Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1-zCVso_52LDx6I2POYDpR5JWmxo.roa
File: 1-zCVso_52LDx6I2POYDpR5JWmxo.roa (raw, json)
Hash identifier: Cy9p2F6ltulpryrGxsu+XvAO3nHfy4Ue6OJFPE4oXyM=
Subject key identifier: FB:30:95:B2:8F:F9:D8:B0:F1:E8:8D:8F:39:80:E9:47:92:56:9B:1A
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0186E9AD7F9D05C62AE5AD2BA41138BEB2BB
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1-zCVso_52LDx6I2POYDpR5JWmxo.roa
Signing time: Thu 16 Mar 2023 09:08:27 +0000
ROA not before: Thu 16 Mar 2023 09:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:ad:7f:9d:05:c6:2a:e5:ad:2b:a4:11:38:be:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 16 09:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3095b28ff9d8b0f1e88d8f3980e94792569b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:bb:53:d9:d7:06:30:08:9c:6d:27:2c:9f:
78:3f:f6:9e:99:fe:28:b3:72:df:f2:7f:bb:7d:f0:
f1:9e:25:47:e4:7f:8f:ea:f4:14:e7:6e:d5:d4:fb:
c1:9a:73:c9:07:7b:01:f6:f3:d9:5c:bf:7c:97:64:
df:1c:90:bd:f9:95:6a:fd:3f:bc:c5:2f:1f:b9:77:
74:d5:ec:4b:da:16:6d:16:b4:69:9a:1e:51:6b:a7:
00:dd:de:f4:71:32:f9:55:e8:76:88:2c:99:04:14:
d0:28:65:98:e7:54:f3:a1:1a:f6:47:60:52:5f:35:
19:07:18:ee:e5:2a:da:66:b2:05:c1:ba:dd:56:7d:
b1:d2:98:29:92:47:6d:ae:5e:b7:19:08:f1:a1:5b:
55:5d:e3:a8:be:10:ac:4c:14:73:b8:a5:46:2c:5b:
c9:36:17:11:67:5b:ad:1d:34:08:dc:b8:42:3d:5a:
fb:88:a2:81:62:aa:b6:86:00:c0:18:cd:ae:cc:c5:
e3:ab:31:79:78:09:f5:32:7f:92:7c:5b:bb:1b:78:
6b:c7:ab:7f:f7:f0:1c:46:0f:22:6f:6f:a2:bf:9f:
af:22:db:25:d0:3f:af:ba:91:61:b4:38:8a:b9:c1:
64:d5:92:cc:27:be:e4:93:38:56:95:85:2b:3f:85:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:95:B2:8F:F9:D8:B0:F1:E8:8D:8F:39:80:E9:47:92:56:9B:1A
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1-zCVso_52LDx6I2POYDpR5JWmxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d0:6b:e7:f6:cf:51:ac:c2:b6:8b:d8:64:4e:83:19:ca:c4:
de:36:a2:f0:3e:b9:f9:7e:8b:5e:06:8f:ba:64:8a:4c:f3:88:
22:1b:71:8f:87:c9:8a:5f:d7:31:a5:19:5c:7a:63:96:07:67:
cf:62:b1:ec:33:5a:91:d1:f1:0c:cd:34:3f:08:5d:02:80:ae:
d3:82:ee:39:b0:25:92:e2:82:fb:63:9c:62:93:94:62:89:44:
fe:50:4b:19:df:d8:d0:d7:5f:d7:d6:07:6f:41:89:41:0b:80:
9e:22:ff:42:c3:1b:31:1c:35:66:3a:ff:f5:8b:c7:10:39:9b:
10:96:02:a1:51:e6:95:cd:a6:c8:f7:8f:38:bc:b8:2a:59:6f:
b4:47:ad:5e:00:53:33:f3:64:4d:0a:cb:bf:c0:83:c9:cd:c9:
fa:13:ff:09:9a:f5:35:9f:ea:92:b6:a5:eb:94:20:bb:2c:88:
84:72:0b:c3:b7:84:82:48:41:a9:7f:f3:1c:71:29:f9:2f:a3:
5d:e3:53:72:71:ab:cd:b4:92:70:61:1e:d8:32:43:ec:0d:e6:
7a:67:1c:75:18:72:1a:61:e7:e4:fc:17:f5:8a:39:80:bc:64:
1e:1c:aa:59:23:84:c9:13:17:be:18:ea:11:d7:e3:1a:2d:fd:
fb:55:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:52 2025 by rpki-client