Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/A2crk7UZbu8_4qH0CpHeUOQgark.roa
File: A2crk7UZbu8_4qH0CpHeUOQgark.roa (raw, json)
Hash identifier: Wd+GchsuI7/HBLoWp2YMCVYT9nutar033wXqxKM6EqM=
Subject key identifier: 03:67:2B:93:B5:19:6E:EF:3F:E2:A1:F4:0A:91:DE:50:E4:20:6A:B9
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 018572FA8D038DE8D6D79AE4248015A5498E
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/A2crk7UZbu8_4qH0CpHeUOQgark.roa
Signing time: Mon 02 Jan 2023 14:55:00 +0000
ROA not before: Mon 02 Jan 2023 14:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31169
IP address blocks: 79.170.80.0/21 maxlen: 21
193.247.202.0/24 maxlen: 24
89.34.22.0/23 maxlen: 23
194.104.112.0/24 maxlen: 24
45.134.208.0/22 maxlen: 22
194.104.126.0/24 maxlen: 24
217.17.208.0/20 maxlen: 20
193.247.183.0/24 maxlen: 24
193.247.181.0/24 maxlen: 24
89.45.165.0/24 maxlen: 24
193.247.192.0/24 maxlen: 24
92.114.96.0/23 maxlen: 23
185.28.128.0/22 maxlen: 22
194.104.97.0/24 maxlen: 24
194.104.98.0/24 maxlen: 24
84.247.63.0/24 maxlen: 24
91.126.0.0/20 maxlen: 20
195.88.32.0/23 maxlen: 23
2a04:2740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:8d:03:8d:e8:d6:d7:9a:e4:24:80:15:a5:49:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jan 2 14:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03672b93b5196eef3fe2a1f40a91de50e4206ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:9d:4e:ab:78:2d:1b:fd:6c:d7:cd:4b:bb:
8f:8c:6f:6b:f7:73:43:25:f1:e3:a2:3c:af:c9:22:
a5:6e:9e:1a:62:d6:e5:26:a2:b5:70:33:b9:c4:fd:
a0:6a:50:47:2a:32:55:fc:a5:c5:23:47:de:94:4b:
16:68:77:06:39:b8:79:a3:d4:f6:22:39:a5:5b:b4:
6c:ba:4a:bc:97:44:7a:5e:15:87:1e:9b:21:68:da:
10:61:48:c6:0d:30:8d:46:2d:b7:7b:2a:f1:06:92:
b1:d9:4f:f9:17:f4:3b:86:19:73:3a:09:80:37:c1:
61:56:b7:3f:bb:ff:91:45:58:1e:a1:95:84:da:6b:
c4:96:f2:c3:1a:94:cf:76:d6:4e:d9:36:2a:59:58:
8e:2d:cc:67:b9:cf:53:28:46:4e:7d:53:c2:e9:ef:
07:7c:01:9d:0c:e4:89:cb:9a:e7:51:c0:ae:1b:91:
21:c0:c1:f4:3c:b7:30:71:d5:16:fd:2c:be:68:e3:
c8:a1:2b:7d:fa:8d:e1:6c:d4:fe:2b:56:e5:ac:7d:
52:14:31:4e:28:4c:c3:8a:cf:b3:b1:bf:30:28:2b:
61:3c:48:e8:8a:74:ef:f6:3a:df:db:01:21:d2:08:
c7:88:db:2c:3b:04:ae:b7:c7:ee:be:98:77:31:23:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:2B:93:B5:19:6E:EF:3F:E2:A1:F4:0A:91:DE:50:E4:20:6A:B9
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/A2crk7UZbu8_4qH0CpHeUOQgark.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.208.0/22
79.170.80.0/21
84.247.63.0/24
89.34.22.0/23
89.45.165.0/24
91.126.0.0/20
92.114.96.0/23
185.28.128.0/22
193.247.181.0/24
193.247.183.0/24
193.247.192.0/24
193.247.202.0/24
194.104.97.0-194.104.98.255
194.104.112.0/24
194.104.126.0/24
195.88.32.0/23
217.17.208.0/20
IPv6:
2a04:2740::/29
Signature Algorithm: sha256WithRSAEncryption
48:56:2b:02:84:f4:31:d9:b5:93:3d:41:dc:16:c2:7b:02:3c:
0c:e7:65:cd:52:ff:55:7d:37:c8:22:41:4f:fe:99:f9:b3:1f:
94:98:0b:7f:55:3f:b8:5c:10:bd:82:19:cc:5c:b9:9d:9c:c9:
56:ea:62:b3:18:a1:e8:79:c1:b8:cb:e2:8a:2c:b6:05:98:d7:
4e:40:31:be:ce:d9:a4:77:a7:f1:14:08:e0:1e:c6:66:7b:f2:
75:b1:5a:87:34:bf:ac:ec:35:01:68:20:72:a1:1a:ca:b5:8b:
dd:cf:92:b2:e7:6d:1d:59:dd:a0:71:af:b5:5c:a9:92:21:df:
ce:c3:4a:88:09:b6:2a:b3:29:5d:d5:94:71:72:2c:04:5a:69:
c6:69:4a:53:20:26:50:60:2c:62:7a:a6:d0:a8:4b:f7:83:32:
14:2a:b8:06:5b:be:d9:de:8a:21:92:65:a5:9e:5f:ee:6a:e9:
41:df:69:69:b7:5d:73:49:c4:03:52:95:9c:45:22:5f:90:69:
02:1c:b4:28:7c:ed:ea:44:0a:a1:fb:64:f2:f5:60:d2:45:e5:
44:aa:93:a8:60:c9:d9:81:44:08:38:26:7c:6a:2c:22:09:f0:
9b:87:fe:da:ac:2f:44:85:d1:5c:ec:95:6a:31:dc:30:67:c5:
c7:36:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:12 2025 by rpki-client