Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/jDIrLaczbX9GKmBR-FtxqbDayxo.roa
File: jDIrLaczbX9GKmBR-FtxqbDayxo.roa (raw, json)
Hash identifier: h6qmlcNmlb1HBLLoZAlMtmQ1h1vIYodWVpM3KgDO5zM=
Subject key identifier: 8C:32:2B:2D:A7:33:6D:7F:46:2A:60:51:F8:5B:71:A9:B0:DA:CB:1A
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 0184BD62F95CDCAE0E9738E3F85798AB7894
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/jDIrLaczbX9GKmBR-FtxqbDayxo.roa
Signing time: Mon 28 Nov 2022 08:38:10 +0000
ROA not before: Mon 28 Nov 2022 08:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47748
IP address blocks: 178.211.146.0/24 maxlen: 24
87.121.120.0/24 maxlen: 24
94.156.9.0/24 maxlen: 24
94.156.13.0/24 maxlen: 24
31.13.215.0/24 maxlen: 24
94.156.46.0/24 maxlen: 24
94.156.47.0/24 maxlen: 24
93.123.21.0/24 maxlen: 24
37.60.137.0/24 maxlen: 24
87.120.90.0/24 maxlen: 24
31.13.228.0/24 maxlen: 24
31.13.229.0/24 maxlen: 24
93.123.103.0/24 maxlen: 24
87.120.9.0/24 maxlen: 24
87.121.4.0/24 maxlen: 24
87.121.5.0/24 maxlen: 24
2a05:140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:62:f9:5c:dc:ae:0e:97:38:e3:f8:57:98:ab:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Nov 28 08:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c322b2da7336d7f462a6051f85b71a9b0dacb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:a8:54:ab:99:1e:c1:34:aa:5d:e2:f9:ac:
7d:fd:57:ee:8d:0b:de:12:bf:1c:ca:00:cd:d9:af:
30:71:42:6e:ca:9d:a2:11:10:b1:e5:55:7f:8f:04:
18:c9:d9:ba:0c:b1:12:69:0d:6a:45:ec:70:03:65:
dc:6d:aa:35:5e:97:02:9c:dd:ea:8b:6a:94:fc:02:
c4:e0:64:96:30:54:bd:5d:b5:45:49:0f:96:aa:f7:
24:7e:96:4b:00:85:98:f7:ec:20:6e:db:e4:5e:b4:
ce:a1:3c:72:02:d3:99:df:ae:51:73:df:e4:5b:27:
7a:dc:03:8b:9b:d4:cf:b9:58:22:26:1e:6a:2a:9a:
f6:0c:ab:28:c5:0f:e6:f2:ef:3d:be:fa:05:c8:d9:
38:5d:b7:46:8f:a1:f1:d2:f4:3e:59:6d:dc:0f:ea:
13:78:a0:13:de:ed:a0:46:a6:4f:dd:63:8c:b4:cb:
23:62:62:6d:d4:6d:2e:57:10:63:eb:ec:ea:f9:f0:
1d:f0:b0:ae:4a:62:e2:fa:ec:1c:41:d3:d4:16:6d:
b5:e9:9b:7e:0f:c5:c2:b6:e5:9e:04:70:a9:c3:e9:
7b:0d:fe:b8:d2:43:bf:98:ad:ef:33:12:5d:a7:d4:
39:16:b0:3c:3d:5a:fa:9f:5f:a5:3f:86:21:b5:c9:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:2B:2D:A7:33:6D:7F:46:2A:60:51:F8:5B:71:A9:B0:DA:CB:1A
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/jDIrLaczbX9GKmBR-FtxqbDayxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.215.0/24
31.13.228.0/23
37.60.137.0/24
87.120.9.0/24
87.120.90.0/24
87.121.4.0/23
87.121.120.0/24
93.123.21.0/24
93.123.103.0/24
94.156.9.0/24
94.156.13.0/24
94.156.46.0/23
178.211.146.0/24
IPv6:
2a05:140::/29
Signature Algorithm: sha256WithRSAEncryption
54:4f:ee:36:e7:19:dc:bf:13:7f:b3:cd:7d:93:a3:9c:89:c2:
ba:42:4a:15:67:a0:c9:9d:11:cb:39:62:8d:12:1f:0a:eb:17:
e7:ce:9f:1a:47:7a:86:77:8b:01:a3:ca:0f:dc:a8:15:bf:a9:
04:37:04:3f:17:d5:fb:03:e2:80:cc:d5:c6:9a:84:bf:f9:a6:
10:44:80:5c:52:b7:d5:ce:7c:f7:47:cc:69:fd:7d:f0:8e:60:
f9:61:99:11:da:8c:bc:59:75:c1:ae:bf:d1:03:97:dc:b4:18:
dd:c3:e1:71:d0:4e:39:54:f4:07:6a:59:aa:b0:3c:64:8d:5d:
4d:98:d2:0a:9a:d8:ee:18:9d:81:08:9b:42:a4:a3:b1:2f:e0:
a5:50:09:73:ff:80:c7:aa:be:bf:3b:a6:82:34:59:21:02:24:
0b:f6:a4:7a:bb:84:21:02:3a:e1:ed:e9:12:61:a9:65:19:01:
1f:03:2a:2e:9f:fc:a6:dc:a9:5b:ab:9d:b6:d5:ab:e8:4a:d4:
d2:16:38:78:0d:a5:36:16:15:c1:36:70:91:3e:20:d4:e4:9d:
a0:7b:62:67:16:f5:aa:70:21:fe:cc:bc:66:17:15:76:bc:45:
24:45:7a:1e:d5:08:d1:af:0f:6e:98:dc:70:5e:69:c4:d9:27:
17:08:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:11 2025 by rpki-client