Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/SLINu29H_7g867tqU952LV5-_qw.roa
File: SLINu29H_7g867tqU952LV5-_qw.roa (raw, json)
Hash identifier: agXZmlk+JAy73l5VQqA4AGZtHi1NWqcy/Xf+t2TfvHc=
Subject key identifier: 48:B2:0D:BB:6F:47:FF:B8:3C:EB:BB:6A:53:DE:76:2D:5E:7E:FE:AC
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018AF476F6E76044154B778094F745A4A422
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/SLINu29H_7g867tqU952LV5-_qw.roa
Signing time: Tue 03 Oct 2023 07:35:51 +0000
ROA not before: Tue 03 Oct 2023 07:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8437
IP address blocks: 62.218.100.0/24 maxlen: 24
178.114.0.0/16 maxlen: 16
81.189.213.0/24 maxlen: 24
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
91.186.128.0/19 maxlen: 19
77.119.32.0/19 maxlen: 19
178.115.96.0/19 maxlen: 19
188.118.192.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
62.218.52.0/24 maxlen: 24
78.142.128.0/18 maxlen: 18
62.116.0.0/19 maxlen: 19
213.235.196.0/24 maxlen: 24
213.235.192.0/18 maxlen: 18
77.119.64.0/18 maxlen: 18
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
46.57.0.0/17 maxlen: 17
212.27.64.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
195.96.0.0/19 maxlen: 19
46.57.72.0/22 maxlen: 22
86.59.0.0/17 maxlen: 17
62.116.64.0/18 maxlen: 18
213.235.234.0/24 maxlen: 24
195.70.224.0/19 maxlen: 19
77.118.0.0/16 maxlen: 16
213.129.224.0/19 maxlen: 19
213.90.0.0/17 maxlen: 17
62.218.4.0/24 maxlen: 24
62.218.0.0/16 maxlen: 16
195.248.32.0/19 maxlen: 19
2001:858::/32 maxlen: 32
2001:938::/32 maxlen: 48
2001:858:40::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:76:f6:e7:60:44:15:4b:77:80:94:f7:45:a4:a4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Oct 3 07:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b20dbb6f47ffb83cebbb6a53de762d5e7efeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:a4:ec:59:12:ea:1b:15:e4:ae:23:9e:5a:
8c:58:f8:f5:7c:06:2d:0f:10:cf:ea:3b:ca:c7:c6:
d0:af:c1:0d:5e:b7:40:1b:75:5f:5b:c9:d2:da:66:
47:f2:b1:41:aa:6d:c0:ea:17:8c:c1:ea:22:f3:4d:
85:e9:40:bd:ee:56:df:9c:ea:c4:a4:8a:b1:6a:5a:
98:69:1e:ef:56:ae:8e:51:25:38:8d:30:00:7d:b2:
f0:78:54:b3:73:49:1a:58:25:e7:f7:15:35:5a:de:
2d:76:db:e8:4c:4b:71:00:09:8f:82:25:2b:0a:3f:
7c:4b:c7:58:54:42:f2:e2:72:21:e0:96:94:bb:d2:
2d:98:d6:2c:47:bf:00:77:dd:24:c2:05:dd:aa:62:
1c:9f:31:10:46:8a:7c:fd:14:7f:20:f6:65:09:67:
5a:59:46:48:77:a9:ec:79:7b:44:96:db:7b:6e:fe:
e9:9e:96:99:0b:77:d1:4f:e3:02:f7:a0:18:69:41:
58:c3:ab:ae:74:4f:a6:26:9c:b3:98:3f:7f:91:a1:
30:3d:14:25:af:3c:ac:0e:52:1a:7b:97:4e:e0:56:
7c:92:9c:a7:4c:f5:67:db:6b:e8:33:8c:eb:b4:24:
00:b1:91:a1:8b:91:20:41:f2:c9:7d:b5:dc:23:f9:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:0D:BB:6F:47:FF:B8:3C:EB:BB:6A:53:DE:76:2D:5E:7E:FE:AC
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/SLINu29H_7g867tqU952LV5-_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
73:61:94:43:8c:70:6f:0a:7a:0b:77:29:d1:13:43:a4:2b:fc:
d3:85:e8:d3:6c:e6:90:ae:6f:b9:67:99:3f:63:92:45:46:5c:
f9:ff:14:07:48:c2:4f:05:d8:09:c8:93:91:ab:53:5f:84:e5:
4a:5c:eb:ba:ce:86:bf:ca:07:d0:52:0d:9c:28:3c:89:b0:b1:
68:cb:e8:70:9f:f7:4b:d4:3b:64:c6:a4:d4:f4:a7:d2:f1:01:
3e:7e:b9:65:b1:c9:3b:1d:58:36:ef:7f:75:ec:9f:d5:d5:05:
da:19:24:44:c8:7e:88:9a:03:98:f0:49:c3:b1:c9:8e:57:e0:
58:c0:4f:33:c3:43:fa:ad:9f:6b:9f:93:95:4b:17:ac:77:9a:
4d:a9:ce:d3:41:3e:d6:4d:2c:0f:9e:a0:6b:ff:ed:18:d2:2c:
57:e6:81:df:c0:39:21:fe:da:b0:b8:ba:18:bb:e9:8d:86:07:
58:76:f6:c5:b4:2c:95:b9:54:1a:c5:2e:91:ce:60:4f:62:96:
87:4d:42:c0:65:32:79:c6:aa:f3:87:d6:3f:a2:a9:d5:2e:db:
9b:c9:3e:01:5c:f9:82:99:10:66:c3:e0:5b:28:fb:ca:44:8f:
79:88:7b:7c:6b:13:e4:a8:05:dd:8f:44:6d:61:df:34:ca:34:
bd:d3:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:57 2025 by rpki-client