Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/mlysuNyv8RHJ78tN1TalxMtdx-A.roa
File: mlysuNyv8RHJ78tN1TalxMtdx-A.roa (raw, json)
Hash identifier: 0emHj5cdxdr/AkF0JcUCAXlSPgSoIBWA84S65WStEaY=
Subject key identifier: 9A:5C:AC:B8:DC:AF:F1:11:C9:EF:CB:4D:D5:36:A5:C4:CB:5D:C7:E0
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0187B00133BAAAB6D3D049EBE1CAB78E00AC
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/mlysuNyv8RHJ78tN1TalxMtdx-A.roa
Signing time: Sun 23 Apr 2023 21:24:41 +0000
ROA not before: Sun 23 Apr 2023 21:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
2.57.123.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.13.214.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
45.142.193.0/24 maxlen: 24
45.13.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b0:01:33:ba:aa:b6:d3:d0:49:eb:e1:ca:b7:8e:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Apr 23 21:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5cacb8dcaff111c9efcb4dd536a5c4cb5dc7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:2f:fe:85:3d:1c:21:4d:f7:49:7f:11:13:
8d:da:81:c2:2c:3e:c6:6e:be:85:5c:e3:b1:b2:c0:
0b:8c:f5:b3:35:83:ae:5d:71:ba:11:c8:82:93:a1:
e5:2d:51:9d:be:72:9f:da:a8:df:ab:01:23:88:98:
1b:fa:7b:1b:69:6c:52:99:05:f4:e4:3e:0e:90:a1:
5b:5e:0a:09:fe:5f:23:fd:c9:d6:79:35:0f:87:0d:
37:d5:e8:7e:61:81:5d:22:4a:bc:0d:9f:6a:c3:48:
c5:5e:78:00:d4:1f:e4:3a:c7:f8:65:07:b5:c9:09:
e7:a5:ca:68:49:20:a4:d6:ca:9a:ca:e7:85:30:1b:
a7:b9:78:6b:99:a4:2a:99:70:ac:bf:cf:8b:f2:ea:
71:49:8b:f9:1c:ee:c1:48:76:c1:7d:9a:a8:08:40:
9c:16:09:a6:f5:07:4a:01:72:80:a6:f1:f7:2f:8d:
d9:25:98:61:db:af:7b:2c:e2:96:e6:0f:a6:92:eb:
90:a7:ab:26:88:a7:9e:60:f0:05:b4:be:e0:79:bc:
8e:ea:9d:4e:c8:3d:03:52:12:47:85:23:20:47:a6:
73:bc:61:08:cb:de:10:e9:bd:e6:8c:48:57:77:b2:
bd:d5:96:e7:ed:e4:0c:d3:21:b7:55:a5:8e:16:07:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:AC:B8:DC:AF:F1:11:C9:EF:CB:4D:D5:36:A5:C4:CB:5D:C7:E0
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/mlysuNyv8RHJ78tN1TalxMtdx-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.123.0/24
45.13.36.0/24
45.13.214.0/23
45.129.12.0/24
45.134.49.0-45.134.50.255
45.142.193.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e1:8d:5a:16:19:f5:94:5f:05:ed:9e:65:50:78:05:53:29:
ad:de:b1:6f:f1:1d:79:52:10:80:30:43:ab:26:98:fb:9f:fb:
b2:0c:21:89:28:1c:80:95:4a:63:71:b5:e4:99:3b:1a:62:46:
e1:ad:90:09:8c:3b:fb:f0:21:ca:bc:a9:0c:98:f4:42:13:49:
b2:18:55:0d:b8:1b:39:71:f9:76:32:d6:dc:eb:9c:4d:70:7d:
d4:11:30:0a:65:5d:83:0a:05:36:7e:74:34:6b:09:17:52:41:
e1:e2:f6:d8:2c:d1:5b:8d:7f:cf:28:99:7c:f5:58:04:1d:e1:
62:3d:4e:4f:05:50:e3:cf:0a:1d:fc:ed:59:8f:02:e9:ed:62:
00:fc:87:5e:fc:25:61:86:f1:c9:9b:eb:c0:6e:da:57:c2:ad:
75:ec:81:4c:c4:b8:bb:7a:8d:c3:46:2b:a1:c9:cf:18:35:90:
76:f6:62:87:0e:77:cc:4c:8a:47:fa:8b:38:2f:b9:f5:81:81:
01:b9:d0:bf:a3:93:10:af:4e:ae:df:65:cf:cd:18:fa:5d:ab:
f9:7f:2c:94:ca:d0:c8:e8:65:a3:c1:a6:a2:72:64:48:f5:58:
61:a4:05:62:28:e0:f4:be:1a:8c:28:b4:57:85:11:52:cd:a3:
00:ed:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:49 2025 by rpki-client