Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/yz2ZTs6dmpPlilj2nQYZjx6z-Do.roa
File: yz2ZTs6dmpPlilj2nQYZjx6z-Do.roa (raw, json)
Hash identifier: oXBkByEOj2JLPkPKCyC5b0VJ2bSXd9fWKoGl2WHnmp4=
Subject key identifier: CB:3D:99:4E:CE:9D:9A:93:E5:8A:58:F6:9D:06:19:8F:1E:B3:F8:3A
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 035DB4B8
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/yz2ZTs6dmpPlilj2nQYZjx6z-Do.roa
Signing time: Sat 01 Jan 2022 10:05:05 +0000
ROA not before: Sat 01 Jan 2022 10:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48479
IP address blocks: 151.252.111.0/24 maxlen: 24
151.252.110.0/24 maxlen: 24
151.252.109.0/24 maxlen: 24
151.252.108.0/24 maxlen: 24
151.252.107.0/24 maxlen: 24
151.252.106.0/24 maxlen: 24
185.52.31.0/24 maxlen: 24
185.52.30.0/24 maxlen: 24
185.52.29.0/24 maxlen: 24
185.52.28.0/24 maxlen: 24
151.252.104.0/21 maxlen: 21
151.252.105.0/24 maxlen: 24
151.252.104.0/24 maxlen: 24
46.18.202.0/24 maxlen: 24
46.18.200.0/24 maxlen: 24
46.18.200.0/21 maxlen: 21
46.18.203.0/24 maxlen: 24
46.18.201.0/24 maxlen: 24
46.18.206.0/24 maxlen: 24
46.18.205.0/24 maxlen: 24
46.18.204.0/23 maxlen: 23
46.18.204.0/24 maxlen: 24
46.18.207.0/24 maxlen: 24
185.52.77.0/24 maxlen: 24
185.52.76.0/24 maxlen: 24
185.52.78.0/24 maxlen: 24
185.52.79.0/24 maxlen: 24
2a03:aa80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56472760 (0x35db4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Jan 1 10:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb3d994ece9d9a93e58a58f69d06198f1eb3f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:d6:0a:20:b6:90:b5:69:cb:12:db:bf:51:
1b:b5:4c:4e:79:1d:e2:f3:9d:ad:24:3a:19:9b:37:
13:21:e3:74:0d:be:7b:83:36:fc:10:20:21:5f:4a:
d6:f8:0c:50:81:fc:14:0f:24:22:c3:30:5e:ab:6f:
2f:ff:9d:2b:e5:94:62:dc:c2:53:da:9d:5d:de:89:
d3:f5:25:20:6a:77:2a:e2:70:42:14:cc:e7:32:e9:
63:43:e4:a8:0c:87:7a:12:92:61:98:38:41:f4:29:
e8:aa:3c:88:a6:04:39:d3:2e:18:f1:ff:51:21:c3:
24:d2:88:25:9f:7e:3a:0b:86:36:77:e7:d8:c1:8c:
5d:0a:40:18:f7:22:62:52:ce:9a:ff:90:d1:00:c6:
a9:dd:26:85:36:e4:cb:3f:e4:14:34:8c:9f:fa:7f:
ca:ea:f2:73:3a:6d:79:d7:66:b5:85:fb:02:c7:4e:
fc:95:5e:9a:90:a6:e5:8e:d3:26:0b:99:c7:54:18:
66:2a:ff:a9:3d:b1:ab:7a:9d:78:e6:b2:28:32:18:
40:de:fd:99:71:4c:4e:87:18:95:fa:d6:ae:6d:aa:
a1:f2:75:9a:46:70:47:8a:37:ef:9d:7e:27:0c:2c:
ce:ee:e3:37:8b:13:53:6c:16:53:d2:29:df:d5:7a:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:99:4E:CE:9D:9A:93:E5:8A:58:F6:9D:06:19:8F:1E:B3:F8:3A
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/yz2ZTs6dmpPlilj2nQYZjx6z-Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.200.0/21
151.252.104.0/21
185.52.28.0/22
185.52.76.0/22
IPv6:
2a03:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
53:c8:b2:84:6d:52:1d:5f:0e:81:c8:03:86:5e:0e:a4:a8:81:
fe:e7:5e:b9:c8:d2:06:c6:6e:d9:3f:31:08:9f:3e:af:a5:33:
2e:25:77:55:40:1a:4e:7c:ad:8f:73:d2:2b:a3:8c:44:4c:13:
86:b7:8f:18:0d:15:09:7e:8c:a3:8a:09:67:66:e9:59:a0:38:
6f:53:e3:63:4e:25:df:b2:77:66:ee:ec:ec:ee:39:f2:ad:35:
28:2b:f0:1f:61:fa:a4:36:e9:11:9d:6e:58:9f:f5:0b:95:e1:
ab:53:3a:d3:ee:22:0e:9a:71:65:af:f6:b0:5f:59:a1:3d:e2:
0e:98:58:58:1a:1d:53:75:8d:f4:77:56:fd:45:e7:38:3c:76:
49:b4:c2:e1:0c:82:9e:42:e7:c1:a7:1f:1c:4a:85:03:5b:2e:
f7:5c:f7:bb:7c:5c:b2:a8:48:17:9f:19:cd:59:91:3f:19:f7:
09:cb:d8:a7:b2:2d:ba:77:5b:03:51:fc:51:0f:b8:3c:2a:af:
ec:dc:ca:44:e8:95:d4:b6:6d:9f:c3:57:92:7b:23:27:cc:7d:
19:27:60:0c:48:a0:45:4c:ae:e0:da:5e:e4:41:95:5f:d7:6a:
22:0e:6d:f9:ad:d8:73:3a:af:51:eb:99:07:cc:8c:9b:1f:2b:
ba:39:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:31 2025 by rpki-client