Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/U89DOwjZbvTzc_wytbw9SrfTzMw.roa
File: U89DOwjZbvTzc_wytbw9SrfTzMw.roa (raw, json)
Hash identifier: LghZii4mKXzxgMyOF1wTAcoGOk0M+ndj3o8ZhPxKmzk=
Subject key identifier: 53:CF:43:3B:08:D9:6E:F4:F3:73:FC:32:B5:BC:3D:4A:B7:D3:CC:CC
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018823931C8C625A15CE54ABC884513EE9AB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/U89DOwjZbvTzc_wytbw9SrfTzMw.roa
Signing time: Tue 16 May 2023 08:00:23 +0000
ROA not before: Tue 16 May 2023 08:00:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:93:1c:8c:62:5a:15:ce:54:ab:c8:84:51:3e:e9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 16 08:00:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53cf433b08d96ef4f373fc32b5bc3d4ab7d3cccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:0e:9b:04:40:be:b7:ba:60:59:d0:97:d0:
b7:54:3c:95:39:d0:5e:bd:83:72:98:c7:7e:84:cc:
56:4d:51:04:d7:e2:41:e9:ad:97:e7:ed:54:ab:3d:
ba:48:e8:a6:20:8a:e3:28:d3:41:2f:ef:b0:f7:7d:
4d:a2:0c:d5:92:47:dd:d2:d7:d7:70:c7:d0:29:1d:
73:0f:a0:df:f2:4b:85:23:ab:47:93:db:a3:d3:cc:
9d:84:e6:21:21:ae:14:93:4c:3f:8a:9e:81:d6:62:
c6:bf:d9:30:2c:14:be:b9:b7:54:e5:a4:cb:59:b6:
a2:65:f6:ec:05:66:e0:79:d2:ec:b6:d6:d7:8b:a5:
46:06:fe:29:b8:08:a0:75:c1:50:b1:ea:1f:07:35:
4e:c3:ec:55:a1:7f:42:19:f4:a6:08:75:9e:c0:80:
3a:1d:33:3a:78:13:8b:d2:b0:d5:84:79:93:ff:09:
5f:c4:97:3b:1b:af:5a:6e:75:36:d5:d8:f2:bd:41:
9f:b3:16:20:b0:4b:9b:de:3a:df:68:81:4a:3f:f5:
1f:45:2a:61:d2:af:0a:c1:62:c6:80:c7:d4:71:d1:
90:b7:14:c2:ce:6f:ac:22:dd:bf:81:4c:37:57:51:
22:02:6b:7b:ba:81:69:bd:da:f0:af:70:6e:54:27:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:43:3B:08:D9:6E:F4:F3:73:FC:32:B5:BC:3D:4A:B7:D3:CC:CC
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/U89DOwjZbvTzc_wytbw9SrfTzMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0-176.46.137.255
Signature Algorithm: sha256WithRSAEncryption
39:0d:21:79:0c:f3:66:7d:57:ef:a6:ed:47:c4:99:77:28:ff:
8d:22:d1:b7:96:a9:fa:72:85:81:d9:ee:52:8c:3c:43:60:9f:
a6:98:0c:8b:2b:af:58:21:cf:87:4b:42:fc:77:43:ad:1d:5b:
50:ba:f4:cb:1f:7c:b2:cc:00:da:5b:f2:3b:23:dc:76:63:d8:
2a:cb:db:a9:c1:99:05:f3:fc:01:db:28:e2:cc:cc:35:d9:b4:
17:b0:2b:e3:09:a1:10:bd:e7:bc:a3:7d:cd:ef:82:b2:75:8a:
d0:f7:ba:48:5f:01:44:1f:c1:4c:ea:31:60:3c:eb:a8:29:b9:
6d:62:f0:cc:8d:36:c4:ac:78:f0:d0:ba:50:25:ee:0c:95:a8:
f5:5e:02:5c:e8:23:c0:33:3f:80:c7:18:54:3d:77:73:94:7e:
a5:25:aa:ba:51:3e:e5:8c:e0:b7:0c:55:3f:e9:ec:d4:1b:63:
86:5e:93:fa:86:eb:58:f9:72:c5:a4:b6:3c:a3:15:6a:99:af:
63:6f:17:29:42:42:34:3b:2b:67:b4:b2:a6:eb:05:b5:a1:4f:
9e:11:f6:7b:ad:0f:81:5b:e3:da:42:bb:ba:33:06:6d:84:40:
42:7b:5d:e0:be:2e:85:c2:8f:80:65:61:cf:ea:0b:65:f1:2b:
c8:6a:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:11 2025 by rpki-client