Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_pepxg5rAyWhRwuoPl3y5mKCEEs.roa
File: _pepxg5rAyWhRwuoPl3y5mKCEEs.roa (raw, json)
Hash identifier: nOA9yvHwBoLD8g6RBsl6k1RcfYuqgmu3Ng/ZWlWXyww=
Subject key identifier: FE:97:A9:C6:0E:6B:03:25:A1:47:0B:A8:3E:5D:F2:E6:62:82:10:4B
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06400065
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_pepxg5rAyWhRwuoPl3y5mKCEEs.roa
Signing time: Fri 11 Feb 2022 08:23:34 +0000
ROA not before: Fri 11 Feb 2022 08:23:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.78.0/23 maxlen: 23
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104857701 (0x6400065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Feb 11 08:23:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe97a9c60e6b0325a1470ba83e5df2e66282104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:a3:6b:55:47:08:74:97:9c:84:77:72:cb:
bf:ed:c5:25:53:f1:c2:35:3a:14:e2:67:79:03:a9:
60:a5:fe:6a:11:fc:e5:92:4b:ad:3b:97:a4:5e:0a:
82:65:bd:4c:03:3a:ea:6f:24:72:cf:d1:df:e2:e7:
d6:fd:0c:41:c5:f1:17:2d:18:94:ee:67:7f:7e:e9:
e9:62:a8:57:ff:d8:20:ab:bf:06:91:a6:64:86:ed:
f6:7f:fe:db:49:37:c2:b9:28:a8:cb:fd:86:54:d1:
71:69:3f:92:b0:01:b7:72:5f:0e:f0:c3:0a:24:90:
35:9d:d6:8b:96:dd:98:1e:c3:22:9e:70:41:73:ac:
19:30:88:03:2a:8c:8c:30:96:c9:3f:84:05:59:cd:
ad:2e:2f:fc:ce:19:b9:7d:80:2b:cd:0f:c2:b4:9d:
cb:b3:68:de:2f:c7:54:69:44:46:5c:bd:00:63:49:
61:52:6e:80:d2:53:61:bb:5e:c3:20:66:42:fa:fa:
cb:00:88:05:f6:41:9b:ed:81:bf:f2:07:28:0e:97:
11:8f:28:ff:cf:84:f4:40:4d:3c:84:4d:62:21:6e:
5b:7c:7a:d5:b0:5a:68:22:bc:eb:e5:9c:34:9a:7f:
8d:e1:19:36:f1:d2:bc:d4:31:8e:3c:86:c9:ca:b1:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:97:A9:C6:0E:6B:03:25:A1:47:0B:A8:3E:5D:F2:E6:62:82:10:4B
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_pepxg5rAyWhRwuoPl3y5mKCEEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/23
94.137.72.0/24
94.137.74.0/23
94.137.78.0/23
94.137.89.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
2d:00:ab:9d:66:25:7c:62:b7:a4:0a:cd:33:9a:8c:66:c7:1c:
10:fd:dd:2d:ea:d1:16:79:04:8f:ea:99:fc:cb:67:b7:1e:8f:
59:79:52:42:35:ca:67:3c:25:25:e4:34:13:60:49:d7:1a:32:
f0:22:c4:7a:bb:c8:86:2f:e4:89:3c:39:05:56:ae:db:a1:c9:
10:c6:d5:db:0e:c0:c6:3e:ff:50:56:34:58:74:d2:c1:ea:f7:
91:b7:dc:ce:a2:c4:8d:bd:c7:db:4c:8c:0e:ba:c5:3c:99:9f:
22:46:d7:c3:83:80:c2:7f:7a:47:3d:47:30:b1:ef:88:5b:f0:
6d:ba:82:7c:2d:63:dc:87:80:1e:7b:36:be:42:11:c4:b0:7f:
3a:ba:03:bf:1f:7a:9e:da:97:64:04:a4:17:91:56:32:50:8f:
19:90:d3:30:00:26:d2:06:f7:fc:6b:4a:39:5a:a9:89:30:8f:
c2:61:f7:d8:d8:d5:5a:f4:43:7f:b6:df:9a:e2:80:13:49:e4:
bf:21:1e:7b:8d:86:4f:9b:53:13:bb:6e:d7:5e:6f:e0:57:17:
95:d0:a8:ab:10:86:ce:50:b5:e9:b4:61:da:62:b4:e2:ea:7d:
49:77:5a:9a:c9:f7:a8:37:f3:e6:54:79:ba:20:68:38:93:41:
9b:ab:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:03 2025 by rpki-client