Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/k20wPhdUOaTg_gDuMBwv33EXrq0.roa
File: k20wPhdUOaTg_gDuMBwv33EXrq0.roa (raw, json)
Hash identifier: IW5/RXxoxnpAuD4Rfd+R/hq1Ho4XHEHAEZlGmr4noVU=
Subject key identifier: 93:6D:30:3E:17:54:39:A4:E0:FE:00:EE:30:1C:2F:DF:71:17:AE:AD
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 018A6F21661D74D1E46A6BC92AADDAD8A09C
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/k20wPhdUOaTg_gDuMBwv33EXrq0.roa
Signing time: Thu 07 Sep 2023 10:12:54 +0000
ROA not before: Thu 07 Sep 2023 10:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20507
IP address blocks: 85.223.101.0/24 maxlen: 24
82.215.0.0/18 maxlen: 24
82.215.17.0/24 maxlen: 24
82.215.19.0/24 maxlen: 24
85.223.126.0/24 maxlen: 24
85.223.0.0/17 maxlen: 24
217.149.192.0/24 maxlen: 24
217.149.192.0/19 maxlen: 24
217.149.202.0/24 maxlen: 24
217.149.201.0/24 maxlen: 24
217.149.203.0/24 maxlen: 24
217.149.219.0/24 maxlen: 24
217.149.217.0/24 maxlen: 24
217.149.218.0/24 maxlen: 24
92.254.0.0/17 maxlen: 24
2a01:3a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:21:66:1d:74:d1:e4:6a:6b:c9:2a:ad:da:d8:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Sep 7 10:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=936d303e175439a4e0fe00ee301c2fdf7117aead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:e6:4e:41:20:47:30:e8:7d:ca:85:4c:6c:
e7:e6:85:0a:65:4d:06:b0:68:17:c2:d1:c8:88:56:
68:f9:7d:40:90:4f:67:42:17:8b:ae:34:a3:4d:01:
5d:9b:47:5e:45:6e:30:0a:9c:4e:b9:b1:84:44:8c:
4b:4e:2b:7d:f7:37:22:38:35:0d:2b:d5:c7:d9:52:
0f:07:4b:b1:a0:59:a4:ba:f5:d3:2a:81:21:ef:46:
8b:10:07:ec:af:1e:d5:d9:d9:da:ec:b4:43:bf:9f:
65:5c:26:86:b9:39:a4:fd:1d:f4:c0:90:f7:e9:29:
ae:ef:de:db:c7:53:ae:fa:c3:7c:91:37:3f:95:bb:
f1:97:f9:27:f7:ac:5e:6a:1e:27:14:d1:c5:7a:1c:
5f:f2:21:ac:b2:b3:b2:0d:f9:cb:ff:f4:ec:a0:ac:
0b:3c:94:95:61:7a:06:6d:76:cd:73:8c:0c:41:0a:
f2:56:e5:14:b7:d7:b3:59:8e:33:3d:96:38:f6:29:
3f:dd:3b:7b:59:5f:89:af:5e:b5:c0:10:29:b5:ba:
72:67:a6:32:fa:94:80:1c:86:e8:b9:33:7e:80:8a:
92:01:a9:96:5b:42:08:1b:b8:28:84:f0:84:f8:34:
7f:a9:85:ae:84:ea:97:36:23:61:4e:d0:61:b7:b5:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:30:3E:17:54:39:A4:E0:FE:00:EE:30:1C:2F:DF:71:17:AE:AD
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/k20wPhdUOaTg_gDuMBwv33EXrq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.0.0/18
85.223.0.0/17
92.254.0.0/17
217.149.192.0/19
IPv6:
2a01:3a8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:0e:14:15:c1:b9:f7:5c:cb:c2:ba:49:0c:69:0b:0c:3c:6c:
51:0f:a4:14:d4:6a:02:50:6f:63:1a:2d:85:e1:6a:74:77:e5:
6c:c9:8f:cc:35:91:7e:cf:f6:cb:42:e7:77:01:d7:4b:06:0e:
4d:71:c4:01:9f:26:d6:4f:90:c7:b1:d8:2a:2c:57:73:7c:a0:
bc:5e:94:5e:1b:ec:0b:a8:cd:6a:74:a4:d6:12:8d:50:d4:82:
ba:31:49:d2:2b:82:47:0e:1b:bc:66:e4:38:7b:96:73:c4:20:
05:a4:70:fa:f8:02:ca:71:90:fa:94:ca:61:7a:c5:f1:28:62:
62:d3:03:d6:d7:1e:27:67:3f:cc:6a:92:83:87:c1:92:05:b7:
ce:c6:7f:69:8f:ef:1f:4d:b6:bc:5a:9b:bd:70:67:35:fc:ff:
a9:b5:0d:0e:7e:26:ef:df:a6:5a:3e:40:8e:30:f2:97:18:cf:
a1:f3:23:72:7e:ab:01:cf:cc:db:77:42:7d:eb:56:29:73:e1:
22:5b:a7:ee:a6:53:2f:0e:84:1f:3a:fe:9f:89:98:bc:57:71:
9b:9e:b5:20:37:76:11:70:ae:f2:1e:90:56:b7:96:3a:26:e5:
92:05:46:68:b5:f4:58:1a:ba:05:a3:1f:0a:c3:da:14:b7:17:
b1:4e:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:46 2025 by rpki-client