Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lUz4a3mqF4peXjO9zUg626cT59Q.roa
File: lUz4a3mqF4peXjO9zUg626cT59Q.roa (raw, json)
Hash identifier: omuo6gfpFUPAuqtQ/59ZcS+OzFQNc4/acY7vzb7Frmg=
Subject key identifier: 95:4C:F8:6B:79:AA:17:8A:5E:5E:33:BD:CD:48:3A:DB:A7:13:E7:D4
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018B282BBA3B3767E46443AD5085FAFC6EF2
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lUz4a3mqF4peXjO9zUg626cT59Q.roa
Signing time: Fri 13 Oct 2023 08:33:56 +0000
ROA not before: Fri 13 Oct 2023 08:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.137.0/24 maxlen: 24
176.46.144.0/23 maxlen: 23
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:2b:ba:3b:37:67:e4:64:43:ad:50:85:fa:fc:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 13 08:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=954cf86b79aa178a5e5e33bdcd483adba713e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:73:62:18:bc:3e:b7:93:0e:1d:25:21:cc:
48:da:05:0c:df:c6:89:c2:b7:55:c5:a2:b9:7b:59:
ce:13:c6:69:24:32:f8:b1:31:c6:1c:fd:fe:cd:fc:
15:41:48:32:0a:9a:52:09:14:ab:1c:79:43:48:d4:
87:ef:60:a8:26:24:5c:2f:00:29:12:31:b6:3b:97:
16:e2:d2:a9:83:6f:b0:06:dc:3a:54:20:d8:d8:d9:
ff:58:4a:9a:25:a9:53:eb:90:15:fc:03:bf:d5:98:
5a:12:38:d3:7e:e6:df:69:b4:46:84:35:88:15:41:
01:0d:eb:17:1b:b2:78:11:27:c7:c1:35:33:91:6e:
6c:e1:17:98:43:5d:8c:81:f7:99:5e:0c:40:73:c2:
63:0f:fc:b1:2c:cd:3c:22:cd:54:66:bb:6b:c5:4f:
bb:d5:cb:ac:3d:3a:15:2f:7f:71:b9:4f:94:2e:9c:
b8:ed:e7:75:5b:bc:fd:9e:0b:98:2b:91:35:fe:02:
42:7f:0d:8e:9c:57:4c:7b:1f:ed:fc:a0:97:45:ba:
73:b3:0c:41:c4:fb:03:8e:5d:dc:9c:73:68:2f:5a:
34:ee:fb:17:f8:6d:74:32:8d:02:3f:16:01:09:6d:
31:10:7a:25:48:71:bf:9e:7b:94:1f:c8:19:50:8b:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:F8:6B:79:AA:17:8A:5E:5E:33:BD:CD:48:3A:DB:A7:13:E7:D4
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lUz4a3mqF4peXjO9zUg626cT59Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
37.49.146.0/24
37.49.148.0/22
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.162.0-109.203.167.255
176.46.128.0/24
176.46.131.0-176.46.132.255
176.46.137.0/24
176.46.140.0/24
176.46.143.0-176.46.147.255
176.46.149.0/24
176.46.151.0-176.46.152.255
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:83:3b:3d:0a:e9:8e:5d:c4:80:42:85:90:30:1f:20:71:f5:
0d:e5:bd:c2:4d:b4:d5:8e:c7:33:70:60:54:f6:78:79:24:28:
7f:77:7e:26:0f:04:3f:67:92:2e:64:77:f0:5c:41:ac:99:f5:
5b:7c:1b:ba:91:32:27:7b:86:0d:87:93:ea:92:ea:c9:10:ef:
31:b6:4e:f3:ea:f7:4e:a2:1f:bc:b4:a5:a1:5a:06:84:ab:70:
10:b1:3d:97:3c:54:61:42:d3:51:56:58:30:5b:15:55:83:67:
48:c7:91:40:80:08:ed:4d:ea:6f:0d:8b:b5:5e:87:1f:77:5a:
c3:0a:1a:e0:95:95:5d:b8:1f:f1:6b:50:a7:3a:5a:79:5c:76:
8d:40:fc:5a:30:33:ea:28:81:e3:b4:fb:ae:d5:a8:15:0c:cc:
3c:3e:ad:d5:03:e3:1f:7b:11:36:d1:2e:f9:0f:20:0c:93:8e:
0c:4d:61:eb:9b:7c:b4:78:2c:97:c7:5b:27:3c:fb:b7:02:2e:
45:9d:9a:34:cd:e7:09:c1:24:0e:2e:c1:66:ae:61:c8:09:01:
b7:04:28:d3:5d:6e:13:ab:4e:59:fe:dd:3b:90:e9:03:de:e2:
9c:5f:90:48:ea:2d:69:32:15:2e:0d:4c:33:a8:49:4d:bb:31:
96:46:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:24 2025 by rpki-client