Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aZwmtkJ_yy07M66Z9E2uIoIkEUA.roa
File: aZwmtkJ_yy07M66Z9E2uIoIkEUA.roa (raw, json)
Hash identifier: LzCC37+Amn2yOcUOTark2sTNccqiiAH1/3iPy9jKaRY=
Subject key identifier: 69:9C:26:B6:42:7F:CB:2D:3B:33:AE:99:F4:4D:AE:22:82:24:11:40
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B2928672E2DE6F5BD0EB013FD1E2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aZwmtkJ_yy07M66Z9E2uIoIkEUA.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206487
IP address blocks: 89.140.16.0/23 maxlen: 24
5.40.106.0/24 maxlen: 24
62.82.158.0/24 maxlen: 24
5.40.138.0/24 maxlen: 24
5.40.149.0/24 maxlen: 24
5.40.156.0/24 maxlen: 24
5.40.80.0/23 maxlen: 24
5.40.85.0/24 maxlen: 24
62.174.66.0/24 maxlen: 24
62.175.252.0/24 maxlen: 24
62.175.253.0/24 maxlen: 24
5.40.18.0/24 maxlen: 24
62.82.50.0/24 maxlen: 24
5.40.244.0/24 maxlen: 24
5.40.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b2:92:86:72:e2:de:6f:5b:d0:eb:01:3f:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=699c26b6427fcb2d3b33ae99f44dae2282241140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:59:ac:39:a0:cc:89:b6:b6:c1:b9:51:09:
48:a6:a6:4a:e8:1e:75:9e:44:89:ab:e5:9b:b8:a5:
2c:03:be:e4:60:24:e1:62:5b:b0:90:1c:8c:01:6b:
79:f6:d5:91:ea:41:a1:82:7f:2e:9e:48:13:b2:ef:
07:09:e2:ed:6d:61:c3:a2:bf:9a:8c:3f:6d:e3:a4:
1b:23:79:f6:15:eb:fc:7f:df:c8:dd:6a:0a:cb:d6:
09:94:4c:c3:34:c4:47:7d:7e:24:91:c9:5f:e3:b0:
02:c7:8d:0a:e0:82:07:85:4f:21:ce:19:f0:b2:b1:
a0:19:ea:fe:25:6d:1a:c7:03:62:a3:5a:fa:88:a6:
e2:cb:3a:27:ab:26:ca:02:a8:b0:96:01:e1:42:76:
a7:20:c9:3d:b8:ba:07:3a:30:54:92:2f:54:18:14:
0a:93:50:50:79:21:66:e1:a7:5f:4f:38:c8:0c:6f:
17:a5:80:0f:9c:84:14:97:c3:00:1b:81:86:1b:97:
88:15:3d:a7:f5:6e:57:93:6e:01:2e:f8:21:24:ae:
d9:fd:d9:39:b5:68:fb:0c:e4:48:57:73:23:b1:10:
e2:56:fe:9d:86:a6:8a:42:ea:8b:65:31:37:d1:1a:
da:67:47:86:c3:bc:e9:87:6b:12:27:e1:bb:d0:8c:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:26:B6:42:7F:CB:2D:3B:33:AE:99:F4:4D:AE:22:82:24:11:40
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aZwmtkJ_yy07M66Z9E2uIoIkEUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.18.0/24
5.40.41.0/24
5.40.80.0/23
5.40.85.0/24
5.40.106.0/24
5.40.138.0/24
5.40.149.0/24
5.40.156.0/24
5.40.244.0/24
62.82.50.0/24
62.82.158.0/24
62.174.66.0/24
62.175.252.0/23
89.140.16.0/23
Signature Algorithm: sha256WithRSAEncryption
40:81:a1:ff:bd:42:1e:5a:85:e0:0c:a2:5e:8c:d4:f0:d5:93:
3d:db:51:a7:1e:fa:a4:f3:66:40:79:d2:d8:80:bc:ca:26:e0:
00:23:4a:ef:06:f8:14:83:78:b5:f3:32:32:29:d4:6f:99:98:
dd:e5:5d:4c:db:dd:f1:c6:18:99:f1:fd:cd:c9:57:d2:50:e1:
e1:24:ed:34:0b:d7:92:e6:ec:64:4b:14:e3:6f:a6:9e:f9:5e:
7e:d5:26:15:32:c8:d3:7b:21:ed:11:69:83:f5:c7:6e:f4:7b:
91:54:88:3b:d5:8d:a0:76:db:6c:f2:8c:6a:6c:51:3e:53:8f:
0e:cd:ec:ce:96:48:a1:b2:3d:86:57:62:d9:94:3f:9e:c3:a6:
ab:ac:19:c4:bc:b8:2e:3a:a6:a6:bb:d5:ad:27:d1:bd:b3:f3:
14:df:2c:26:0f:91:04:f8:7a:54:bc:2a:1a:e8:1a:95:48:c2:
8e:82:c9:cb:0e:a2:12:6d:2f:4a:5c:4c:05:21:75:94:ab:07:
50:86:d9:d0:5a:83:9a:30:d2:22:28:e1:30:44:d1:8b:fe:a6:
8c:e1:e6:2a:63:bf:13:85:80:b8:42:f3:f4:37:58:bc:56:19:
dd:c5:7e:7a:70:36:73:4f:9d:17:96:63:19:e5:ab:59:69:29:
75:a9:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:21 2025 by rpki-client