Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/wviU0Izgq3UNl41j2WOu3D0DNcY.roa
File: wviU0Izgq3UNl41j2WOu3D0DNcY.roa (raw, json)
Hash identifier: 92gTvTJgeD5EvIV0P8gWw9z2O+aZg9q3ZFTKfbBMcug=
Subject key identifier: C2:F8:94:D0:8C:E0:AB:75:0D:97:8D:63:D9:63:AE:DC:3D:03:35:C6
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 018626203231AB7B759C26D44B3288A7F7CB
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/wviU0Izgq3UNl41j2WOu3D0DNcY.roa
Signing time: Mon 06 Feb 2023 09:48:09 +0000
ROA not before: Mon 06 Feb 2023 09:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206825
IP address blocks: 185.36.112.0/22 maxlen: 22
195.5.96.0/23 maxlen: 23
185.186.116.0/22 maxlen: 22
195.181.254.0/24 maxlen: 24
185.11.16.0/22 maxlen: 22
185.11.16.0/23 maxlen: 23
185.11.18.0/23 maxlen: 23
195.192.252.0/24 maxlen: 24
80.208.255.0/24 maxlen: 24
31.14.30.0/24 maxlen: 24
31.14.29.0/24 maxlen: 24
94.177.133.0/24 maxlen: 24
178.157.95.0/24 maxlen: 24
185.207.240.0/22 maxlen: 22
103.197.8.0/22 maxlen: 22
212.103.52.0/22 maxlen: 22
46.102.102.0/24 maxlen: 24
217.61.255.0/24 maxlen: 24
212.237.254.0/24 maxlen: 24
2a03:4f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:20:32:31:ab:7b:75:9c:26:d4:4b:32:88:a7:f7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Feb 6 09:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f894d08ce0ab750d978d63d963aedc3d0335c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:cb:d5:43:1f:07:3b:83:72:9e:73:72:cf:
30:56:df:46:ca:60:0f:2f:14:6c:fa:d6:5f:55:57:
fb:ba:84:f6:be:d4:d4:6d:07:e2:17:ca:69:0a:d8:
20:85:27:70:bd:d3:4f:1f:81:31:47:66:9a:85:06:
ec:54:27:33:44:b4:34:9c:65:4a:c0:eb:53:7e:bf:
38:07:0a:c6:5a:8c:78:63:76:d1:ff:cf:bf:b4:90:
84:52:91:8f:1a:86:12:25:5e:71:e2:2d:2a:95:8d:
de:25:c2:55:c5:8e:4a:b0:9c:e0:69:2c:f4:b1:1b:
4a:68:96:7a:9e:d3:6c:bd:f6:15:32:ec:35:17:22:
a9:ee:2f:72:3a:47:89:55:2a:76:5d:65:dc:4c:08:
a0:ea:30:4e:b3:45:e6:19:49:5e:07:ff:5b:93:29:
96:10:6c:a6:20:7c:12:37:01:e2:d5:0e:25:f9:bd:
29:1a:5a:f1:07:2c:ca:1c:10:4a:5e:c7:b6:d7:5c:
0d:b1:56:9f:a4:f0:e8:40:bb:c5:4b:58:74:d6:27:
a4:b8:f9:91:37:e9:86:0b:ac:ee:f7:b1:a9:e4:10:
fa:16:e2:9c:25:7b:f6:12:d7:4f:60:72:71:1b:c1:
39:8d:e0:63:e0:04:98:15:d1:d5:9b:fe:49:88:26:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:94:D0:8C:E0:AB:75:0D:97:8D:63:D9:63:AE:DC:3D:03:35:C6
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/wviU0Izgq3UNl41j2WOu3D0DNcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.29.0-31.14.30.255
46.102.102.0/24
80.208.255.0/24
94.177.133.0/24
103.197.8.0/22
178.157.95.0/24
185.11.16.0/22
185.36.112.0/22
185.186.116.0/22
185.207.240.0/22
195.5.96.0/23
195.181.254.0/24
195.192.252.0/24
212.103.52.0/22
212.237.254.0/24
217.61.255.0/24
IPv6:
2a03:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
22:34:fe:c8:74:e8:c0:0c:01:9b:cc:2c:a4:6a:04:6b:3a:85:
70:0b:59:e5:7f:61:e7:e7:8f:27:97:1e:1f:f0:80:7d:6a:49:
29:0d:20:47:36:46:39:a9:4e:d8:c2:97:90:5c:28:2b:da:fc:
2f:f8:68:6d:13:76:cf:49:e9:6a:fc:13:eb:14:a2:51:c2:34:
9c:62:6f:b2:28:70:48:70:9b:e8:13:82:16:0a:05:23:d6:14:
b1:17:05:56:33:ba:6d:aa:47:32:8a:61:07:46:aa:52:b0:0f:
27:63:80:a2:d2:15:cc:d4:54:e1:96:20:01:5d:ff:72:ff:00:
5d:dc:8c:bd:4f:22:0f:94:e3:ae:ac:55:1a:9c:c7:95:5c:ca:
91:c8:01:28:99:e0:5a:84:d4:2c:fa:e3:32:fa:27:3b:05:b8:
55:2f:60:e3:d6:dd:7b:b3:6d:81:86:60:74:c5:c4:7e:e0:59:
94:46:37:a5:68:e9:9c:82:32:c6:b3:ae:21:9b:3d:92:eb:3c:
b9:35:38:95:e0:c2:d3:08:0a:86:0c:86:96:bc:8e:30:8a:99:
3d:1c:1a:6f:c3:aa:79:60:99:e2:78:d7:89:e0:08:9e:e1:28:
76:c8:16:1d:4c:df:e4:1f:a7:dd:84:c0:cc:e6:45:f4:8d:9d:
b0:fc:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:35:36 2025 by rpki-client