Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/zMiec_ePdyxgtEO4hGXgEiZCdTQ.roa
File: zMiec_ePdyxgtEO4hGXgEiZCdTQ.roa (raw, json)
Hash identifier: YSMP+UszqC5wxyw+Y+3BfOGG2Z2FbCGHDKzDbic4FWM=
Subject key identifier: CC:C8:9E:73:F7:8F:77:2C:60:B4:43:B8:84:65:E0:12:26:42:75:34
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018AC8E4DF6CF50AFE7B80F1671286EC5E84
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/zMiec_ePdyxgtEO4hGXgEiZCdTQ.roa
Signing time: Sun 24 Sep 2023 20:32:37 +0000
ROA not before: Sun 24 Sep 2023 20:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47890
IP address blocks: 45.129.15.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
45.148.9.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
2.57.122.0/24 maxlen: 24
92.118.37.0/24 maxlen: 24
45.138.96.0/24 maxlen: 24
45.138.97.0/24 maxlen: 24
45.138.98.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.138.99.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
80.94.94.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:e4:df:6c:f5:0a:fe:7b:80:f1:67:12:86:ec:5e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Sep 24 20:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccc89e73f78f772c60b443b88465e01226427534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:c7:bf:d4:41:26:f4:d9:8f:5c:57:e1:8d:
af:69:39:ab:ef:4a:54:7e:47:4d:93:5d:90:32:32:
0c:28:2e:b5:7d:d1:f6:88:20:d3:36:7d:12:f0:82:
76:30:63:7d:2f:cf:f3:e8:2f:4d:b4:d8:a2:93:ac:
e9:22:d9:4f:47:06:81:14:a1:ec:08:4b:33:c8:77:
b3:3f:c0:99:4a:c5:c5:4f:0f:1c:54:6b:1e:57:b5:
a5:03:31:50:b6:61:e6:f2:96:6a:54:34:26:26:f4:
28:de:e1:10:00:0b:fd:f1:dc:46:05:61:b0:b9:f9:
7f:56:a9:ac:36:de:d6:b4:09:33:c4:a9:1b:fd:be:
e0:a4:de:d0:60:3e:13:72:28:6e:8c:1f:59:9a:8b:
f3:48:45:d5:5a:15:1f:88:d2:ff:bf:76:19:e7:b2:
24:00:95:56:94:5d:da:f6:af:39:4c:dc:ef:92:03:
1b:23:da:0b:8d:e5:ee:2f:c9:a8:00:ad:19:c5:3b:
d5:b5:fb:9a:63:a7:68:01:8f:58:8d:1b:21:b1:53:
42:76:fb:a2:35:8e:fe:ce:5f:1b:66:0f:4a:ad:c3:
db:b5:e4:e6:3b:a9:16:e3:fb:c4:cc:e0:a4:f2:a3:
cd:07:1e:30:16:1d:b8:5a:c8:b3:70:b5:e3:0b:b7:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:9E:73:F7:8F:77:2C:60:B4:43:B8:84:65:E0:12:26:42:75:34
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/zMiec_ePdyxgtEO4hGXgEiZCdTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.15.0/24
45.134.50.0/24
45.138.96.0/22
45.148.9.0/24
45.148.11.0/24
80.94.92.0/24
80.94.94.0/24
92.118.37.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.162.0/23
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
5f:26:d2:1a:8c:0a:76:40:8e:6a:65:5c:45:e9:8a:2f:8b:f2:
5e:3d:a8:e3:a7:d6:cd:a4:90:64:97:81:68:04:ac:38:e2:9d:
99:b2:e8:e0:33:da:9e:b2:fe:91:f3:c5:a9:ad:83:cc:e4:16:
47:32:39:35:d5:d2:fd:cd:af:57:b4:79:19:89:74:05:b6:5f:
a9:5d:07:af:7a:09:52:a0:83:a0:be:c1:e5:69:32:9b:4c:88:
a4:45:ea:d3:b1:57:70:06:96:ec:d7:87:8a:33:88:cd:73:8c:
ec:ec:23:7c:17:74:f0:92:6f:6a:24:40:70:ea:29:bd:a2:fe:
51:05:7d:45:c9:12:87:ba:5d:dc:0f:d3:57:6f:1a:29:04:d6:
28:72:e4:bc:2b:39:db:93:d0:a9:f2:8a:3b:54:58:67:3b:52:
6b:c9:cb:2c:37:cc:51:fa:c2:27:64:e3:c9:61:d2:2c:ee:cd:
4c:9f:24:b3:57:a6:f6:75:3e:b1:c4:c1:ed:3d:e0:d3:89:1a:
ab:86:66:dd:e0:af:2c:78:fc:73:42:57:43:ff:06:2b:49:9b:
1b:37:81:fc:92:8d:c2:d7:57:f0:e6:be:4e:cb:65:bc:c8:99:
ac:4c:c1:b8:03:16:a4:5e:b2:bc:6f:9b:88:58:7e:52:45:51:
7e:c0:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:58 2025 by rpki-client