Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/7heLdQeDNCONLWb85OQALJK19Lc.roa
File: 7heLdQeDNCONLWb85OQALJK19Lc.roa (raw, json)
Hash identifier: 5XXArESpGHSmVXFFuLOIO2S1vjzqBdFF2ZQU0B2XDZg=
Subject key identifier: EE:17:8B:75:07:83:34:23:8D:2D:66:FC:E4:E4:00:2C:92:B5:F4:B7
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 058F6FDC
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/7heLdQeDNCONLWb85OQALJK19Lc.roa
Signing time: Wed 16 Feb 2022 10:07:23 +0000
ROA not before: Wed 16 Feb 2022 10:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12361
IP address blocks: 195.97.52.0/24 maxlen: 24
62.74.128.0/17 maxlen: 17
77.69.38.0/24 maxlen: 24
213.249.32.0/19 maxlen: 19
62.74.0.0/17 maxlen: 17
62.74.0.0/16 maxlen: 24
213.249.59.0/24 maxlen: 24
195.46.0.0/19 maxlen: 19
195.46.0.0/20 maxlen: 20
185.158.220.0/22 maxlen: 22
185.158.220.0/23 maxlen: 23
185.158.222.0/23 maxlen: 23
213.249.0.0/18 maxlen: 18
213.249.0.0/19 maxlen: 19
195.46.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93286364 (0x58f6fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Feb 16 10:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee178b75078334238d2d66fce4e4002c92b5f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:93:dc:bb:2f:b7:28:4d:35:9c:6b:9c:1a:
d6:77:93:4f:d0:74:92:b0:16:c3:97:c3:79:60:c6:
84:30:17:e1:16:12:d3:c1:ac:e1:a5:d2:b8:de:e1:
24:97:c4:95:75:9f:76:d2:b6:d0:88:44:a4:93:1a:
32:10:c3:6e:1e:40:37:15:8d:b1:7e:12:2e:3a:50:
00:2e:49:98:9b:09:52:86:fb:58:80:8a:59:29:7d:
d2:34:f4:f8:a4:c1:8c:d7:58:77:07:18:61:2b:9f:
17:bc:35:19:44:4e:c3:02:89:f6:5f:bf:d8:cf:e2:
7f:ee:83:1e:04:42:82:03:b3:a0:46:16:59:64:f6:
76:7c:39:3e:91:d6:7a:bb:5d:0d:6f:2a:02:b1:21:
08:43:a3:e1:27:49:bf:14:29:1d:a7:9d:25:53:f7:
ad:b3:2f:8f:62:d1:3e:5a:0b:ee:1a:66:68:36:e3:
ce:a3:53:f4:c3:33:9c:75:35:2b:1c:e4:b1:d7:6a:
49:81:10:d0:da:84:d0:02:6b:18:73:65:2e:db:ca:
0f:51:e2:14:fd:fc:c3:9d:2e:31:7e:13:70:8d:6f:
4f:d4:70:12:8a:1d:03:8b:db:a7:b4:5f:ba:f0:1e:
a3:1c:9e:5b:09:c8:c9:64:fb:fd:6d:ad:0a:47:d4:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:8B:75:07:83:34:23:8D:2D:66:FC:E4:E4:00:2C:92:B5:F4:B7
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/7heLdQeDNCONLWb85OQALJK19Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.74.0.0/16
77.69.38.0/24
185.158.220.0/22
195.46.0.0/19
195.97.52.0/24
213.249.0.0/18
Signature Algorithm: sha256WithRSAEncryption
09:ba:95:8b:ee:0b:24:f3:53:5b:d0:2a:90:ef:c9:0b:4d:2f:
73:96:29:ed:16:4e:45:9f:32:7f:03:f1:c6:0a:e4:06:ba:04:
94:a4:86:78:3c:3e:85:2d:88:e3:e6:50:2b:45:51:fd:ae:00:
16:da:21:c0:e3:f4:8f:57:9d:bb:d0:f6:3d:27:4e:7c:f6:18:
44:ee:9e:b4:94:44:11:85:8c:53:5e:2d:73:b7:92:83:d6:d6:
7c:68:02:43:8c:49:3a:a4:47:de:35:7f:7d:69:a1:3a:8f:13:
f1:76:8a:41:0e:d3:b9:c5:b2:a4:6f:c1:d3:17:60:cc:f2:c9:
5d:2f:d5:60:62:88:b7:52:0c:a7:2e:72:1e:ef:3a:71:64:74:
5a:a0:32:25:27:74:a3:74:bb:9f:3b:4e:62:6a:09:c0:ee:9e:
0f:02:f3:5c:16:2b:c4:59:79:80:dc:2b:36:0b:d8:29:1c:cd:
0f:09:de:9d:57:e1:ba:e5:52:cf:71:fe:9a:a1:03:74:97:b1:
f5:93:ed:29:35:b7:cd:58:27:e6:e9:fc:a2:c8:77:ab:a2:73:
0a:01:86:dd:f8:b0:e6:e6:8c:e1:d3:78:53:cd:17:16:c3:6a:
d1:6c:98:00:bc:92:fc:3e:0d:3e:6c:4c:69:32:a3:1a:68:59:
11:2e:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:37:31 2025 by rpki-client