Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/W4DffAk3Fql3srAPvL37TUc9F0c.roa
File: W4DffAk3Fql3srAPvL37TUc9F0c.roa (raw, json)
Hash identifier: tasD05ZRgqL96OU2thLw0A49TV09FBzWoRUcESfWoZM=
Subject key identifier: 5B:80:DF:7C:09:37:16:A9:77:B2:B0:0F:BC:BD:FB:4D:47:3D:17:47
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01882FC930CD244A509DF8D8175AB8E7D751
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/W4DffAk3Fql3srAPvL37TUc9F0c.roa
Signing time: Thu 18 May 2023 16:54:54 +0000
ROA not before: Thu 18 May 2023 16:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:c9:30:cd:24:4a:50:9d:f8:d8:17:5a:b8:e7:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 18 16:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b80df7c093716a977b2b00fbcbdfb4d473d1747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:fc:77:4a:be:e1:6c:28:a9:51:0d:f5:77:
3a:d8:12:2d:17:9b:ea:5d:73:f9:d7:94:93:ee:3a:
ee:a0:f7:09:d2:2e:08:30:34:9b:13:64:9f:39:ce:
52:f8:0e:32:c1:45:8c:70:30:68:41:90:b9:38:33:
a4:ef:0f:d6:45:80:b1:1d:09:fb:ad:ca:c4:d2:86:
c1:89:78:b0:2c:1b:2e:67:a6:ae:92:12:ff:2c:fc:
e0:8f:42:03:5f:be:42:38:ae:49:c1:f3:5d:e2:e9:
4d:0d:eb:ff:03:71:29:de:24:91:7f:28:e8:d2:7f:
55:f6:5a:a9:b3:87:c7:2c:33:16:55:e4:fa:f0:fa:
37:70:cf:f1:9c:77:a1:a3:9d:6a:69:33:8a:ed:d7:
65:0d:26:5f:66:47:b2:8e:74:9b:61:2a:4e:1c:e4:
64:12:d4:83:50:a2:0d:e8:02:d8:25:e4:b0:40:ae:
b2:bd:de:80:fd:1b:b7:a1:55:f7:a8:c8:a0:94:1b:
30:4c:75:f4:99:20:bc:47:76:4a:e2:b1:fe:7e:48:
dc:15:97:3f:da:0b:b8:e6:65:ca:41:e1:4e:5a:66:
26:b3:b9:fb:6d:b7:2f:a0:dd:b6:7b:cb:bf:79:ed:
95:52:44:9c:15:db:c3:39:61:c6:5e:19:c7:47:14:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:DF:7C:09:37:16:A9:77:B2:B0:0F:BC:BD:FB:4D:47:3D:17:47
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/W4DffAk3Fql3srAPvL37TUc9F0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0-176.46.139.255
Signature Algorithm: sha256WithRSAEncryption
88:44:9b:11:6f:d7:e0:2f:3c:5f:06:fb:7c:d9:d1:a3:45:45:
0a:9c:e6:30:ba:1a:f6:20:68:d2:88:67:47:51:b3:ce:3a:a6:
89:1c:b8:3d:5e:01:54:bc:3b:c8:9b:17:ba:72:7e:6b:0b:7b:
db:73:2c:e5:56:5c:52:1b:38:05:16:9c:d7:e8:e6:a6:8f:ac:
8f:dd:f8:c3:19:81:1b:03:e3:13:20:ba:5e:83:3e:dc:d8:e3:
65:76:81:cc:bd:a3:1d:f4:f1:f5:04:f0:62:b9:a5:f0:36:da:
bc:17:1e:a2:6d:9a:af:10:6a:01:3c:32:c2:ec:5a:42:60:1e:
47:fe:ff:fa:28:83:71:44:51:f3:7a:70:d8:ea:a3:08:7a:c7:
2a:d4:bc:e9:b9:eb:19:ec:06:ec:bb:eb:21:f6:ca:e4:85:c6:
f5:77:d7:34:4c:b6:7a:cc:b9:9e:af:99:1f:05:1f:ea:f8:ff:
1a:e0:9a:4e:8a:1b:37:57:39:59:29:d1:3a:bc:4e:af:18:89:
4a:52:1a:10:a0:12:7c:a9:89:3f:0e:e8:da:4a:2c:02:0b:f4:
53:31:59:09:db:6b:ad:25:8d:d7:d7:0b:12:2f:96:c1:70:a4:
cc:ff:7d:e0:c6:35:e3:04:13:d8:68:39:a9:bc:e5:37:db:0e:
da:ec:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:56 2025 by rpki-client