Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aDI5FTlIJGm9mzP2ixjJ6ZGLQBA.roa
File: aDI5FTlIJGm9mzP2ixjJ6ZGLQBA.roa (raw, json)
Hash identifier: FeTZLTiVmGkm98x2ufvnuhExMIZilM3+HH5y8hI9mKE=
Subject key identifier: 68:32:39:15:39:48:24:69:BD:9B:33:F6:8B:18:C9:E9:91:8B:40:10
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 0186D9F3B6CC95EEE32F8F4AB2E9A3311991
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aDI5FTlIJGm9mzP2ixjJ6ZGLQBA.roa
Signing time: Mon 13 Mar 2023 07:51:13 +0000
ROA not before: Mon 13 Mar 2023 07:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61275
IP address blocks: 188.93.184.0/21 maxlen: 21
185.24.188.0/22 maxlen: 22
85.93.224.0/19 maxlen: 19
178.248.96.0/21 maxlen: 21
91.135.48.0/21 maxlen: 21
91.135.58.0/24 maxlen: 24
5.100.176.0/21 maxlen: 21
91.135.56.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
185.3.0.0/22 maxlen: 22
77.223.162.0/23 maxlen: 23
77.223.172.0/22 maxlen: 22
5.100.184.0/22 maxlen: 22
91.135.60.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
2a03:ba01::/32 maxlen: 32
2a03:ba00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:f3:b6:cc:95:ee:e3:2f:8f:4a:b2:e9:a3:31:19:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Mar 13 07:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6832391539482469bd9b33f68b18c9e9918b4010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:59:a1:d9:5f:42:de:96:b7:24:03:0d:d1:
69:d0:6f:5f:73:bf:a1:92:da:72:aa:b1:be:6d:71:
19:b7:e3:d7:56:ed:2d:7a:91:21:1c:4c:45:53:ee:
0b:6b:15:f8:0e:57:f6:35:02:f1:6e:f5:64:3d:0b:
13:2d:65:e1:aa:e9:48:28:a8:54:ce:9c:c2:51:49:
61:1b:72:ea:6a:79:9f:49:03:ba:06:cf:31:35:e5:
bb:2b:b0:1b:16:40:b9:53:6c:e7:7b:78:35:90:c9:
c9:fe:74:17:a0:78:5c:8f:56:45:08:4c:eb:20:8c:
2f:bc:c6:c2:c3:f2:7d:19:95:a5:9f:25:0c:16:8d:
9f:2c:2a:a6:a5:a2:a1:5e:1e:c3:e6:ac:70:13:2b:
56:f2:ce:3c:e4:ba:28:73:4a:08:2b:ba:79:f7:bc:
48:84:04:57:77:c4:b8:d6:c0:5a:88:20:7d:19:cc:
37:e3:f8:8a:40:bd:e6:21:d0:d3:a8:ae:1a:5e:4d:
ff:43:2d:1d:59:54:aa:d2:98:a1:dd:ef:f5:f3:27:
c6:9e:6a:d7:70:20:26:41:e2:15:98:d1:f0:9c:9f:
fa:23:19:d5:c0:d4:4e:db:05:95:36:0a:85:68:a8:
d1:2b:3e:df:ec:39:70:17:0e:72:bb:0e:f4:db:4f:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:39:15:39:48:24:69:BD:9B:33:F6:8B:18:C9:E9:91:8B:40:10
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aDI5FTlIJGm9mzP2ixjJ6ZGLQBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.176.0-5.100.187.255
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
IPv6:
2a03:ba00::/31
Signature Algorithm: sha256WithRSAEncryption
45:e5:91:72:3e:08:f5:86:f2:ae:45:90:b7:3d:40:da:36:b8:
2f:c9:ce:44:40:79:05:9f:78:89:ce:5e:c6:b7:14:68:46:31:
47:d5:3e:75:09:9a:af:62:ae:08:df:55:96:46:10:62:d5:1a:
ad:fd:a6:86:10:52:ed:33:35:a8:17:72:b7:c2:3e:48:65:4b:
90:c9:9b:18:3e:5c:25:c7:a8:8e:d3:fc:2a:78:eb:1d:45:78:
b1:70:98:53:c1:01:7d:9a:d4:a8:fd:85:03:1a:02:70:b6:c8:
97:13:78:6d:36:bf:42:7d:46:44:e8:e3:59:6d:dc:0e:7c:2e:
9a:07:5c:8a:db:34:79:69:ea:78:0e:89:4f:5e:62:ea:ed:0d:
d5:19:03:ac:39:7b:29:81:f5:5e:bd:b1:0a:c0:d9:ba:73:1a:
b0:e5:38:8e:05:f3:a5:5a:55:e7:df:fd:a7:0c:cb:7a:63:a4:
66:5d:e9:2c:82:ce:f0:48:d7:36:29:15:e1:48:91:fd:87:d4:
82:b9:57:54:57:96:d8:a8:c9:21:3e:06:42:c9:cb:92:2b:56:
5c:30:8f:b0:cc:3c:2f:6d:a2:5f:ab:97:3b:1b:b2:ef:6c:53:
00:cc:58:c1:31:55:98:11:f9:7e:9e:08:1e:49:d7:ab:3d:36:
9a:e4:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:10 2025 by rpki-client