Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/8hQcJsI4BWpGMCCN9kpyzuDhFec.roa
File: 8hQcJsI4BWpGMCCN9kpyzuDhFec.roa (raw, json)
Hash identifier: fz9sGOI2oXuHuMqYp+k64MzW1KZRXRgXhDjBEuwiB+w=
Subject key identifier: F2:14:1C:26:C2:38:05:6A:46:30:20:8D:F6:4A:72:CE:E0:E1:15:E7
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 018283630899429B2840227E92AD185A1373
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/8hQcJsI4BWpGMCCN9kpyzuDhFec.roa
Signing time: Tue 09 Aug 2022 16:14:41 +0000
ROA not before: Tue 09 Aug 2022 16:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49033
IP address blocks: 185.232.160.0/22 maxlen: 24
185.171.48.0/22 maxlen: 24
185.91.92.0/22 maxlen: 24
185.166.91.0/24 maxlen: 24
185.166.88.0/24 maxlen: 24
185.166.89.0/24 maxlen: 24
185.166.90.0/23 maxlen: 24
185.166.90.0/24 maxlen: 24
94.46.216.0/22 maxlen: 24
94.46.218.0/23 maxlen: 23
185.238.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:63:08:99:42:9b:28:40:22:7e:92:ad:18:5a:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 9 16:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2141c26c238056a4630208df64a72cee0e115e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:4c:c0:76:dd:cb:b3:1d:ca:34:94:ce:ca:
b7:ea:96:91:57:5c:59:f3:7e:7d:5e:86:06:44:da:
d3:e7:1f:b4:27:84:7b:10:46:6e:78:ff:7d:af:3f:
cc:13:a0:47:db:78:bd:e0:b2:9e:aa:f4:b0:af:63:
24:2b:b4:2a:85:5e:89:e0:ee:6e:f0:c8:6e:3f:32:
3a:a4:c7:ff:ac:0f:41:04:30:e2:dc:ea:98:09:78:
a3:bf:96:4c:90:5d:93:83:9b:76:c1:37:bf:73:f6:
b6:c7:b6:cb:67:82:01:59:d5:b1:ca:cf:96:db:ad:
f0:42:80:df:3a:eb:d2:ae:bd:f2:a0:87:f9:0a:b3:
2f:d5:a0:c5:00:ec:db:65:af:97:78:1e:bb:2c:38:
e3:ac:b7:a7:8d:41:a0:97:36:d2:c6:bd:85:17:f5:
99:69:f8:3e:06:88:04:84:a2:47:1c:1b:2f:de:b9:
56:f6:06:09:8d:7a:42:ba:c5:89:f7:50:48:89:cf:
9b:ed:4b:6a:71:07:71:82:3a:53:66:15:a3:3a:2d:
76:9a:35:03:64:2f:e6:a8:8d:41:50:f2:be:f1:ef:
a2:1c:97:d5:74:50:94:ba:b7:f5:4b:cc:c6:6b:c0:
9d:9d:fb:b1:58:ac:f5:bf:85:94:4c:f7:cb:2a:e9:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:1C:26:C2:38:05:6A:46:30:20:8D:F6:4A:72:CE:E0:E1:15:E7
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/8hQcJsI4BWpGMCCN9kpyzuDhFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.216.0/22
185.91.92.0/22
185.166.88.0/22
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9a:1b:06:f4:af:77:2b:24:e7:2b:72:ae:85:bb:8a:cd:f3:
24:9a:b8:75:e7:f4:87:88:6c:e5:b1:b7:b0:e5:83:1d:ee:4f:
c9:6b:d8:6e:6e:c1:a0:bf:eb:73:0c:be:74:c4:0b:b3:44:3a:
96:09:5a:31:cd:bf:f2:e9:df:31:7e:5a:fd:5f:a3:d9:aa:fd:
9a:7a:d7:0b:49:c1:e9:f1:ac:d9:41:8f:d9:47:1f:f6:34:8b:
56:a4:fa:11:66:44:0a:d4:5a:42:84:08:94:44:87:3f:c9:73:
a3:ec:71:d2:e1:ad:59:03:b7:78:a2:58:ca:61:2e:1e:fa:38:
e5:be:b7:1f:9b:ea:19:87:6c:71:ee:c9:a9:2c:66:0a:2b:86:
33:e5:12:83:49:07:62:1e:da:00:6a:9e:5f:60:82:42:49:ae:
1c:39:31:e2:30:cd:79:08:01:15:3c:ff:e3:2d:f1:24:b5:84:
e6:69:f1:b1:61:30:ba:ee:c3:d0:6b:55:f4:b6:fb:42:e9:72:
82:6d:98:26:42:8d:78:e3:13:f0:92:01:c0:28:28:b2:7b:2b:
c1:56:4c:4d:bb:4e:02:91:63:ef:5d:93:c3:d6:73:0d:61:9d:
c5:e2:8a:90:b5:e6:03:21:bd:ef:6d:ab:76:99:c6:21:48:42:
4e:82:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:17 2025 by rpki-client