Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/Rl_mqT2BkfNtHIy-4KOdM9X0XeA.roa
File: Rl_mqT2BkfNtHIy-4KOdM9X0XeA.roa (raw, json)
Hash identifier: PaubaFCVeUJINnXK+CnkWB3hR2+W+s9aOFN1mYiEn1s=
Subject key identifier: 46:5F:E6:A9:3D:81:91:F3:6D:1C:8C:BE:E0:A3:9D:33:D5:F4:5D:E0
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 0185A5B50D25ECCB2A2B183B94FF276BF730
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/Rl_mqT2BkfNtHIy-4KOdM9X0XeA.roa
Signing time: Thu 12 Jan 2023 11:19:44 +0000
ROA not before: Thu 12 Jan 2023 11:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35467
IP address blocks: 145.87.224.0/19 maxlen: 20
83.136.192.0/21 maxlen: 22
93.95.144.0/21 maxlen: 22
81.92.176.0/20 maxlen: 21
37.0.16.0/21 maxlen: 22
217.27.224.0/21 maxlen: 22
217.27.232.0/21 maxlen: 23
212.52.224.0/19 maxlen: 22
185.55.108.0/22 maxlen: 23
91.106.224.0/21 maxlen: 23
31.186.160.0/21 maxlen: 22
185.250.160.0/22 maxlen: 24
185.35.32.0/22 maxlen: 23
2a02:5b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:b5:0d:25:ec:cb:2a:2b:18:3b:94:ff:27:6b:f7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jan 12 11:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=465fe6a93d8191f36d1c8cbee0a39d33d5f45de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:13:f7:7a:af:39:d9:ff:8c:87:5d:46:fc:
17:46:e8:b8:16:07:52:0f:8a:c1:88:c7:22:78:4a:
8e:50:b2:cf:21:74:b7:d9:49:d4:71:0d:d8:f9:1f:
a9:ac:33:55:77:9f:6e:92:04:50:0c:22:d3:15:85:
8e:48:62:61:bc:e7:d8:90:7f:8c:a6:5a:c2:cf:f4:
45:3d:10:4a:53:77:94:fd:87:14:a1:e5:fd:57:b7:
54:63:83:a9:c5:74:1f:cc:3c:ca:c2:13:cc:a3:0d:
23:ff:62:71:91:ac:45:ff:de:ea:e9:20:66:97:28:
8a:99:58:95:19:2b:69:70:34:eb:51:41:18:cc:2c:
9c:10:eb:d0:cb:45:5a:0c:ce:a0:de:a6:2c:a9:7b:
a5:37:e1:ee:9c:82:3d:15:3f:b6:b8:f7:b5:d0:5f:
48:a5:e9:0a:86:e8:4c:8d:fc:55:6c:66:34:54:f5:
fd:04:37:6b:c8:e2:69:eb:67:bd:4c:e4:79:08:5d:
fe:c2:55:79:63:45:0c:d5:3b:fb:bc:42:c5:e3:53:
25:d8:6f:2c:68:2c:4f:b6:56:5f:57:ad:3f:ed:97:
25:9f:e0:86:d4:89:85:56:85:25:b8:20:7b:f2:b6:
43:b2:66:b3:90:54:34:b9:e3:ae:67:8d:ae:ee:e9:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:E6:A9:3D:81:91:F3:6D:1C:8C:BE:E0:A3:9D:33:D5:F4:5D:E0
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/Rl_mqT2BkfNtHIy-4KOdM9X0XeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.160.0/21
37.0.16.0/21
81.92.176.0/20
83.136.192.0/21
91.106.224.0/21
93.95.144.0/21
145.87.224.0/19
185.35.32.0/22
185.55.108.0/22
185.250.160.0/22
212.52.224.0/19
217.27.224.0/20
IPv6:
2a02:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
af:6a:4b:a2:68:5a:70:44:56:95:dd:01:bb:a6:a5:3d:32:4b:
41:b0:7f:ff:fb:62:8b:a3:fb:6e:1d:5f:4e:29:d5:96:19:85:
bf:6b:43:ac:60:c5:df:62:7d:52:57:2e:ee:b9:4c:b0:57:69:
b5:53:1b:11:39:8c:95:44:66:54:5a:ce:f5:f6:62:dd:3c:42:
4d:96:e6:ef:3a:5b:13:32:98:de:f7:25:d4:2c:0e:90:10:f7:
26:41:8d:3b:6a:ac:fd:19:82:c6:ea:e8:b3:cf:c1:b5:32:24:
15:2e:f6:6b:df:21:ae:0b:94:8d:7b:bb:c3:41:07:44:70:c9:
95:0f:6e:d6:82:eb:8a:ab:ef:c0:c7:7d:90:d5:d4:2e:93:af:
d0:9c:43:78:bb:77:e5:50:34:df:1b:77:dc:45:a2:dc:ae:92:
90:9d:a7:55:b0:c9:d7:0a:20:16:91:1c:77:02:0d:f3:6c:53:
f4:e1:df:e2:22:5a:83:4c:9e:c8:94:27:84:51:d8:4a:97:33:
71:d6:75:5e:ee:6e:64:a9:02:52:d6:61:7c:05:58:47:a1:c4:
3a:ff:d0:3c:ec:0c:88:26:55:d5:c4:99:4c:94:38:38:bb:78:
82:91:7b:99:e8:ad:46:03:4a:d2:b3:0c:e5:b3:b7:c9:89:f8:
37:c2:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:32 2025 by rpki-client