Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/2EE1zjhyGFd7kyXEu8IaOlcS-L0.roa
File: 2EE1zjhyGFd7kyXEu8IaOlcS-L0.roa (raw, json)
Hash identifier: W2BIy5/a8T5fwt4ScImjdtrtGfoGVcwSYCLYvjaYSu8=
Subject key identifier: D8:41:35:CE:38:72:18:57:7B:93:25:C4:BB:C2:1A:3A:57:12:F8:BD
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0185C053DCEB61C2E3CCCB13C9008159D127
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/2EE1zjhyGFd7kyXEu8IaOlcS-L0.roa
Signing time: Tue 17 Jan 2023 15:23:19 +0000
ROA not before: Tue 17 Jan 2023 15:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
2a09:6e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:53:dc:eb:61:c2:e3:cc:cb:13:c9:00:81:59:d1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 17 15:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d84135ce387218577b9325c4bbc21a3a5712f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:90:62:4d:6a:28:bc:67:3d:37:14:b4:fe:
7d:ff:82:e0:91:ac:5a:30:cd:75:1e:02:25:02:6f:
58:63:e5:e4:a9:43:83:dc:eb:00:96:3d:ca:c0:7e:
32:29:f7:09:8d:bd:0e:35:d9:d3:d4:48:7b:fc:aa:
3a:35:ca:0f:3f:51:50:3b:04:46:bf:20:85:94:20:
20:d0:a5:80:f8:ad:70:e1:6c:ba:16:28:31:bd:88:
38:d9:ed:e7:a4:74:6c:36:e3:20:5a:9e:64:29:85:
ef:45:7e:c9:66:c9:b4:48:0f:7e:7f:07:32:c3:5b:
7c:3b:bc:45:bb:42:1e:bd:40:15:61:f7:44:e6:21:
51:a4:09:c1:42:17:0b:c2:04:c7:08:55:f4:fc:ae:
cf:99:3b:be:52:74:31:6e:56:5c:36:5d:3b:b8:9c:
2e:4c:16:17:87:26:8f:89:0f:d5:4c:20:3c:b9:f9:
88:89:70:b8:88:ff:db:ef:b2:a4:46:4c:43:21:de:
31:28:9d:f8:14:20:e5:8a:5a:35:2b:16:8f:9b:50:
74:52:e7:5f:16:99:74:8b:80:d9:7b:cd:d2:8c:14:
8e:18:b4:8c:5e:b4:28:12:f4:e2:4a:0d:92:44:5f:
34:61:11:59:1b:a3:8f:63:61:52:86:d3:46:8f:1d:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:35:CE:38:72:18:57:7B:93:25:C4:BB:C2:1A:3A:57:12:F8:BD
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/2EE1zjhyGFd7kyXEu8IaOlcS-L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0/22
109.74.28.0/22
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:8a:bc:ba:bc:3b:71:f7:25:25:52:a6:64:be:cf:b3:3d:57:
0b:45:1d:8e:14:1a:64:a8:fa:0a:d7:49:6d:a6:2b:bb:26:02:
6a:6d:05:10:19:ab:70:ed:05:c5:91:60:58:95:f0:d9:90:6c:
b5:54:66:66:35:36:40:4b:f5:51:53:c4:5b:de:32:c3:fb:b0:
d7:b7:95:43:5d:e7:b9:22:55:2c:ed:cf:04:60:22:38:8a:8b:
e3:f2:14:4b:06:e2:74:d4:03:83:69:4e:1f:c7:6d:75:01:e5:
f6:b5:fd:43:a4:ca:9a:a9:a7:48:9a:13:c2:a8:a4:ff:3e:ad:
2e:47:4f:be:78:be:c6:20:3f:be:6c:6a:cb:6e:cd:28:ea:f7:
3a:b4:9d:55:5a:31:d0:2f:e6:93:24:1e:07:bd:26:7b:b0:cd:
1d:e8:c3:37:5c:4e:c3:ae:4e:48:3e:b9:74:c6:5d:6b:96:f7:
e6:17:18:62:3d:4b:5a:4a:c2:6e:50:24:1d:6f:8c:6a:ea:78:
1d:fe:23:0f:86:50:10:71:1a:32:c3:ab:79:ce:32:c9:21:24:
8c:80:10:0f:28:a9:62:07:52:57:aa:c9:19:33:8d:fb:fe:e0:
5e:26:e5:f9:81:af:4a:27:90:a9:62:20:05:df:9a:70:f2:81:
4c:a8:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:06 2025 by rpki-client