Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/J2Lx7mPQlGvgnGPPVLD93RvW6rc.roa
File: J2Lx7mPQlGvgnGPPVLD93RvW6rc.roa (raw, json)
Hash identifier: pcyN6Lg2O/wkU6fdPAF3EnfvPC0LcLdv06HnOy9fH8Y=
Subject key identifier: 27:62:F1:EE:63:D0:94:6B:E0:9C:63:CF:54:B0:FD:DD:1B:D6:EA:B7
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 01857315D02D36966540604D71C7DC535B7A
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/J2Lx7mPQlGvgnGPPVLD93RvW6rc.roa
Signing time: Mon 02 Jan 2023 15:24:47 +0000
ROA not before: Mon 02 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15744
IP address blocks: 213.227.64.0/20 maxlen: 20
212.106.128.0/19 maxlen: 19
83.230.80.0/20 maxlen: 20
212.106.160.0/20 maxlen: 20
83.230.0.0/18 maxlen: 18
195.82.160.0/19 maxlen: 19
2a01:1df::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d0:2d:36:96:65:40:60:4d:71:c7:dc:53:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 2 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2762f1ee63d0946be09c63cf54b0fddd1bd6eab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:7e:24:2b:4d:5c:c6:cf:90:42:d3:18:74:
be:2b:58:a8:22:9a:82:9a:7b:94:25:de:33:83:d8:
2c:42:68:a3:6e:77:86:4f:04:e1:39:de:fa:ff:03:
d3:d8:44:aa:ce:44:86:d0:d3:97:ea:41:de:68:9c:
72:e5:97:70:20:49:5f:ac:ba:fe:58:25:84:c7:3f:
5c:54:4f:46:00:09:3a:58:0e:d8:4b:1e:fd:9c:9f:
10:af:92:5f:0a:24:3c:1f:6b:0a:9f:c8:a9:c0:ce:
89:4c:86:46:75:d8:ab:1e:70:1b:64:12:47:3c:a8:
a6:76:44:21:d9:5d:d4:43:dd:75:75:1d:0e:27:9e:
17:e4:f1:41:a0:bf:5d:e5:ef:c0:bc:61:0b:c3:86:
10:5d:aa:b7:14:f4:a1:08:c5:98:01:bd:ca:bc:fc:
06:db:a3:c6:90:5f:40:76:4b:9a:17:87:6a:77:5e:
94:a8:36:e0:f4:9c:3c:34:ff:9c:7c:89:9d:ab:77:
48:3f:03:a0:83:41:7a:ac:0c:93:10:c1:ee:80:b1:
2f:92:52:72:7d:0b:e5:0b:95:33:83:87:9c:4b:2a:
fe:57:04:80:52:80:30:2c:59:01:4f:43:49:31:98:
13:11:f4:a7:df:04:a1:0f:cc:3b:74:72:4a:06:9e:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:F1:EE:63:D0:94:6B:E0:9C:63:CF:54:B0:FD:DD:1B:D6:EA:B7
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/J2Lx7mPQlGvgnGPPVLD93RvW6rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.0.0/18
83.230.80.0/20
195.82.160.0/19
212.106.128.0-212.106.175.255
213.227.64.0/20
IPv6:
2a01:1df::/32
Signature Algorithm: sha256WithRSAEncryption
4d:a0:c7:ed:aa:28:e0:80:3c:42:70:04:38:ee:c8:02:8b:27:
93:8b:7b:63:b1:2f:96:ec:5f:d2:07:cc:7f:24:be:97:c4:d5:
ac:4e:6d:18:69:3d:bd:65:a3:25:c1:d8:08:95:e0:dc:a6:56:
29:0a:78:3a:36:07:f3:8c:78:26:b7:3b:c0:74:0a:39:fc:7d:
72:88:65:2b:20:2a:7e:b3:7f:18:d4:cf:3c:af:da:9a:16:56:
24:86:d7:cc:19:e4:ca:dd:d5:d9:6e:bc:ef:ff:f4:83:a3:67:
93:c7:de:08:de:2c:51:47:e4:6a:66:1a:16:6e:a8:9e:51:9d:
e1:33:d6:d2:d8:6e:b2:fa:28:5d:bc:35:bc:87:cc:23:78:e4:
dc:f9:29:b2:bb:bd:ba:1a:83:ee:1d:2c:28:f7:1e:01:11:43:
b2:1c:24:84:4b:90:58:92:bf:c2:34:80:2c:44:75:b6:80:f2:
37:c1:b8:79:97:03:96:08:ca:ba:91:0a:a2:28:4d:5e:87:4d:
60:25:63:0a:d9:ce:bf:6f:ce:ec:d5:f4:ea:be:8a:d7:d1:74:
4f:1d:bb:ca:30:a7:9d:5e:e5:89:4f:3e:8e:2b:08:83:32:41:
9d:7b:fd:fc:4e:b3:84:e5:34:5a:98:3c:2e:3e:a1:90:ed:f2:
92:d9:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:06:51 2025 by rpki-client