Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/v6L7SbbJZW4YcsqznVaTL-Te_Wk.roa
File: v6L7SbbJZW4YcsqznVaTL-Te_Wk.roa (raw, json)
Hash identifier: abrdRSBS7x1EEe2l5AGQ7xnOKo0rcagv+PdfTPyTKJs=
Subject key identifier: BF:A2:FB:49:B6:C9:65:6E:18:72:CA:B3:9D:56:93:2F:E4:DE:FD:69
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0183C674F34DF4B56A88576105DCD447EC81
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/v6L7SbbJZW4YcsqznVaTL-Te_Wk.roa
Signing time: Tue 11 Oct 2022 09:51:36 +0000
ROA not before: Tue 11 Oct 2022 09:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48287
IP address blocks: 185.26.112.0/22 maxlen: 22
109.70.24.0/21 maxlen: 24
91.217.21.0/24 maxlen: 24
91.217.20.0/24 maxlen: 24
89.104.80.0/21 maxlen: 24
178.210.64.0/19 maxlen: 24
89.111.130.0/24 maxlen: 24
89.111.128.0/24 maxlen: 24
89.111.132.0/23 maxlen: 23
31.177.64.0/22 maxlen: 24
89.111.144.0/22 maxlen: 24
195.24.64.0/22 maxlen: 22
195.24.68.0/22 maxlen: 22
195.24.68.0/23 maxlen: 23
195.24.71.0/24 maxlen: 24
195.24.70.0/24 maxlen: 24
185.76.144.0/22 maxlen: 22
91.189.114.0/23 maxlen: 23
91.189.112.0/21 maxlen: 21
91.189.116.0/22 maxlen: 22
31.177.68.0/22 maxlen: 22
31.177.72.0/21 maxlen: 24
31.177.80.0/21 maxlen: 24
89.111.164.0/24 maxlen: 24
31.177.91.0/24 maxlen: 24
31.177.88.0/21 maxlen: 22
2a02:2090::/48 maxlen: 48
2a02:2090:ec00::/48 maxlen: 48
2a02:2090:e800::/48 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
2a02:2090:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:74:f3:4d:f4:b5:6a:88:57:61:05:dc:d4:47:ec:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Oct 11 09:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa2fb49b6c9656e1872cab39d56932fe4defd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:c6:e8:7e:fc:ba:44:38:c1:a9:e4:47:bd:
ab:60:29:95:ae:a0:d3:e2:1c:07:bd:cd:18:00:a5:
0b:f5:0a:39:49:75:97:a4:88:b2:ee:77:8d:0e:9c:
58:9d:45:00:0c:bf:5c:46:d7:5f:4f:ae:de:e0:06:
c4:40:cb:c8:ae:b7:a5:72:d7:9b:84:d4:cf:62:0f:
79:97:54:7a:4e:c3:d6:18:9d:4b:f0:98:89:ed:f2:
08:5f:08:c1:ef:50:e0:8d:bd:2b:ff:ef:9e:b1:7c:
72:96:ad:89:ab:f9:74:bd:bb:c0:a9:40:5f:e8:fd:
9e:b2:52:26:a3:2e:eb:2a:a4:3d:61:57:29:ff:4e:
61:87:a0:b5:79:e4:20:30:39:4a:f3:4c:7b:11:2d:
a8:33:da:c6:5a:f9:5d:41:c1:fc:d0:8b:a7:14:c3:
2c:cf:aa:d9:92:a0:eb:c3:25:0c:81:6a:10:76:c2:
d4:2c:51:ab:e5:1f:c9:d6:d0:fa:bd:82:66:72:5b:
a7:4d:68:f0:64:72:b5:c7:b9:a7:ad:e7:15:cc:35:
fd:5c:8a:37:fe:e1:b7:9e:5b:19:3a:79:fd:48:bb:
41:cf:91:96:ec:fd:d8:ca:30:de:29:92:d8:be:54:
73:03:17:7f:3a:50:d8:42:68:56:d1:08:cc:49:3c:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:FB:49:B6:C9:65:6E:18:72:CA:B3:9D:56:93:2F:E4:DE:FD:69
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/v6L7SbbJZW4YcsqznVaTL-Te_Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.64.0/19
89.104.80.0/21
89.111.128.0/24
89.111.130.0/24
89.111.132.0/23
89.111.144.0/22
89.111.164.0/24
91.189.112.0/21
91.217.20.0/23
109.70.24.0/21
178.210.64.0/19
185.26.112.0/22
185.76.144.0/22
195.24.64.0/21
IPv6:
2a02:2090::/47
2a02:2090:e400::/48
2a02:2090:e800::/48
2a02:2090:ec00::/48
Signature Algorithm: sha256WithRSAEncryption
0a:67:19:72:d4:07:cf:db:f6:5e:79:85:56:a6:a4:e0:56:aa:
ec:b0:c4:e0:32:5a:39:f1:5a:9d:a0:55:8e:35:48:91:cc:79:
fa:9e:5b:f3:79:2d:4a:03:50:8a:a4:24:b9:70:fd:2d:d7:46:
f5:67:b1:18:bb:8e:88:85:14:32:a8:91:1e:ba:2e:12:6b:db:
1e:81:9b:10:11:53:a8:c3:bc:48:bc:7b:4f:50:0f:ef:18:c1:
43:b3:91:df:63:64:d7:e5:e1:73:8e:c5:7f:cd:0c:93:e1:2a:
7c:a5:73:a9:0c:82:69:6b:10:e9:8c:ad:40:3b:13:7e:89:f6:
8f:7f:5e:48:87:fe:17:32:33:a0:02:79:92:8d:0d:0b:f2:c9:
3f:e9:48:46:84:91:5c:6a:a8:a9:fb:0f:2b:61:61:83:6f:26:
71:67:41:65:bc:2d:4f:bb:17:75:32:42:93:86:6d:3d:d7:4e:
f1:45:ca:bf:89:cc:75:f4:e1:14:a4:45:7c:4a:bb:51:cd:52:
9c:e7:0f:0f:7d:7f:ab:d9:c6:af:5c:e7:5a:05:6c:8c:88:ae:
84:a1:00:52:28:ee:f5:38:3b:48:1b:73:20:2d:0b:f1:cc:57:
89:e8:52:e8:c4:aa:c8:1f:85:de:69:74:fd:99:ce:ca:1b:a5:
e2:5e:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:53:02 2025 by rpki-client