Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/RaQ_TjcHUWpyD3Qh0gPcodxst5E.roa
File: RaQ_TjcHUWpyD3Qh0gPcodxst5E.roa (raw, json)
Hash identifier: iBGdJPtL+0G0OvbK7DgDgsG0gRFgX+PakqmAsNLkZ2o=
Subject key identifier: 45:A4:3F:4E:37:07:51:6A:72:0F:74:21:D2:03:DC:A1:DC:6C:B7:91
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 361C6974
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/RaQ_TjcHUWpyD3Qh0gPcodxst5E.roa
Signing time: Sat 01 Jan 2022 02:52:42 +0000
ROA not before: Sat 01 Jan 2022 02:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15763
IP address blocks: 185.151.100.0/22 maxlen: 24
156.67.58.0/24 maxlen: 24
85.22.48.0/24 maxlen: 24
85.22.53.0/24 maxlen: 24
85.22.54.0/24 maxlen: 24
85.22.55.0/24 maxlen: 24
85.22.52.0/24 maxlen: 24
85.22.60.0/24 maxlen: 24
85.22.74.0/24 maxlen: 24
85.22.75.0/24 maxlen: 24
85.22.0.0/20 maxlen: 20
85.22.0.0/16 maxlen: 16
85.22.16.0/20 maxlen: 20
85.22.148.0/23 maxlen: 23
85.22.158.0/24 maxlen: 24
85.22.172.0/24 maxlen: 24
85.22.173.0/24 maxlen: 24
85.22.174.0/24 maxlen: 24
85.22.175.0/24 maxlen: 24
85.22.84.0/22 maxlen: 22
85.22.96.0/20 maxlen: 20
212.29.32.0/24 maxlen: 24
212.29.33.0/24 maxlen: 24
212.29.34.0/24 maxlen: 24
212.29.32.0/19 maxlen: 19
212.29.42.0/24 maxlen: 24
212.29.39.0/24 maxlen: 24
85.22.112.0/20 maxlen: 20
85.22.128.0/22 maxlen: 22
2a03:f580::/32 maxlen: 32
2a03:f580:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907831668 (0x361c6974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Jan 1 02:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45a43f4e3707516a720f7421d203dca1dc6cb791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:be:a5:eb:33:95:58:46:9e:cc:2d:de:87:
cb:b8:99:06:19:e5:33:cd:8f:b3:f6:c3:50:a0:98:
69:f7:ac:9c:07:10:46:0c:ab:ef:47:0d:3e:c7:39:
d0:c2:f4:f3:37:05:29:c9:fe:39:28:3c:bf:87:30:
c0:f6:95:ef:eb:a0:00:a6:81:74:b7:3d:fe:13:16:
f0:c8:7e:a9:95:cb:ab:8e:a0:2e:74:42:60:97:f2:
59:0e:bd:93:7a:34:90:82:74:87:73:90:4b:98:bf:
de:57:2f:10:e9:6c:d0:eb:e4:ae:68:19:43:0e:ba:
b7:2d:64:a2:aa:dc:de:c6:af:2f:8c:a0:a0:99:30:
b9:d4:bb:7c:26:1a:45:65:28:47:49:eb:ff:de:6f:
bf:82:14:7b:82:6b:0a:8a:db:f7:c0:ff:a4:60:94:
02:3d:73:27:f0:e0:66:13:21:43:53:a0:95:68:0f:
64:15:7f:51:d2:7f:89:75:c2:32:5b:a1:1b:b3:65:
6a:50:1e:a0:2c:bf:ce:46:f7:37:f8:db:37:0c:ec:
84:bc:8a:d4:4d:06:e8:25:7e:a8:74:86:37:d5:e8:
cc:e3:e9:a7:b2:16:96:4e:a7:fa:53:c3:09:88:69:
f5:43:e6:80:6d:d9:8e:0c:5b:c3:63:1b:48:db:19:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:3F:4E:37:07:51:6A:72:0F:74:21:D2:03:DC:A1:DC:6C:B7:91
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/RaQ_TjcHUWpyD3Qh0gPcodxst5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.22.0.0/16
156.67.58.0/24
185.151.100.0/22
212.29.32.0/19
IPv6:
2a03:f580::/32
Signature Algorithm: sha256WithRSAEncryption
74:1a:f1:4d:14:50:2e:c6:ab:cc:42:f6:4c:3a:2f:f6:da:d3:
ab:05:36:c2:4c:00:54:fb:e2:d5:81:9e:51:87:a1:f2:15:b9:
22:a1:ef:1a:68:6e:32:36:52:b9:c7:1c:e4:fc:05:57:1c:70:
26:46:17:b1:ff:31:c1:3f:d6:db:d2:5e:88:67:7c:d4:b4:c5:
f9:0c:82:73:47:b6:2d:17:b9:1c:c4:9b:f2:58:b3:4f:8a:58:
43:03:a5:c0:6b:c7:45:b7:48:dd:c4:cd:b9:32:6b:55:58:c4:
4d:bf:35:24:31:31:7c:9b:a5:62:85:ea:69:ae:f9:c5:e2:06:
9d:30:13:43:cb:e3:fb:59:4d:f8:1a:0b:72:93:0a:ab:6d:42:
e2:48:a8:7b:7c:d8:d9:7a:6d:4a:c8:39:ce:b8:5c:d4:e2:4f:
f5:a5:ee:aa:30:88:26:37:ff:cc:88:42:95:34:3c:f2:15:a1:
e6:6e:09:2a:a6:74:31:f7:2d:db:3b:3f:76:81:73:59:f2:96:
9a:72:3a:21:de:0a:5a:58:25:e6:8d:32:6c:5a:2b:db:7a:39:
49:fb:e2:77:a9:ec:32:f7:b7:39:8c:31:52:7c:51:23:43:61:
dd:52:6e:af:0e:1d:d1:45:2a:eb:66:5f:c8:72:85:a0:bd:32:
73:c3:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:58 2025 by rpki-client