Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/AveWoEkbA9qpJVnA_nXG-pCczgc.roa
File: AveWoEkbA9qpJVnA_nXG-pCczgc.roa (raw, json)
Hash identifier: k29peAGRvgO2eSJtLwkTPO2kon3KylBVgdj3Ow4YKnU=
Subject key identifier: 02:F7:96:A0:49:1B:03:DA:A9:25:59:C0:FE:75:C6:FA:90:9C:CE:07
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0DB5B88B
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/AveWoEkbA9qpJVnA_nXG-pCczgc.roa
Signing time: Sat 01 Jan 2022 07:52:53 +0000
ROA not before: Sat 01 Jan 2022 07:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29014
IP address blocks: 195.177.233.0/24 maxlen: 24
195.177.232.0/23 maxlen: 23
193.41.116.0/23 maxlen: 23
195.242.90.0/23 maxlen: 23
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.128.0/21 maxlen: 24
93.92.134.0/23 maxlen: 23
93.92.133.0/24 maxlen: 24
185.8.8.0/22 maxlen: 22
185.8.8.0/24 maxlen: 24
85.158.0.0/22 maxlen: 22
85.158.0.0/24 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.7.0/24 maxlen: 24
85.158.6.0/24 maxlen: 24
194.126.239.0/24 maxlen: 24
2a00:12e8:200::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:600::/40 maxlen: 40
2a00:12e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230013067 (0xdb5b88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 07:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f796a0491b03daa92559c0fe75c6fa909cce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:de:c3:ee:5a:dd:b3:3f:9b:29:cd:7e:fc:
55:4d:af:cd:26:fc:9c:33:d7:50:9f:07:6c:db:d8:
5b:b6:23:1a:2b:c8:df:6f:2e:66:0f:dd:0d:b7:2e:
c5:65:94:6e:46:1e:f8:42:5d:ae:8f:da:96:b0:50:
10:af:c4:75:e4:42:5e:fb:03:a1:c6:bc:d6:13:de:
9b:a8:48:36:78:1f:70:98:a0:31:37:19:6d:a8:9a:
cb:c2:a0:a3:f0:45:04:2e:0e:e9:5d:e8:d9:a7:fb:
72:95:5e:8f:f9:4f:dc:04:19:8b:9f:43:17:42:94:
9d:61:7c:71:7f:79:ce:5b:43:94:6a:1c:90:09:e7:
eb:53:97:2e:70:6c:44:25:fd:2d:d5:b1:21:6f:04:
04:9e:55:88:86:cf:71:b6:b4:6e:ef:34:7b:90:4c:
1d:95:cf:6a:0b:88:be:e5:d5:71:10:92:75:4b:48:
29:fc:c5:d4:c2:a8:43:69:7f:85:c0:f2:35:40:6f:
3c:9c:a8:5d:d1:75:8f:d5:57:7c:53:ab:47:69:5d:
67:54:50:00:77:2f:9b:91:35:8a:d0:57:80:00:c2:
5a:58:6d:c1:f7:55:ce:45:5d:d0:1f:4c:67:7f:7a:
d3:f7:28:9d:37:37:0e:f3:85:01:af:ab:4c:49:34:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:96:A0:49:1B:03:DA:A9:25:59:C0:FE:75:C6:FA:90:9C:CE:07
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/AveWoEkbA9qpJVnA_nXG-pCczgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
195.242.90.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
52:7d:7c:99:f5:8b:eb:9b:ea:c5:64:29:66:85:6f:3a:23:ca:
cc:a7:0a:d6:69:f0:b7:7f:ce:1f:6b:d8:2a:fd:bd:18:7e:cc:
69:df:f0:58:90:4e:d3:db:5b:ff:e2:18:83:0c:1e:0c:86:ae:
fb:df:bf:a4:cc:32:20:8f:bd:f2:41:26:b8:21:72:6e:10:e6:
aa:23:5d:f5:82:70:07:2f:03:72:69:ee:29:68:05:a0:de:11:
17:89:50:f2:87:15:b5:2c:4e:25:5e:3e:e3:93:26:7c:46:52:
1e:7e:d5:14:8e:b3:26:80:5f:cd:7e:33:81:d0:47:06:ef:48:
71:23:67:82:26:f5:cf:92:28:74:4e:1d:1e:50:77:9b:f8:25:
6f:be:98:23:c0:44:fb:da:9d:a9:4b:8d:7e:fe:54:11:9b:a2:
19:da:5b:c9:86:2b:a3:c2:4a:a1:29:44:c0:3c:9d:c4:42:30:
37:cd:ab:d0:bb:d1:d6:cd:2b:2b:b3:6e:15:df:0e:dc:75:9d:
0f:95:29:54:02:65:b7:55:17:5c:6a:76:33:ae:17:ba:37:0a:
10:21:49:ff:68:e1:3f:9b:66:51:75:20:37:75:5b:43:2f:65:
02:5a:9e:71:db:3d:2b:2c:43:65:73:77:4c:67:81:44:a7:4e:
35:11:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:18 2025 by rpki-client