Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rrfENj5BnRAJ_x5EvFGGeCtEhCw.roa
File: rrfENj5BnRAJ_x5EvFGGeCtEhCw.roa (raw, json)
Hash identifier: Yn519q/UzQjZgg8wQq1pp4qGa1u6P/YxQHtm1Sw0t94=
Subject key identifier: AE:B7:C4:36:3E:41:9D:10:09:FF:1E:44:BC:51:86:78:2B:44:84:2C
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5DFA7EF6715FC4E46B725B6402DF57
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rrfENj5BnRAJ_x5EvFGGeCtEhCw.roa
Signing time: Sun 06 Aug 2023 19:40:58 +0000
ROA not before: Sun 06 Aug 2023 19:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31500
IP address blocks: 95.161.128.0/24 maxlen: 24
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.130.0/24 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.138.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
94.124.182.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.80.0/24 maxlen: 32
95.140.91.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5d:fa:7e:f6:71:5f:c4:e4:6b:72:5b:64:02:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb7c4363e419d1009ff1e44bc5186782b44842c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:97:05:4c:c8:16:94:ae:da:9e:b7:6d:c0:
68:3e:21:dd:6d:fb:5b:48:10:86:33:34:7f:d1:5f:
ce:f9:40:a8:fb:e8:e9:7c:e4:bf:48:19:be:a0:b3:
52:03:2c:d2:9b:59:3e:11:b3:bd:d0:8a:05:e8:90:
ab:4d:da:0b:da:26:04:7c:60:f8:9a:50:8a:7c:83:
02:a3:66:90:e4:54:5b:d9:ec:9c:39:86:dd:c3:a1:
2e:2e:ef:6c:6f:1f:b8:f9:37:42:59:2c:02:e0:72:
30:df:af:42:17:ac:08:76:dc:de:f9:c1:ff:3b:f8:
5b:86:78:1b:d7:70:fd:11:f1:91:6b:28:52:f6:af:
6d:b8:00:11:40:d0:28:3a:44:c9:26:cf:f6:1f:c2:
b9:9d:1a:da:d1:fd:b9:ad:13:b6:db:c9:e6:84:07:
eb:d1:dd:06:b0:ed:5a:3c:50:ab:ce:94:c0:d5:fb:
8e:d6:17:54:5b:e4:e4:1d:4f:dd:83:f4:4c:85:33:
39:75:cf:1b:26:09:a7:89:97:32:5d:1e:9f:9b:a2:
16:9f:ad:ed:e7:13:9e:81:79:d3:8c:3d:3d:12:6b:
3b:4c:ea:a5:0d:7d:20:3f:66:9e:b9:a2:cc:e8:06:
5b:c1:8a:fc:a6:1f:e6:6b:8b:75:5c:18:ce:1e:24:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:C4:36:3E:41:9D:10:09:FF:1E:44:BC:51:86:78:2B:44:84:2C
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rrfENj5BnRAJ_x5EvFGGeCtEhCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.182.0/23
95.140.80.0/24
95.140.83.0/24
95.140.88.0/22
95.140.93.0/24
95.140.95.0/24
95.161.128.0/24
109.239.128.0/21
109.239.138.0/24
IPv6:
2a03:5f80::/46
2a03:5f80:8::/46
Signature Algorithm: sha256WithRSAEncryption
78:2f:03:87:b6:8f:88:9b:cb:14:36:65:cf:78:8b:da:84:e4:
70:5e:58:13:d4:0b:a7:c4:d6:63:a4:6b:8e:51:74:b6:09:07:
ac:d3:4c:ef:c1:e1:07:bc:35:2b:e1:2f:85:d6:3d:bf:e5:60:
a1:48:c3:dd:76:6e:0c:fb:d6:70:2d:f3:e7:01:b5:5c:82:b7:
8e:0f:7e:d0:83:a7:9b:cb:e0:b9:e9:63:e0:77:4b:7f:79:a7:
af:a3:2b:c3:a7:ef:16:4d:41:8e:19:eb:e7:94:8e:f4:6a:83:
31:18:1a:2a:b7:a4:55:f5:2c:59:4e:95:7f:12:b8:8b:4d:89:
b0:de:47:89:1f:0c:f8:c1:8f:99:1a:5d:ee:c2:c1:9f:8d:65:
26:1b:86:ec:ca:dd:a6:53:a2:40:5a:7c:5b:ce:4a:f1:87:50:
f9:67:21:01:4d:d8:33:3f:53:e3:3d:7b:9c:0a:d8:58:59:39:
73:f0:d6:51:7f:ec:d5:f7:c4:d5:0c:c5:13:7a:fc:13:81:81:
19:99:bc:1d:9d:b9:89:94:87:3a:26:05:d9:70:d6:84:9c:2e:
58:9f:26:65:38:2a:de:d2:ab:41:9a:63:ac:51:89:9f:2b:4d:
12:08:f8:ae:f9:6a:40:15:ef:22:ba:5b:66:28:3d:04:56:63:
dd:90:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:09:44 2025 by rpki-client