Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CZyIOUjseJ_DnCluCjtwBEIV3pw.roa
File: CZyIOUjseJ_DnCluCjtwBEIV3pw.roa (raw, json)
Hash identifier: 8ujPi0/Sa3c5XatgElF48KUmty2CDQapbi9w8Oa4q9E=
Subject key identifier: 09:9C:88:39:48:EC:78:9F:C3:9C:29:6E:0A:3B:70:04:42:15:DE:9C
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 1189CF85
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CZyIOUjseJ_DnCluCjtwBEIV3pw.roa
Signing time: Sat 01 Jan 2022 10:57:30 +0000
ROA not before: Sat 01 Jan 2022 10:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204818
IP address blocks: 217.16.0.0/24 maxlen: 24
217.16.1.0/24 maxlen: 24
217.16.2.0/24 maxlen: 24
217.16.0.0/20 maxlen: 20
217.16.3.0/24 maxlen: 24
217.16.4.0/24 maxlen: 24
217.16.6.0/24 maxlen: 24
217.16.7.0/24 maxlen: 24
217.16.8.0/24 maxlen: 24
217.16.9.0/24 maxlen: 24
217.16.10.0/24 maxlen: 24
217.16.11.0/24 maxlen: 24
217.16.5.0/24 maxlen: 24
217.16.13.0/24 maxlen: 24
217.16.14.0/24 maxlen: 24
217.16.15.0/24 maxlen: 24
217.16.12.0/24 maxlen: 24
46.182.4.0/22 maxlen: 22
46.182.4.0/24 maxlen: 24
2a05:36c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294244229 (0x1189cf85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 1 10:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=099c883948ec789fc39c296e0a3b70044215de9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d5:a3:da:d3:82:6a:83:6a:9f:87:e4:4b:99:
3e:e5:d8:b2:66:99:7a:61:46:e0:00:0b:83:79:96:
15:e6:d7:33:49:47:bd:37:5a:4b:0e:8e:e4:b3:2d:
97:70:8d:37:0a:d2:84:c8:23:b5:dd:2c:6e:82:81:
35:29:4b:41:44:2a:b2:c3:c4:d6:72:37:52:5d:99:
6d:84:e8:95:00:1f:09:a4:0b:da:ca:ef:15:2a:b7:
a9:a3:6c:32:89:23:93:cb:77:7d:3b:59:46:9b:78:
d7:4d:29:7f:99:74:56:45:39:8a:8e:63:4a:4e:99:
26:76:7b:7b:9c:e9:1d:8a:31:1d:4d:7b:2a:a1:d5:
fd:d5:6b:1b:f8:51:57:3f:f4:79:d2:8a:ff:ee:70:
d2:79:3f:3b:a5:3e:f0:68:a7:b6:21:5c:c3:56:ca:
4c:a9:8f:47:75:27:a8:c7:0b:87:37:06:6a:5f:d0:
d4:c2:93:9e:9d:c1:b5:ac:43:7f:a2:5b:fd:56:a4:
ea:65:b5:85:ef:3c:4f:0a:78:89:1c:1f:cd:13:92:
2c:0d:c8:9c:8a:d5:bd:c5:8e:96:f8:27:58:94:e9:
46:b7:99:06:c7:b5:42:a0:89:cd:cc:39:81:34:38:
07:82:4b:50:e1:b6:c8:0c:d8:60:72:43:69:ae:8b:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:88:39:48:EC:78:9F:C3:9C:29:6E:0A:3B:70:04:42:15:DE:9C
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CZyIOUjseJ_DnCluCjtwBEIV3pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.4.0/22
217.16.0.0/20
IPv6:
2a05:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:29:a6:d3:45:91:29:8f:f4:bc:68:be:cd:f0:64:98:bb:59:
f2:6d:8b:92:a3:29:c9:63:ae:02:43:ad:07:9b:d3:0b:cf:5e:
a8:fd:d2:c6:78:5e:68:e2:c9:db:ef:f9:d1:58:04:b7:5b:d4:
48:3b:54:f3:48:e8:a5:05:ae:fa:01:3a:f0:79:39:04:af:fc:
ed:14:06:b5:ba:05:20:cd:4c:00:a5:ee:39:c1:f0:3b:a7:f5:
fa:b8:da:2e:5e:2f:62:6a:7f:11:c5:7d:90:7d:24:09:63:69:
19:39:70:f4:79:0e:26:02:6f:da:02:4c:fc:f6:f0:96:87:55:
f1:e5:6e:ff:c8:87:4f:8d:14:d6:ce:e0:b1:dd:89:2f:8e:e3:
8a:07:74:6b:b3:31:a4:be:e0:7f:89:e5:91:28:3b:75:3b:88:
e6:b7:77:c4:df:36:15:49:07:9c:40:0f:28:91:8b:9c:93:29:
a8:d8:91:8d:ae:96:d8:e4:b1:39:18:c1:5d:8b:4d:d1:a0:7b:
af:ce:3d:af:4e:34:d2:44:8d:84:df:4c:b9:8a:cf:37:e8:a6:
f5:d2:3d:ae:25:e2:41:be:16:da:04:d9:f0:68:4c:85:79:62:
ca:ab:9b:47:bf:a2:00:48:e2:43:ff:de:8c:72:52:01:92:fe:
bd:65:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:34:19 2025 by rpki-client