Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/FkzCLpYqV96w1u4O_yyDW2bRXSM.roa
File: FkzCLpYqV96w1u4O_yyDW2bRXSM.roa (raw, json)
Hash identifier: UBfrfYx0decv+SLFOWRjHPJTWHhoL2+k4HL6rlxDzfE=
Subject key identifier: 16:4C:C2:2E:96:2A:57:DE:B0:D6:EE:0E:FF:2C:83:5B:66:D1:5D:23
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 018C39633FE9490A061A346A768E9F303E7A
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/FkzCLpYqV96w1u4O_yyDW2bRXSM.roa
Signing time: Tue 05 Dec 2023 09:50:54 +0000
ROA not before: Tue 05 Dec 2023 09:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43925
IP address blocks: 89.45.0.0/22 maxlen: 22
89.45.0.0/23 maxlen: 23
89.45.2.0/23 maxlen: 23
185.32.0.0/22 maxlen: 22
37.34.96.0/19 maxlen: 24
37.34.96.0/22 maxlen: 24
37.34.105.0/24 maxlen: 24
37.34.100.0/22 maxlen: 24
37.34.106.0/24 maxlen: 24
37.34.108.0/22 maxlen: 24
37.34.107.0/24 maxlen: 24
37.34.112.0/20 maxlen: 24
79.170.224.0/21 maxlen: 24
37.34.120.0/21 maxlen: 24
178.76.76.0/22 maxlen: 22
178.76.80.0/20 maxlen: 22
94.139.128.0/19 maxlen: 23
178.76.96.0/19 maxlen: 21
93.113.112.0/21 maxlen: 22
2a00:f900::/32 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:63:3f:e9:49:0a:06:1a:34:6a:76:8e:9f:30:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Dec 5 09:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164cc22e962a57deb0d6ee0eff2c835b66d15d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:60:b4:99:ad:e0:57:e9:47:b5:c6:a9:ea:
1e:03:63:58:8d:c8:d6:f8:cc:17:58:71:d2:55:45:
90:30:e6:52:53:06:cb:cb:bb:59:c3:7c:27:f6:2a:
98:e1:07:86:b5:69:3f:d9:dd:43:7a:75:25:43:ef:
30:1f:f5:43:1f:7e:01:9f:58:d9:35:17:77:a9:05:
57:47:e6:75:87:f5:24:aa:f0:28:96:ee:2e:dd:f3:
e7:e5:56:ed:70:02:ec:eb:f1:ff:17:58:80:6a:24:
d8:77:8c:7a:c2:76:dc:46:5f:28:a6:c3:8c:91:87:
64:2a:29:ac:08:90:3b:6a:21:72:70:67:8e:27:eb:
9a:58:7e:68:bd:f8:35:ef:7c:7f:06:d0:c1:52:c3:
6a:ae:38:6a:9a:07:c1:92:ef:82:ed:80:fc:05:03:
b5:d2:1e:ec:49:6e:62:91:d2:fc:22:42:9d:45:c2:
c7:e1:45:09:3d:c9:f4:c0:70:64:d7:42:e2:d2:c0:
bb:12:9a:30:90:7a:ac:3d:fa:02:57:da:67:cc:73:
51:04:55:6b:29:99:ac:d8:5e:f9:04:50:41:eb:34:
6d:53:39:1e:6d:86:df:7e:8c:12:ae:c0:af:4a:10:
fe:83:10:8f:2e:a8:20:50:50:82:32:ab:f2:09:6c:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:C2:2E:96:2A:57:DE:B0:D6:EE:0E:FF:2C:83:5B:66:D1:5D:23
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/FkzCLpYqV96w1u4O_yyDW2bRXSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.96.0/19
79.170.224.0/21
89.45.0.0/22
93.113.112.0/21
94.139.128.0/19
178.76.76.0-178.76.127.255
185.32.0.0/22
IPv6:
2a00:f900::/32
Signature Algorithm: sha256WithRSAEncryption
51:56:d7:02:6a:51:d9:af:ee:ab:88:63:eb:2f:e3:0c:b0:ea:
43:63:8b:ff:5a:eb:78:2b:cd:27:58:a7:cb:45:50:6c:c8:a6:
7a:11:d0:5d:27:d8:2e:fc:5c:9e:47:e4:d6:84:cc:7d:5b:14:
52:7d:48:91:d4:03:15:37:62:58:bb:ff:d7:96:63:fa:0c:76:
ab:02:cb:e9:c6:18:1a:ca:d8:6e:8c:45:a0:92:a5:e2:96:98:
c8:50:ff:9a:f9:9a:88:5e:41:f1:f0:cc:47:db:85:ab:1c:8e:
b5:14:a3:48:10:99:12:b3:11:70:9a:0d:e4:2a:22:56:de:72:
c8:6c:d6:99:2e:2d:74:31:76:63:25:3b:32:43:e7:13:1c:af:
58:fd:e5:44:87:4b:98:1c:07:45:a1:11:88:5e:c8:46:0f:08:
06:60:68:d4:e5:e2:21:63:b4:16:66:da:17:48:49:01:c5:d0:
17:bc:42:89:37:75:d6:e2:70:0c:5b:2a:04:dd:e3:71:17:08:
df:a1:54:da:74:48:8b:78:a5:ac:9d:70:8c:68:25:a3:71:0c:
61:97:97:fd:fe:1c:d1:3a:4f:31:03:59:73:30:34:c4:1d:85:
70:e6:bf:82:13:50:ab:2f:a8:d3:d9:ff:9c:2d:9d:79:61:18:
27:d2:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:04 2025 by rpki-client