Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3VXpp8uJG2DACOIhfqprvHcqGGk.roa
File: 3VXpp8uJG2DACOIhfqprvHcqGGk.roa (raw, json)
Hash identifier: MBTi/TaTI63YQ+/QGUE9XuPruo4/aixN94uWuvhv1OA=
Subject key identifier: DD:55:E9:A7:CB:89:1B:60:C0:08:E2:21:7E:AA:6B:BC:77:2A:18:69
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 018A9350A40AE324E231BED4EC3F0E43720A
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3VXpp8uJG2DACOIhfqprvHcqGGk.roa
Signing time: Thu 14 Sep 2023 10:50:50 +0000
ROA not before: Thu 14 Sep 2023 10:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61275
IP address blocks: 188.93.184.0/21 maxlen: 21
185.24.188.0/22 maxlen: 22
85.93.224.0/19 maxlen: 19
178.248.96.0/21 maxlen: 21
91.135.48.0/21 maxlen: 21
91.135.58.0/24 maxlen: 24
5.100.176.0/21 maxlen: 21
91.135.56.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
185.3.0.0/22 maxlen: 22
77.223.162.0/23 maxlen: 23
77.223.172.0/22 maxlen: 22
5.100.184.0/22 maxlen: 22
91.135.60.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
2a03:ba02::/32 maxlen: 32
2a03:ba01::/32 maxlen: 32
2a03:ba00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:50:a4:0a:e3:24:e2:31:be:d4:ec:3f:0e:43:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Sep 14 10:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd55e9a7cb891b60c008e2217eaa6bbc772a1869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:2d:49:f1:c6:71:45:88:80:68:19:a8:ad:
65:9c:5e:54:17:23:4c:3d:23:c7:96:2b:b5:2f:6b:
95:d1:3e:7f:58:f6:9f:0b:eb:8d:56:35:58:6b:db:
e2:e0:b5:58:d8:f9:ce:ba:ab:1e:ec:bc:9b:a0:86:
81:ac:ea:98:dc:7e:ba:09:ad:64:5a:27:80:a2:6e:
c3:d5:37:bc:6e:e4:ea:08:4a:89:fb:af:0c:f4:2c:
11:2c:0f:58:58:43:29:40:dc:98:b9:a5:9a:50:f4:
7f:4a:93:b3:6b:54:56:fe:dd:c7:7d:64:d7:72:97:
3f:ba:74:21:e0:53:31:67:75:50:5c:08:75:75:c1:
d8:cc:1e:80:ff:06:68:08:16:42:2d:c9:3f:9f:65:
56:3e:fa:13:ab:17:4e:c7:f8:4f:f8:ae:33:fd:51:
d2:83:47:8f:4d:2b:b6:1a:cc:f6:70:98:ad:f9:76:
0a:02:13:ce:73:fe:ca:81:99:df:bd:37:1b:23:1d:
23:76:84:cc:74:22:20:8d:51:56:d1:fb:1b:47:7d:
3e:b3:6b:70:ef:d2:94:af:2d:d7:13:d0:a1:e6:6f:
cd:6a:7c:0c:95:5a:39:56:ff:c2:8e:90:43:69:20:
1f:79:be:63:59:af:d5:5c:e4:49:66:a7:65:4a:8e:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:E9:A7:CB:89:1B:60:C0:08:E2:21:7E:AA:6B:BC:77:2A:18:69
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3VXpp8uJG2DACOIhfqprvHcqGGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.176.0-5.100.187.255
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
IPv6:
2a03:ba00::-2a03:ba02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:2e:38:3d:6a:a9:a6:96:2e:cd:9d:c1:d4:eb:c3:7a:a8:4e:
10:19:77:c1:14:e5:1c:6b:f9:9b:38:3b:b3:21:82:ec:6e:62:
b8:41:ea:3e:52:10:f7:a0:64:cc:40:be:2e:56:30:de:e1:c5:
f0:80:de:de:ab:e4:a9:79:be:52:2d:da:c1:93:af:12:21:98:
47:6b:66:4c:99:f0:d1:65:41:6c:3e:b2:b0:7c:c6:25:c1:08:
9c:b7:02:fe:ef:76:a5:10:db:f0:56:4b:e2:4e:b7:0a:e4:2c:
57:59:1f:bf:62:1d:fd:69:73:a1:14:09:6a:85:97:dc:5a:62:
c3:04:b3:79:57:8e:32:b8:15:5d:63:b1:2d:74:23:ad:71:48:
29:99:92:7c:04:c2:60:98:df:11:e6:33:de:06:29:f7:89:1e:
78:a6:c4:59:73:ad:8b:f6:bf:db:23:2f:01:e3:1d:8e:39:15:
26:47:59:5d:ce:e1:00:e2:c4:54:48:4d:5b:6f:a7:4d:ea:c2:
91:e5:d7:ea:8a:96:33:e2:32:97:ef:bc:44:51:10:f7:e4:98:
2f:e7:c9:bb:3f:39:72:ab:aa:62:ce:61:c1:3a:c3:3a:9f:42:
e2:23:02:2b:bf:17:98:aa:da:54:f1:f8:4c:a1:6f:4f:db:96:
4f:bd:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:55 2025 by rpki-client