Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/H_ctkur3DtCORq7VIHbgYntCh3Y.roa
File: H_ctkur3DtCORq7VIHbgYntCh3Y.roa (raw, json)
Hash identifier: ZTuzKsAzPYE1iiYwjt6DJHpr4BJ7JTbWqRoj6y//MF0=
Subject key identifier: 1F:F7:2D:92:EA:F7:0E:D0:8E:46:AE:D5:20:76:E0:62:7B:42:87:76
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01867D92CA1D547589D1DD9BCECDD94E7BD4
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/H_ctkur3DtCORq7VIHbgYntCh3Y.roa
Signing time: Thu 23 Feb 2023 09:20:17 +0000
ROA not before: Thu 23 Feb 2023 09:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15802
IP address blocks: 5.31.96.0/19 maxlen: 19
94.203.44.0/23 maxlen: 23
94.206.152.0/23 maxlen: 23
94.203.62.0/23 maxlen: 23
94.206.181.0/24 maxlen: 24
94.206.112.0/23 maxlen: 23
94.200.0.0/13 maxlen: 19
94.201.251.0/24 maxlen: 24
87.201.176.0/22 maxlen: 22
87.201.180.0/22 maxlen: 22
87.201.184.0/22 maxlen: 22
87.200.0.0/15 maxlen: 19
80.227.0.0/16 maxlen: 19
94.201.196.0/22 maxlen: 22
91.72.0.0/14 maxlen: 19
91.73.216.0/23 maxlen: 23
91.72.204.0/24 maxlen: 24
5.32.96.0/19 maxlen: 19
91.72.205.0/24 maxlen: 24
91.72.206.0/24 maxlen: 24
94.203.204.0/22 maxlen: 22
91.74.78.0/23 maxlen: 23
213.132.32.0/19 maxlen: 19
94.206.74.0/23 maxlen: 23
80.227.200.0/22 maxlen: 22
94.200.248.0/22 maxlen: 22
94.206.16.0/23 maxlen: 23
94.206.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:92:ca:1d:54:75:89:d1:dd:9b:ce:cd:d9:4e:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Feb 23 09:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff72d92eaf70ed08e46aed52076e0627b428776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1a:06:75:61:3e:42:d2:cd:db:cc:a3:10:31:
15:47:c0:ce:d6:8f:60:5f:7c:ac:63:74:d5:d3:db:
70:d9:b0:99:38:36:43:62:6a:9e:9c:52:8e:6b:5b:
ec:48:9c:9f:49:e1:1a:57:0c:41:b7:95:25:ef:2e:
1a:60:5f:e9:3c:a1:5d:59:26:33:2e:43:25:17:fb:
4c:fc:59:5e:a8:65:9b:77:94:68:c3:11:06:97:52:
4a:ab:24:15:23:3a:4f:a9:da:15:a2:f3:37:0c:67:
95:91:d9:25:17:a4:7c:bd:21:6e:81:e1:dc:16:a9:
eb:7c:86:7c:ab:52:c7:c4:3d:6b:b3:fc:a9:81:1f:
aa:f0:c3:a4:5e:d7:e4:c6:47:4d:2d:d8:32:4e:a2:
e5:35:dd:f9:d9:70:b0:ba:d3:5d:12:d5:15:0a:40:
4a:77:dc:9a:71:a2:b4:43:cf:49:eb:0b:f0:44:7f:
a3:e8:1f:5c:e3:3c:8f:5a:dd:e9:ea:51:22:c3:7e:
26:e5:52:ac:54:17:af:25:95:42:ae:da:e7:36:b0:
02:81:23:13:1b:4b:b5:d6:48:c5:f8:1e:aa:dc:d3:
dd:e1:aa:78:83:d2:e0:aa:78:67:94:3c:00:75:9c:
62:86:bf:bc:4c:36:0e:bc:64:e2:54:a9:58:1b:86:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:2D:92:EA:F7:0E:D0:8E:46:AE:D5:20:76:E0:62:7B:42:87:76
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/H_ctkur3DtCORq7VIHbgYntCh3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.31.96.0/19
5.32.96.0/19
80.227.0.0/16
87.200.0.0/15
91.72.0.0/14
94.200.0.0/13
213.132.32.0/19
Signature Algorithm: sha256WithRSAEncryption
73:dd:60:bd:5d:ca:a3:5a:0f:69:fd:3a:f2:94:ea:a9:f7:d9:
65:62:b1:5b:e3:95:d7:0d:7a:97:e2:2e:bd:f3:95:15:3c:a5:
fe:8c:8c:14:5d:ab:12:0e:6d:ce:c7:1e:a0:a5:94:76:e1:58:
01:b7:b0:9e:7f:11:1d:a7:b8:55:cc:44:d0:a3:6d:1e:c8:91:
56:37:37:27:53:4b:06:ce:18:91:6b:2a:19:5e:52:cf:63:8f:
25:12:4d:53:25:86:a4:ec:4e:bd:f2:0b:a7:8f:22:53:8d:c3:
82:ee:d1:06:a4:c0:d7:d0:2d:17:54:6d:7d:2d:bc:87:90:86:
d9:b8:c0:ea:ed:da:eb:86:70:84:31:46:4e:5b:b3:04:ea:76:
e8:d9:99:74:de:26:12:09:75:7c:3a:54:44:63:b3:45:4d:8e:
af:a7:90:98:62:87:f6:48:d4:3f:1f:d4:6c:fe:90:93:c9:bc:
7e:70:93:b8:2d:c3:26:0d:fe:42:ef:06:ee:17:11:cc:db:34:
61:60:fc:82:a6:a8:85:46:ed:72:3a:df:50:21:96:29:f7:a2:
d8:f9:af:b5:18:ea:c8:a7:e1:1d:4f:9c:8c:ef:22:ec:6b:1c:
b5:9a:77:dd:e6:6f:7b:dc:ce:c6:d6:8e:99:14:4a:eb:55:ef:
5a:c0:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:27 2025 by rpki-client