Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/S4aE4kkLVpGINtQaCSNFnIqRh-g.roa
File: S4aE4kkLVpGINtQaCSNFnIqRh-g.roa (raw, json)
Hash identifier: HTzmEIgD6aL8EvQjsmp63rmRrND9zn6FD7m02DxpHGI=
Subject key identifier: 4B:86:84:E2:49:0B:56:91:88:36:D4:1A:09:23:45:9C:8A:91:87:E8
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 1D66F78B
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/S4aE4kkLVpGINtQaCSNFnIqRh-g.roa
Signing time: Wed 06 Apr 2022 10:28:04 +0000
ROA not before: Wed 06 Apr 2022 10:28:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13097
IP address blocks: 213.178.192.0/20 maxlen: 24
46.229.80.0/20 maxlen: 24
84.234.100.0/22 maxlen: 24
185.178.12.0/22 maxlen: 24
185.138.36.0/22 maxlen: 24
159.255.156.0/24 maxlen: 24
89.189.32.0/20 maxlen: 24
80.70.116.0/22 maxlen: 24
89.189.56.0/21 maxlen: 24
82.163.32.0/22 maxlen: 24
2a01:7540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493287307 (0x1d66f78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Apr 6 10:28:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b8684e2490b56918836d41a0923459c8a9187e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:6a:56:73:a3:cb:f2:e5:d8:6b:89:8e:08:
7d:c3:6e:2f:bf:be:a5:1b:f4:d4:cf:4b:ef:c8:12:
63:12:6b:a9:a8:9b:be:75:0f:47:22:67:31:f1:ea:
bd:fe:d0:aa:ba:06:c9:c5:ed:94:a5:01:98:52:d2:
bb:30:d0:22:73:d4:53:3a:ab:80:e7:d2:52:3c:55:
8e:19:74:08:86:5e:a7:56:fe:33:6b:59:c7:e9:de:
c6:07:48:9b:13:30:e5:94:64:fd:54:f7:f9:cf:ce:
20:ec:66:71:f1:f9:0c:4a:0b:74:33:05:02:1a:b0:
95:8c:3f:89:f3:d1:cd:be:e7:d9:d4:ec:ae:68:bc:
ed:3c:85:89:f4:48:f3:96:55:2a:6f:67:8d:58:af:
24:77:6a:80:4c:61:74:24:67:9e:01:dc:ed:7a:05:
5d:aa:db:2c:31:59:12:2d:e0:33:40:9e:96:f1:d8:
82:6c:cb:cd:5d:0d:f1:f3:d6:d0:5b:7f:56:c7:cb:
c9:08:df:79:67:5e:e7:55:8e:b7:13:6f:4c:eb:4f:
1b:73:71:21:d3:f0:0a:d5:35:5c:88:4c:65:1c:ab:
8c:80:d0:30:1e:ad:77:01:c5:31:4c:44:53:9d:73:
91:c1:56:f2:b0:e1:b7:c8:6f:66:57:7e:0e:d1:8c:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:84:E2:49:0B:56:91:88:36:D4:1A:09:23:45:9C:8A:91:87:E8
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/S4aE4kkLVpGINtQaCSNFnIqRh-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
159.255.156.0/24
185.138.36.0/22
185.178.12.0/22
213.178.192.0/20
IPv6:
2a01:7540::/32
Signature Algorithm: sha256WithRSAEncryption
30:5a:8f:7f:2e:84:bd:7c:99:ca:c6:10:19:77:23:52:bf:6b:
58:5d:97:46:dd:ec:6b:f0:f6:82:d9:98:89:c2:50:ee:2d:e7:
5b:b4:88:03:82:6d:ae:87:73:0d:57:17:09:99:70:c6:b1:53:
cc:11:27:35:3e:5a:42:39:a0:a7:02:c5:ea:7b:0b:a9:bd:9f:
96:41:96:d8:02:9b:f6:dd:26:f0:d8:40:ff:e4:1c:23:b6:54:
18:d2:fd:8b:ff:49:af:9a:d8:b7:f2:93:08:36:8e:09:b8:02:
e1:82:49:8c:fb:4a:46:ab:fa:07:b0:78:34:dc:f4:04:d5:50:
f5:f5:e2:2d:e1:2d:ac:79:56:9d:14:35:dd:4b:67:3b:0c:13:
6b:6b:73:d3:3d:2f:41:8b:0e:9d:52:95:3d:d1:dc:40:24:9d:
e3:2e:1d:4a:ad:e5:e1:08:30:0e:ca:1c:84:0a:85:25:c0:ff:
85:d5:50:0d:39:e6:71:d8:0e:0a:7b:81:62:86:b9:8a:9d:84:
9f:4a:f5:27:b7:10:23:b5:0e:05:38:e9:12:34:e1:72:00:04:
b7:a6:4b:19:fb:fb:f1:3b:80:e0:b9:66:d7:43:fe:4f:47:a3:
00:7e:61:62:0a:76:db:5a:35:df:a3:ea:89:45:98:38:6e:18:
e9:1e:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:35 2025 by rpki-client