Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/Lpw7osqhRavB8xnH_EbjpcQjnic.roa
File: Lpw7osqhRavB8xnH_EbjpcQjnic.roa (raw, json)
Hash identifier: n6lK44zbi2R9a4oD9B5jbTvU84meK+xar0fzFffKOus=
Subject key identifier: 2E:9C:3B:A2:CA:A1:45:AB:C1:F3:19:C7:FC:46:E3:A5:C4:23:9E:27
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 04FB3E51
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/Lpw7osqhRavB8xnH_EbjpcQjnic.roa
Signing time: Tue 17 May 2022 07:30:17 +0000
ROA not before: Tue 17 May 2022 07:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48964
IP address blocks: 91.222.36.0/22 maxlen: 22
195.140.160.0/22 maxlen: 22
185.181.16.0/22 maxlen: 22
91.226.44.0/23 maxlen: 23
185.137.216.0/23 maxlen: 23
185.137.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83574353 (0x4fb3e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: May 17 07:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e9c3ba2caa145abc1f319c7fc46e3a5c4239e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:5d:07:a1:79:b3:e3:f5:68:b6:f2:35:28:
96:04:d2:a9:ff:85:09:6b:22:df:c4:7b:c2:df:21:
53:69:74:12:2a:d3:f7:59:3e:88:94:e9:fd:f5:3e:
39:19:84:34:81:29:01:73:78:46:89:fe:70:91:13:
ae:db:cb:72:66:d9:b3:30:da:f8:64:d6:28:3f:f7:
40:a4:4f:87:ce:a2:43:e9:28:ef:4c:10:42:6f:6a:
ce:ae:a7:c9:26:ec:e7:f3:08:4b:88:cb:75:c1:c5:
4e:49:53:32:34:ca:24:9c:9b:78:5d:73:02:20:65:
2e:ae:7d:76:ad:59:d8:6e:2a:24:c2:d7:77:32:8c:
d9:86:8c:59:9e:f7:a4:ad:d4:6f:9f:bf:a2:c2:cb:
fc:1d:a7:03:e7:52:ec:76:c6:1f:60:69:03:0d:e8:
49:af:03:3d:71:51:27:50:a4:48:d9:5a:49:5e:13:
32:c5:0c:52:e5:50:43:45:25:1d:9b:85:c7:a9:03:
1f:0a:04:c4:3b:77:43:03:1a:db:87:b5:f9:09:c9:
a2:2c:de:13:5d:55:3f:9b:79:27:4a:37:98:14:15:
3d:12:42:5a:ad:9e:e2:b2:83:e9:6c:b7:5b:9f:0d:
f0:2e:b9:45:82:b7:91:0c:01:e7:7b:e4:03:de:9a:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:3B:A2:CA:A1:45:AB:C1:F3:19:C7:FC:46:E3:A5:C4:23:9E:27
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/Lpw7osqhRavB8xnH_EbjpcQjnic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.36.0/22
91.226.44.0/23
185.137.216.0/22
185.181.16.0/22
195.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ec:c2:95:3a:e8:bd:ef:ba:4c:05:7c:16:6d:f1:25:f0:48:
f4:95:5e:22:70:16:46:80:16:2b:fa:30:c9:9f:54:96:41:bc:
e9:b0:37:ff:8f:f1:2e:3a:dc:a6:e8:b2:60:50:2d:aa:4d:fb:
c7:f8:eb:4d:9e:10:7d:54:23:ff:ec:30:94:b5:a3:ac:e8:43:
ca:11:0c:1c:3a:c1:f6:5b:f4:d5:76:d2:22:b5:1b:3c:d5:a4:
32:b9:48:d6:a3:3a:ae:9b:32:91:57:ac:e1:49:53:9a:e9:4a:
36:f1:17:bf:fa:22:29:ec:7b:e8:cc:69:39:71:be:dd:05:87:
90:3a:7c:0d:43:a7:0a:98:a3:b2:a2:4e:0b:55:3a:c3:70:47:
37:f4:c8:d8:28:bb:2f:75:25:e9:85:1a:d3:c0:86:c9:b4:a1:
69:00:c3:ef:fd:a1:bc:77:d2:20:6d:cb:c1:67:56:0c:8b:a4:
12:14:e4:94:96:81:46:cb:dd:d3:67:c1:d2:16:5f:64:0f:bc:
a5:9a:3b:c2:35:f4:fa:35:a0:61:7b:b4:07:f9:0c:1f:7b:50:
98:0f:d0:58:b1:51:40:bd:3b:f2:3c:f0:51:2c:e2:f4:2c:70:
10:b7:1d:1e:8d:4d:6b:cb:c3:05:0a:11:71:4d:e2:26:21:d5:
01:8c:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:16:58 2025 by rpki-client