Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/w8orWzNGiFo06MUHAHDZU2LvS9o.roa
File: w8orWzNGiFo06MUHAHDZU2LvS9o.roa (raw, json)
Hash identifier: 0NX+LwaZYrv2iPcvJjlyn1Dg8rKsn9v0v8/gSjSvDfs=
Subject key identifier: C3:CA:2B:5B:33:46:88:5A:34:E8:C5:07:00:70:D9:53:62:EF:4B:DA
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0185ABCA1EFB31EEB794EF716F1DAC1281FB
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/w8orWzNGiFo06MUHAHDZU2LvS9o.roa
Signing time: Fri 13 Jan 2023 15:40:28 +0000
ROA not before: Fri 13 Jan 2023 15:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 45.8.179.0/24 maxlen: 24
185.217.136.0/24 maxlen: 24
185.217.137.0/24 maxlen: 24
45.8.178.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:ca:1e:fb:31:ee:b7:94:ef:71:6f:1d:ac:12:81:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 13 15:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ca2b5b3346885a34e8c5070070d95362ef4bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:18:ea:9c:12:ff:86:94:b5:4e:a2:a1:01:
dc:0d:52:23:16:fa:e4:92:16:f5:4e:0b:d2:ab:49:
59:85:55:da:10:73:28:bf:1f:55:2d:9d:89:4b:0b:
9e:e6:d9:31:55:71:03:4e:01:01:84:69:fd:2e:f3:
ad:ea:c5:18:53:d0:52:33:b2:c6:5f:1d:38:61:7f:
a2:ec:81:84:13:15:a2:42:9b:4a:46:e2:23:f5:db:
a4:e7:70:fe:a1:3a:43:7d:a8:40:b2:c7:89:2c:99:
6c:f2:bc:b5:5f:19:66:18:cb:eb:23:3a:fa:30:ae:
d6:03:08:45:42:70:26:c7:a8:ae:65:52:f2:2c:97:
05:fc:ee:5a:9c:62:6c:7f:fa:9c:e2:2b:c5:c5:a9:
f1:bb:07:92:fa:3e:ba:f4:0d:03:b4:fb:8e:4f:96:
34:6e:8f:35:cc:5b:ae:75:55:02:9e:af:17:10:29:
81:03:1f:09:2b:8d:e8:fe:b9:9c:6e:6e:17:c0:37:
32:ee:2d:2c:e0:e4:1f:c1:d5:46:a5:97:14:6f:99:
bd:df:a7:5b:e0:88:05:68:99:97:72:dd:7d:9c:68:
da:ce:17:63:1f:47:2e:31:68:b5:02:bb:53:11:82:
c5:4a:2d:ca:09:86:33:95:a9:a7:4f:86:91:67:67:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:2B:5B:33:46:88:5A:34:E8:C5:07:00:70:D9:53:62:EF:4B:DA
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/w8orWzNGiFo06MUHAHDZU2LvS9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/23
45.148.146.0/23
185.217.136.0/23
Signature Algorithm: sha256WithRSAEncryption
29:39:c5:61:e9:f1:2b:60:6a:a9:f3:63:d0:f7:92:a4:03:9a:
72:b5:bc:d6:03:3a:3a:7f:19:8a:a5:25:b9:78:65:e4:61:64:
61:ea:ee:32:9f:6a:5d:8d:a7:1d:c4:7c:8e:a7:da:67:4b:4e:
2b:c1:66:5a:22:5a:d1:55:d4:93:f4:10:86:9a:7a:01:d7:a6:
b9:db:1f:74:6a:e4:6e:43:cc:51:e0:0a:b9:02:27:07:da:ef:
1e:ef:82:ef:61:0e:9f:e4:09:ba:0b:79:04:59:11:56:5e:05:
85:e1:d8:01:b0:f2:bf:f6:7c:42:be:3c:84:fb:f7:0e:88:c1:
c7:48:ca:62:e6:a5:91:3b:f7:b7:25:cf:90:71:28:81:6b:14:
70:be:c5:e3:00:12:86:54:88:20:8f:05:5d:28:61:48:39:26:
ce:77:89:50:b8:ac:2e:c2:2f:81:fd:05:85:ba:89:d1:29:24:
86:a9:dc:6d:52:fd:fe:21:5d:79:9e:9d:dc:c2:83:e8:bf:f6:
26:c7:3e:31:e1:f7:72:74:43:43:3d:60:3c:09:d0:76:7a:5d:
7c:8a:b4:1d:d0:9e:a6:21:6a:e3:2f:ca:55:1f:81:32:bf:2f:
66:31:16:1a:4d:6d:6f:92:b8:04:a0:3c:43:85:45:06:c4:52:
32:7c:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:55 2025 by rpki-client