Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fTbP85Tl-7SQlrgbuBcoR4cYc0s.roa
File: fTbP85Tl-7SQlrgbuBcoR4cYc0s.roa (raw, json)
Hash identifier: +OedWCo/zpYN3B47RKeO4P8VkkAZ1iWPElfAOX1giIU=
Subject key identifier: 7D:36:CF:F3:94:E5:FB:B4:90:96:B8:1B:B8:17:28:47:87:18:73:4B
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 1362761B
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fTbP85Tl-7SQlrgbuBcoR4cYc0s.roa
Signing time: Sat 01 Jan 2022 05:58:19 +0000
ROA not before: Sat 01 Jan 2022 05:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13237
IP address blocks: 185.250.87.0/24 maxlen: 24
82.98.200.0/21 maxlen: 24
62.93.192.0/18 maxlen: 24
82.98.208.0/20 maxlen: 24
83.124.0.0/14 maxlen: 24
82.98.224.0/21 maxlen: 24
62.80.96.0/19 maxlen: 24
62.4.64.0/22 maxlen: 24
62.4.64.0/19 maxlen: 24
83.137.80.0/21 maxlen: 21
84.207.0.0/16 maxlen: 24
83.133.0.0/16 maxlen: 24
217.112.144.0/21 maxlen: 24
217.112.144.0/20 maxlen: 24
84.207.205.0/24 maxlen: 24
217.71.96.0/20 maxlen: 24
83.125.71.0/24 maxlen: 24
84.207.210.0/24 maxlen: 24
81.209.128.0/17 maxlen: 24
84.207.225.0/24 maxlen: 24
84.207.226.0/24 maxlen: 24
84.207.228.0/24 maxlen: 24
80.86.160.0/19 maxlen: 24
84.207.229.0/24 maxlen: 24
84.207.231.0/24 maxlen: 24
84.207.240.0/24 maxlen: 24
82.197.128.0/19 maxlen: 24
83.125.45.0/24 maxlen: 24
2001:4d40::/32 maxlen: 48
2001:1618::/29 maxlen: 48
2001:7f0::/32 maxlen: 48
2001:7f0:4020::/48 maxlen: 48
2a00:cc0::/29 maxlen: 48
2001:4d40::/29 maxlen: 48
2a00:fa0::/32 maxlen: 48
2a00:cc0::/32 maxlen: 48
2001:7f0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325219867 (0x1362761b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d36cff394e5fbb49096b81bb81728478718734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:6a:31:b3:e5:b1:bb:e9:e7:62:d1:f8:d1:
0a:12:43:5b:d6:30:17:fa:e0:5f:8b:a1:ba:0f:af:
26:37:dc:ee:97:11:56:77:2b:2b:84:e9:98:6b:30:
b4:ff:54:95:f1:bb:ad:a5:9e:ed:77:21:e0:17:17:
c0:87:a1:1c:93:e1:46:bf:bb:f5:2b:c3:90:23:57:
33:e6:c2:08:22:4d:03:9c:04:c3:6b:c2:3b:da:84:
7d:c0:82:27:32:ad:99:e0:07:5a:97:c5:fd:aa:16:
01:61:3a:76:bf:f3:fa:f8:58:99:09:d4:05:97:50:
49:81:98:20:03:b4:08:31:27:06:a0:96:cb:a9:bd:
49:d2:89:ff:fa:5b:64:99:8b:8e:a7:6e:a2:1a:b0:
00:cd:6b:97:db:48:c2:f2:3a:85:dd:92:38:30:9f:
b3:65:dc:a6:ee:5d:d5:cf:1c:f0:15:59:4e:96:8b:
4c:dd:4b:30:00:0b:9b:fe:14:7b:52:a5:08:70:9f:
70:4b:d8:09:7c:66:eb:8e:62:2a:78:8d:a1:f2:69:
3d:eb:56:79:77:7a:97:42:37:52:3e:ef:c4:5f:3b:
53:d9:09:c0:28:bc:d0:a8:73:37:d9:a0:2d:80:ce:
9f:d3:5f:68:f7:c5:3e:0c:01:a6:59:d3:f7:fb:b4:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:CF:F3:94:E5:FB:B4:90:96:B8:1B:B8:17:28:47:87:18:73:4B
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fTbP85Tl-7SQlrgbuBcoR4cYc0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.64.0/19
62.80.96.0/19
62.93.192.0/18
80.86.160.0/19
81.209.128.0/17
82.98.200.0-82.98.231.255
82.197.128.0/19
83.124.0.0/14
83.133.0.0/16
83.137.80.0/21
84.207.0.0/16
185.250.87.0/24
217.71.96.0/20
217.112.144.0/20
IPv6:
2001:7f0::/29
2001:1618::/29
2001:4d40::/29
2a00:cc0::/29
2a00:fa0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:b6:80:19:bf:b0:2e:b5:c2:ec:ee:86:0e:ca:bf:fe:6a:00:
73:09:6f:ba:07:ce:cb:d1:b9:30:03:8f:65:2a:df:3f:09:d4:
9f:d1:a3:5a:3c:b5:07:58:81:13:45:9e:77:16:6f:97:b0:87:
85:22:07:4f:fe:19:8c:d5:39:d7:71:02:d6:e0:05:69:7a:b8:
7b:b1:12:df:19:f1:3a:c5:11:94:35:9d:12:6b:4f:68:b8:3c:
63:2e:5e:3a:06:f0:45:c5:69:df:65:59:44:2c:7e:2e:1d:5d:
fb:1f:d1:58:3f:ef:24:c1:48:56:83:02:af:6e:06:a5:28:0d:
b4:49:98:b4:ce:ec:79:f3:af:51:c3:a6:73:31:b9:cf:18:d6:
1c:b1:9b:1f:f6:c3:1d:b5:07:15:b3:ae:04:05:a2:97:40:00:
13:cc:28:bc:1c:39:c4:d4:60:14:1a:80:16:34:bb:3f:71:fe:
ec:f7:02:0e:55:75:28:51:23:64:57:a4:2f:45:03:94:a6:f8:
40:bf:95:5d:80:42:a7:4e:dc:e4:fe:2e:e5:70:c2:b1:55:9c:
7e:71:e9:c0:24:c9:20:4b:f1:0e:35:ac:47:36:1d:ab:75:ff:
2d:15:58:8b:e6:19:8c:75:2d:5c:39:a7:96:c2:d1:ff:81:8b:
84:f1:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:35:55 2025 by rpki-client