Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/tjFgvpL1siEvIa-l_jp78ZKWjz4.roa
File: tjFgvpL1siEvIa-l_jp78ZKWjz4.roa (raw, json)
Hash identifier: +2mWW8KuTf+R672F4f2hwNiRpkAcynvY+yoNe1onHP4=
Subject key identifier: B6:31:60:BE:92:F5:B2:21:2F:21:AF:A5:FE:3A:7B:F1:92:96:8F:3E
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018C206E32F1DB7C11E3524E00CF3D2911CA
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/tjFgvpL1siEvIa-l_jp78ZKWjz4.roa
Signing time: Thu 30 Nov 2023 13:32:22 +0000
ROA not before: Thu 30 Nov 2023 13:32:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47890
IP address blocks: 45.129.15.0/24 maxlen: 24
2.57.122.0/24 maxlen: 24
92.118.37.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.138.96.0/24 maxlen: 24
45.138.97.0/24 maxlen: 24
45.138.98.0/24 maxlen: 24
45.138.99.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
80.94.94.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
45.148.9.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:6e:32:f1:db:7c:11:e3:52:4e:00:cf:3d:29:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 30 13:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63160be92f5b2212f21afa5fe3a7bf192968f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:dc:75:63:e1:e4:cc:29:2d:75:46:61:70:
45:c3:8b:a1:d2:b0:42:91:20:7f:04:7e:fc:66:32:
f5:33:ca:4d:7a:65:84:30:c4:c5:1a:cb:e5:80:82:
75:22:66:e2:a8:00:85:76:19:89:8c:9e:fc:10:a7:
3a:73:e0:3d:cd:e9:81:16:de:01:f5:c0:13:18:78:
14:87:ee:a9:49:d3:6a:1f:ab:e2:67:e5:91:4f:a2:
de:1a:26:fc:b6:ee:a8:e5:85:f4:7b:92:3e:e0:c9:
7d:3a:ba:b7:b0:e4:78:54:fe:33:00:ab:c9:20:30:
6c:1f:24:3b:04:27:0a:4f:27:6a:b9:cf:c2:b8:67:
f7:09:05:ab:16:2a:7a:35:d9:90:a1:18:34:5f:1f:
06:da:be:0f:80:b0:b4:bd:31:15:0c:7c:64:5d:66:
28:ce:c6:54:e8:25:0e:e2:3c:b6:80:e5:a5:9d:5a:
73:11:1e:5b:35:1f:07:e0:24:55:eb:d7:8b:4e:86:
d4:16:c2:ea:17:9d:50:56:cb:6b:a0:ce:c0:60:ca:
aa:d1:b7:b5:96:1e:9c:5b:62:79:99:1e:97:21:c0:
7b:cb:5f:07:e0:14:cf:12:3a:0b:a6:72:7d:9f:3c:
6c:db:95:5f:a2:f5:8d:5f:de:06:3b:76:82:98:86:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:31:60:BE:92:F5:B2:21:2F:21:AF:A5:FE:3A:7B:F1:92:96:8F:3E
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/tjFgvpL1siEvIa-l_jp78ZKWjz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.15.0/24
45.138.96.0/22
45.148.9.0/24
45.148.11.0/24
80.94.92.0/24
80.94.94.0/24
92.118.37.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.162.0/23
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
12:6e:c9:8c:30:49:ce:97:1c:74:bd:6c:61:b0:b9:4f:a1:9f:
ab:94:d4:73:83:fa:18:68:7f:4e:62:6c:fc:6a:35:11:23:53:
4f:c3:bd:26:5b:d1:c1:68:fe:68:b0:f8:e9:fe:99:c5:a8:b0:
e2:c2:7d:6e:32:f0:eb:ec:91:63:58:7d:9e:cf:b4:68:9b:84:
a4:c9:26:ee:c9:5a:ac:95:78:e9:81:9c:71:3f:c4:cd:5d:f9:
8a:fe:7b:e8:e8:79:32:93:ad:e9:1b:19:7d:8f:76:ad:eb:40:
3a:09:c3:b2:62:ad:2e:0f:e8:ea:fc:a4:62:8a:1a:bb:4c:f4:
34:9f:7e:f4:b8:60:3f:b3:23:9f:85:64:ea:e3:0b:9c:1e:03:
71:88:f5:69:c5:41:3b:4e:13:4e:5f:f8:ed:fb:a0:d1:1b:fe:
0b:93:30:94:1d:63:42:e6:dd:6d:0d:8e:cc:97:f4:5d:e2:b6:
12:dd:fb:7f:88:2a:72:a3:65:07:89:c4:cb:0c:83:c9:be:26:
1e:66:25:5e:c3:33:07:3c:9f:62:c9:fd:53:4c:6d:95:c9:45:
75:ed:04:34:15:fd:ca:98:5e:ec:0e:d8:b4:e6:02:66:b9:73:
08:48:e0:94:8f:cf:a6:1b:50:7d:1e:3c:8d:78:4d:64:79:c6:
25:42:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:50 2025 by rpki-client