Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KF9aaKHtRha4m_YoUUcO-k_XpBE.roa
File: KF9aaKHtRha4m_YoUUcO-k_XpBE.roa (raw, json)
Hash identifier: ooPLj8M8mBQ5DglErE86ddDnd7fp/c5PnyffyPu9oJ4=
Subject key identifier: 28:5F:5A:68:A1:ED:46:16:B8:9B:F6:28:51:47:0E:FA:4F:D7:A4:11
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5FA55201D2C9FA18A3A1DC5ED058C1ED
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KF9aaKHtRha4m_YoUUcO-k_XpBE.roa
Signing time: Mon 04 Sep 2023 10:03:04 +0000
ROA not before: Mon 04 Sep 2023 10:03:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
178.83.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:a5:52:01:d2:c9:fa:18:a3:a1:dc:5e:d0:58:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 10:03:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=285f5a68a1ed4616b89bf62851470efa4fd7a411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:09:cc:29:9b:6d:98:93:17:e5:5f:ff:35:
6b:b1:ed:d4:ae:32:7f:78:b5:56:6a:cf:c5:8d:6f:
0f:97:d6:fb:63:70:98:9e:fe:75:d4:fc:54:6b:36:
3e:03:44:64:e6:00:de:1d:85:b9:01:50:06:03:3d:
4a:85:56:54:ca:5e:6f:d5:4f:78:2b:0d:2f:bb:d0:
24:43:6a:c3:2f:f9:b1:26:7e:d8:81:65:d9:04:b5:
af:c0:30:53:1d:26:b9:17:06:e4:51:56:d2:eb:73:
78:4e:ed:84:b4:a8:b3:d3:87:64:e8:a1:12:fe:65:
fd:8f:c4:8c:a2:78:fa:eb:00:1d:45:61:ef:e0:44:
2c:f6:a9:58:b4:6e:62:e5:48:9f:05:b3:46:90:9e:
cc:89:7b:ab:fb:20:24:f4:a4:9e:fe:84:80:42:53:
66:18:5d:cc:8b:1b:a1:4f:43:22:fe:87:5f:a7:a2:
e9:82:6c:43:4b:e5:43:66:14:57:b6:2c:14:22:f1:
34:ef:a3:c2:ad:7c:db:88:27:6f:e9:0a:3e:d3:17:
51:df:64:cc:c7:95:a6:db:52:65:ce:c1:0f:14:f3:
46:ac:47:96:e1:e0:70:33:80:25:a4:6d:23:52:36:
f6:c8:35:a5:75:39:3a:53:cc:bf:bf:e2:02:35:26:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:5A:68:A1:ED:46:16:B8:9B:F6:28:51:47:0E:FA:4F:D7:A4:11
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KF9aaKHtRha4m_YoUUcO-k_XpBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
56:41:61:12:1d:65:76:07:23:53:a4:3f:13:07:83:b4:50:ac:
23:69:06:05:dc:0c:44:4c:0c:67:de:ca:8e:da:9a:d9:4c:43:
99:f6:5b:1e:93:2f:2b:5f:c0:35:65:c1:f6:a3:95:6d:52:b4:
54:0d:02:1e:f1:7b:31:e3:e8:93:9e:92:77:62:22:ab:f2:ee:
6b:af:a8:01:20:0e:65:30:e7:56:1d:5a:f8:4f:9a:d4:ea:e1:
93:b6:74:45:d0:1b:97:23:49:81:ed:03:cc:4f:e1:ff:8c:c0:
32:b1:9d:39:98:34:75:1f:f3:f7:66:54:a3:af:ae:36:b5:60:
c1:f1:b2:05:7d:5b:0c:6c:de:05:13:d5:d3:78:bc:33:61:62:
d7:51:e6:6f:7b:b3:9c:96:48:56:ce:6e:ea:37:7e:e5:71:9b:
73:ba:f3:30:cc:dd:67:38:ac:15:20:5c:58:c1:6c:af:05:9b:
aa:49:50:07:b9:05:59:0d:58:c8:40:7c:e5:d4:96:ff:5d:17:
b4:93:a3:71:97:e8:87:2a:0f:19:3d:e2:b5:3e:1c:e2:f1:ef:
58:59:66:42:cc:b6:35:f7:d2:8e:d5:40:1f:57:e5:0a:e7:28:
68:95:d6:9c:fe:0b:ff:09:31:cc:47:69:bb:9d:21:8e:1d:e3:
ec:06:6e:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:08:07 2025 by rpki-client