Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/COzVUwDqpf0vkLz4LtGMIVmR7qs.roa
File: COzVUwDqpf0vkLz4LtGMIVmR7qs.roa (raw, json)
Hash identifier: xYTOXbCFIAbt+YpAKk/pKT4xbl3LLa5/vR3SVYuKcJQ=
Subject key identifier: 08:EC:D5:53:00:EA:A5:FD:2F:90:BC:F8:2E:D1:8C:21:59:91:EE:AB
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 05FA4861
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/COzVUwDqpf0vkLz4LtGMIVmR7qs.roa
Signing time: Sat 01 Jan 2022 13:55:32 +0000
ROA not before: Sat 01 Jan 2022 13:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200555
IP address blocks: 46.24.73.0/24 maxlen: 24
212.145.48.0/24 maxlen: 24
212.145.58.0/24 maxlen: 24
212.145.62.0/24 maxlen: 24
77.228.197.0/24 maxlen: 24
77.228.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100288609 (0x5fa4861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ecd55300eaa5fd2f90bcf82ed18c215991eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:eb:cd:2a:8e:19:c0:50:83:b8:d5:74:4c:
16:21:c5:63:2f:14:68:97:f6:ee:47:e3:97:33:4d:
52:24:c0:53:49:87:61:f5:7c:ed:f2:91:e1:62:b1:
04:0c:29:94:b4:c2:09:92:23:de:99:5d:50:83:6b:
62:eb:39:93:ea:fd:03:03:70:34:c4:5e:f1:36:2e:
e4:82:4f:e7:f3:45:b9:72:c8:dd:ac:6d:25:d9:d4:
15:c5:c4:2e:3d:53:ba:f1:85:e0:be:9e:a3:3a:c1:
d7:df:45:ec:37:ea:89:1e:23:56:f6:de:1b:33:7d:
d5:01:96:8f:53:4a:3e:88:a3:be:98:20:1f:22:71:
10:a0:ac:c3:fb:cb:bb:27:9b:cf:29:9b:96:8f:c6:
f1:6d:c0:5e:61:98:57:9c:01:ae:38:9e:2c:0c:b4:
5f:cb:9f:80:e6:38:cf:f0:01:cd:b5:15:2d:a7:fe:
4e:69:c0:bf:a5:b0:40:80:05:49:24:e5:d8:1b:63:
18:50:3c:77:4b:6d:33:34:c8:42:2d:3e:99:20:1e:
98:2a:99:9c:43:e3:72:0c:66:a4:f2:3d:41:ff:60:
60:81:55:a0:5b:69:5d:a5:66:d6:fe:21:d6:71:32:
5b:94:35:ae:bd:28:d2:65:c8:a8:4b:5f:be:ae:6e:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:D5:53:00:EA:A5:FD:2F:90:BC:F8:2E:D1:8C:21:59:91:EE:AB
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/COzVUwDqpf0vkLz4LtGMIVmR7qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.24.73.0/24
77.228.196.0/23
212.145.48.0/24
212.145.58.0/24
212.145.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:51:7a:58:28:d5:f4:42:c6:59:ff:ac:88:ab:c6:a0:4c:35:
9b:eb:f1:ee:8d:b6:c7:36:14:2a:61:3f:58:35:42:79:75:19:
62:2b:0f:5b:9b:f4:4e:a8:be:d7:66:5f:5b:4c:e6:4a:03:e4:
ee:de:72:f6:ef:41:9b:56:43:df:39:df:a3:72:c9:ba:79:56:
0d:5c:43:0a:27:68:55:20:3b:b4:8d:50:47:41:95:d9:53:e5:
e2:2e:78:d1:31:a7:a6:ad:94:4e:c7:ce:e8:3b:8b:3a:4d:e9:
bc:12:36:73:06:77:e0:b0:5e:ec:be:90:8d:78:2b:a6:5b:73:
e6:12:30:11:0a:06:d2:b4:83:14:81:2d:ea:64:8b:69:27:83:
f5:e3:69:7e:cb:66:8f:56:7a:5f:fb:8c:7d:79:c7:1c:c9:12:
7d:50:cf:88:fc:09:ce:5e:4c:5f:2c:96:22:58:79:8a:11:94:
6f:45:6e:15:30:38:57:ba:4a:e1:48:96:43:96:42:c2:7c:dc:
8b:57:cb:64:90:d4:88:65:2e:6e:96:49:2a:26:f0:8f:95:1f:
9a:9f:4a:7f:eb:c3:5b:29:03:7a:3d:45:c9:ba:ed:0e:49:04:
b3:71:6a:03:e6:b2:1d:6e:a4:dd:fb:20:23:7b:d5:f5:93:60:
2a:5c:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:43 2025 by rpki-client