Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/PMxH5OnSuagz1Iwvm6X5W58XwlM.roa
File: PMxH5OnSuagz1Iwvm6X5W58XwlM.roa (raw, json)
Hash identifier: wbOWKnlkw78AZhY5dwUng1hwoc3pCnXbOaqyXWgfYBA=
Subject key identifier: 3C:CC:47:E4:E9:D2:B9:A8:33:D4:8C:2F:9B:A5:F9:5B:9F:17:C2:53
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 018B8F171307DBEA529A262A0BBCEABAECF6
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/PMxH5OnSuagz1Iwvm6X5W58XwlM.roa
Signing time: Thu 02 Nov 2023 08:12:15 +0000
ROA not before: Thu 02 Nov 2023 08:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41959
IP address blocks: 195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
185.79.32.0/22 maxlen: 22
193.242.146.0/23 maxlen: 23
195.80.229.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
195.93.142.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:17:13:07:db:ea:52:9a:26:2a:0b:bc:ea:ba:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Nov 2 08:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ccc47e4e9d2b9a833d48c2f9ba5f95b9f17c253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:2d:92:9a:b6:9f:d6:73:b3:28:ae:f8:43:
40:f9:09:3a:6a:a0:2f:e3:d2:6a:3c:91:45:cf:bb:
b0:d4:48:58:ea:95:cf:2f:fa:13:1b:03:ea:c4:65:
59:d3:da:af:35:ea:ee:d1:17:4e:e9:0b:20:a5:bf:
bc:c2:0e:d5:98:2c:c5:21:84:57:fa:31:84:b2:8a:
22:7c:7d:0a:6c:1e:66:7a:ef:89:82:89:8e:83:26:
f4:1f:ce:82:11:b5:69:42:73:e9:59:f3:b1:5d:8b:
9f:1b:be:e7:e2:04:76:ba:1a:ea:45:ff:5e:b8:0f:
9e:b4:8e:9b:1e:66:65:91:a4:f2:11:cd:0c:8d:52:
e9:96:df:8d:34:0f:0b:51:0c:b8:35:41:6d:ac:59:
b4:3b:e1:9e:31:87:dc:d6:14:88:a1:10:fe:7e:e9:
a8:43:d9:7f:8d:11:6e:18:6f:29:36:31:ec:6f:d5:
58:22:d8:50:65:0b:97:88:a2:b1:b3:78:87:6a:87:
22:1d:ed:57:35:27:53:8a:49:ce:37:56:0d:8f:35:
99:f8:90:dd:d7:d5:67:fa:72:9f:25:15:56:66:5b:
1c:f9:21:85:31:a9:a7:ca:5c:cb:2e:3f:a4:e3:08:
66:4d:6e:8e:37:7d:1c:d8:ab:58:fa:c0:7c:e9:7e:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:47:E4:E9:D2:B9:A8:33:D4:8C:2F:9B:A5:F9:5B:9F:17:C2:53
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/PMxH5OnSuagz1Iwvm6X5W58XwlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.96.0/23
185.79.32.0/22
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:a2:78:6d:34:73:ed:f8:a9:a4:a7:1a:8d:69:b2:44:d7:
8b:84:90:9a:20:ce:b5:06:b2:7a:1d:ae:32:99:86:0a:c4:b5:
cf:f2:78:49:83:e8:9f:04:b6:82:e2:ea:e2:8c:36:a0:f9:da:
d5:0e:37:20:7a:88:2c:0e:1d:3f:82:7d:0e:07:23:6f:fb:13:
4a:f1:42:aa:7b:6a:40:8a:6f:04:b6:30:b2:a3:fa:01:6a:76:
5d:95:87:f1:29:aa:44:31:96:b9:11:52:3e:cd:11:72:25:c2:
8b:bc:33:71:1a:83:59:f4:a1:ac:87:a3:04:8f:18:20:7c:0e:
1c:8e:3d:82:29:f9:24:ff:db:2c:f7:9e:3e:b1:3d:14:39:56:
8a:72:3e:e9:6d:15:8f:06:0e:98:4c:0d:05:9f:30:bc:96:4e:
4b:38:0e:d8:66:14:5b:a3:46:5b:43:dd:1f:54:9b:c6:b5:7e:
90:20:54:57:d6:78:f0:b0:c1:57:81:96:35:84:a6:7a:76:c3:
42:10:21:09:f8:6e:ac:c7:bf:16:f4:aa:42:46:19:bb:2b:a1:
15:6a:30:63:4f:1e:01:e8:5c:7c:6a:d3:3e:0d:51:8f:3e:34:
4d:f7:97:d3:de:04:78:1a:50:9a:1b:66:c8:ca:6b:f9:b1:1f:
69:e8:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:50 2025 by rpki-client