:
da:7e:3d:0a:41:12:55:cc:c7:7c:0e:28:52:53:ca:dd:dc:44:
ac:d5:97:0e:d2:17:4c:09:c5:e8:19:73:b1:a2:d0:5e:a2:b1:
f8:6c:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:50 2025 by rpki-client