Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2DmSon_j8LZSfkE8f3VmQk0Ph5g.roa
File: 2DmSon_j8LZSfkE8f3VmQk0Ph5g.roa (raw, json)
Hash identifier: d47Y3HrBz0N0tkXhgJBSPGTC0WZSbDmMK9YtJBHew2E=
Subject key identifier: D8:39:92:A2:7F:E3:F0:B6:52:7E:41:3C:7F:75:66:42:4D:0F:87:98
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01839DD4C2A74767B1929E7ED23B03CD6002
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2DmSon_j8LZSfkE8f3VmQk0Ph5g.roa
Signing time: Mon 03 Oct 2022 12:31:49 +0000
ROA not before: Mon 03 Oct 2022 12:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199558
IP address blocks: 159.148.218.0/24 maxlen: 24
85.254.144.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
159.148.27.0/24 maxlen: 24
85.254.52.0/22 maxlen: 22
85.254.70.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
159.148.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:d4:c2:a7:47:67:b1:92:9e:7e:d2:3b:03:cd:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 3 12:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d83992a27fe3f0b6527e413c7f7566424d0f8798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:70:7f:94:8c:0b:f4:0a:03:c6:82:a1:d3:
87:da:c2:76:e1:f7:fc:b6:74:de:90:1c:8e:05:38:
61:3e:64:67:84:e6:05:a1:44:1c:8d:f3:bd:dc:50:
ee:80:be:ad:ba:43:c3:77:76:c8:b9:88:b0:c6:f6:
b3:89:31:b0:c8:fb:19:3d:26:39:f8:4c:8f:8a:33:
f8:ed:b8:ee:c0:78:ca:b6:52:4e:5d:10:57:ca:10:
7e:87:fe:36:02:14:6a:ee:6f:2c:65:8a:82:64:7d:
41:48:b7:a1:7f:2a:54:09:4f:86:13:56:d5:cc:02:
70:c3:f8:89:e7:3d:32:9f:9e:e4:f4:24:71:d0:01:
03:3d:69:2c:0a:4e:38:86:01:47:09:96:12:3c:b5:
5a:cb:93:31:ff:9d:8f:f1:55:7c:ed:5d:d3:a3:8e:
cb:d7:fe:fd:c1:5e:17:47:12:be:5e:08:56:9f:39:
ea:a7:1b:6b:12:64:0d:93:ad:fa:0b:d6:30:e2:4a:
6e:4b:7c:83:c3:0b:6a:ae:9b:21:dc:ea:ce:23:4a:
02:75:ad:f7:37:28:70:2e:97:ec:a7:19:66:24:83:
b9:2e:8c:88:92:10:46:f4:5f:d0:bd:19:b2:1f:39:
69:04:ae:6d:74:03:67:f2:a7:14:06:db:02:53:1d:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:92:A2:7F:E3:F0:B6:52:7E:41:3C:7F:75:66:42:4D:0F:87:98
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/2DmSon_j8LZSfkE8f3VmQk0Ph5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.41.0/24
85.254.45.0-85.254.46.255
85.254.52.0/22
85.254.70.0/24
85.254.144.0/24
159.148.27.0/24
159.148.58.0/24
159.148.89.0/24
159.148.218.0/24
159.148.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:78:77:f7:a1:66:e8:8e:f7:22:b2:3b:b7:c0:2a:1d:96:6d:
d5:e2:e9:b5:4a:60:d2:eb:8a:22:19:d5:35:36:76:d6:2e:5a:
c8:8b:9b:33:76:d4:d5:db:3e:da:4a:34:82:32:9e:ce:3a:ce:
e6:93:bc:a2:d7:d0:a4:b2:85:1d:52:ba:f8:0d:f4:d2:a0:2a:
b8:6d:b8:47:22:f1:a8:5b:72:46:4b:8f:11:31:8f:07:24:83:
a7:2d:a1:8e:92:7d:d1:f0:03:48:58:fc:bc:d7:0d:4a:21:32:
cc:81:ec:a5:df:35:2a:6a:11:89:81:77:85:ed:11:ff:ea:fe:
a5:8f:05:69:e9:5d:a5:d3:6d:c7:2b:58:35:20:90:bb:44:70:
be:04:ae:d3:5c:35:db:50:ff:0f:6f:06:0c:40:ab:92:3d:9e:
c7:cd:18:48:1c:cd:f2:63:4e:20:db:4b:6c:a5:01:43:3b:80:
56:87:ce:85:63:68:bd:6f:57:bd:06:6d:d9:1c:a5:52:76:66:
66:59:ac:c0:d6:f8:79:70:df:20:ed:65:c2:e8:6d:ae:ec:6a:
a1:1a:3f:af:f6:c5:e5:1b:a4:6f:a5:0b:15:9f:0f:ea:53:79:
2d:38:f9:56:01:78:74:2b:65:17:af:61:79:81:1f:c6:69:69:
76:d1:c1:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:44 2025 by rpki-client