Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/bdTXqiVBDGg12TuwPzI7qiHg8l0.roa
File: bdTXqiVBDGg12TuwPzI7qiHg8l0.roa (raw, json)
Hash identifier: hwwiQNSkAZNJ86sWLxY8jGC6ixOM/t2UIB50ShlUy4M=
Subject key identifier: 6D:D4:D7:AA:25:41:0C:68:35:D9:3B:B0:3F:32:3B:AA:21:E0:F2:5D
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 02502E
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/bdTXqiVBDGg12TuwPzI7qiHg8l0.roa
Signing time: Wed 09 Feb 2022 20:36:06 +0000
ROA not before: Wed 09 Feb 2022 20:36:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47748
IP address blocks: 178.211.146.0/24 maxlen: 24
87.121.120.0/24 maxlen: 24
94.156.9.0/24 maxlen: 24
94.156.13.0/24 maxlen: 24
31.13.215.0/24 maxlen: 24
94.156.46.0/24 maxlen: 24
94.156.47.0/24 maxlen: 24
93.123.21.0/24 maxlen: 24
37.60.137.0/24 maxlen: 24
87.120.90.0/24 maxlen: 24
31.13.228.0/24 maxlen: 24
31.13.229.0/24 maxlen: 24
93.123.103.0/24 maxlen: 24
87.120.9.0/24 maxlen: 24
87.121.4.0/24 maxlen: 24
87.121.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151598 (0x2502e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Feb 9 20:36:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dd4d7aa25410c6835d93bb03f323baa21e0f25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:ec:7e:53:9d:b7:1d:84:e3:39:8f:5c:07:
63:cd:47:53:5e:e3:08:01:b5:d8:c9:65:56:5e:9a:
79:b0:1d:65:b4:a7:17:80:fd:45:7f:1c:f1:c1:af:
0a:86:95:ce:0d:48:4e:1b:c7:be:16:f0:f4:71:3f:
f9:4b:39:73:44:f0:c5:13:dc:80:b5:82:b0:3b:96:
df:d8:29:01:08:78:45:f3:cc:db:9b:06:4c:c1:d2:
9e:06:0f:9f:cd:a0:69:72:35:e9:7d:a9:d0:c2:19:
4b:09:df:3d:56:3b:df:6d:9f:b2:ef:7e:df:c1:9e:
d1:b7:65:50:e9:62:e3:50:c6:d6:e0:0a:dd:16:c4:
ff:7b:08:2d:cd:bd:82:85:6c:10:2f:9a:41:9e:e9:
96:fb:a7:e4:04:65:2a:85:87:b9:c4:0d:f8:32:a5:
36:f3:e6:47:1e:a1:b2:53:0f:a1:f4:20:2b:15:ec:
02:0f:ed:86:3b:64:98:f9:73:fa:cd:95:01:4a:91:
25:87:26:31:a5:a0:c8:5e:f8:9b:34:d2:74:13:22:
e6:4b:64:3f:d1:89:6d:6d:de:75:f9:af:40:82:62:
38:ea:82:2f:97:a9:83:a9:b2:71:b7:b6:c0:56:05:
58:e1:36:93:8e:9b:4c:65:5b:a9:bf:d6:66:b8:fd:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D4:D7:AA:25:41:0C:68:35:D9:3B:B0:3F:32:3B:AA:21:E0:F2:5D
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/bdTXqiVBDGg12TuwPzI7qiHg8l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.215.0/24
31.13.228.0/23
37.60.137.0/24
87.120.9.0/24
87.120.90.0/24
87.121.4.0/23
87.121.120.0/24
93.123.21.0/24
93.123.103.0/24
94.156.9.0/24
94.156.13.0/24
94.156.46.0/23
178.211.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2d:f6:d7:5a:a9:7e:bc:1f:6d:e9:9d:b4:ad:9b:1b:24:a4:
98:a8:68:bd:80:b3:f7:57:73:c0:ed:e7:84:7b:46:cf:05:0e:
7d:c0:d7:60:be:74:e5:82:f5:ed:1d:a6:a1:9c:2f:54:cd:1a:
07:f7:34:a1:d5:e6:f4:7b:c4:0b:d9:41:3a:12:13:88:93:42:
f0:2f:af:5d:de:e0:b6:52:f3:ec:81:3a:a9:2b:dd:ed:8e:c8:
d8:fa:20:9d:c4:78:01:b3:3a:82:09:35:f5:e9:d3:74:c0:3b:
d4:03:0a:c3:d1:62:5a:5f:6b:7c:83:ed:65:06:9c:ab:5c:e9:
51:eb:f2:c2:1b:e0:e2:0a:e6:e6:fb:e3:67:03:6c:99:cf:6b:
90:25:fd:a7:eb:8a:fe:ae:b7:fd:68:1f:d2:43:90:ea:14:d7:
e3:4f:ed:fe:f5:59:ce:49:49:49:e0:10:25:e0:21:99:f2:ca:
eb:cc:c3:f1:d1:4d:4f:99:32:15:24:d2:94:d4:8f:15:9d:fb:
91:0a:0f:4b:d8:89:0d:70:c9:7a:78:8c:3a:39:21:18:59:87:
a6:71:1b:c5:e3:ef:1b:85:71:bc:e7:bc:48:8d:7a:d1:e2:6c:
5c:ce:b6:2d:9b:97:bb:5e:ab:b5:57:89:9a:17:54:19:a4:51:
51:14:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:17 2025 by rpki-client