Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lLMh1UAsuz358U7u7clPnb1Mb0Y.roa
File: lLMh1UAsuz358U7u7clPnb1Mb0Y.roa (raw, json)
Hash identifier: oZ/2wK2HUi0gaz38FXLMPOjVFLVC6WpMhRTltEKJ/xM=
Subject key identifier: 94:B3:21:D5:40:2C:BB:3D:F9:F1:4E:EE:ED:C9:4F:9D:BD:4C:6F:46
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06CEB436
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lLMh1UAsuz358U7u7clPnb1Mb0Y.roa
Signing time: Sun 03 Apr 2022 21:26:17 +0000
ROA not before: Sun 03 Apr 2022 21:26:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114209846 (0x6ceb436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 3 21:26:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94b321d5402cbb3df9f14eeeedc94f9dbd4c6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:42:cb:98:5c:4c:80:bc:9e:c2:74:39:b6:
6c:ca:49:db:35:e0:52:f7:4d:e1:14:4e:f1:90:8d:
5e:3a:20:ac:12:f4:6f:bd:51:6d:83:9e:62:a0:e2:
e9:b4:83:d2:26:88:93:9f:06:cc:65:30:12:f4:61:
51:8d:a3:66:20:60:cf:c6:ef:ec:42:0b:9d:e7:e7:
d2:c3:2a:5b:73:9f:17:25:b7:f0:24:1d:12:ab:13:
32:04:a1:3e:8a:d7:6c:30:ce:1d:5c:04:43:68:ff:
ac:a7:0e:d2:ce:7f:77:83:17:7c:99:85:58:74:74:
cc:95:51:5a:eb:28:09:ee:69:3c:bd:08:15:87:21:
c6:d8:44:49:f6:6f:51:42:f1:28:17:e1:e8:32:4c:
a5:7b:aa:16:dc:84:1b:04:00:12:ad:24:7c:b7:47:
2a:09:fb:a8:dd:c4:26:94:76:e8:98:c6:ba:79:cf:
07:e2:06:8d:61:5d:5f:fc:5e:a5:38:ef:8d:eb:4d:
9d:cd:94:44:22:0c:6e:9c:57:d7:34:33:5d:ba:ba:
0d:7d:52:ca:e7:05:55:a4:84:38:31:9c:68:d5:0f:
8d:32:92:39:b3:a4:bd:06:16:26:1c:a5:76:f3:85:
31:96:c3:ea:a7:24:bc:12:08:f0:c6:8e:dc:33:7a:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:21:D5:40:2C:BB:3D:F9:F1:4E:EE:ED:C9:4F:9D:BD:4C:6F:46
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lLMh1UAsuz358U7u7clPnb1Mb0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.74.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
70:ee:91:35:c6:6f:55:cc:52:7c:92:02:27:1f:5c:18:89:e5:
7a:d1:3a:cf:15:7b:33:36:c2:7d:2d:01:26:52:b6:9a:95:dc:
9b:9a:e8:bf:ad:49:4c:f7:6a:7a:6a:4a:21:60:8c:d1:e4:ab:
0f:d0:3c:27:6b:c9:e9:19:e6:43:e2:f5:c5:fb:97:da:b6:6f:
72:d4:a5:62:34:06:71:6a:5d:5b:f5:45:9c:11:a5:4f:a6:9f:
aa:49:98:05:c8:99:85:4b:4d:59:28:4f:08:52:22:5a:60:aa:
4e:91:00:6b:90:4b:f4:be:d5:76:8a:be:ce:00:ea:37:70:af:
de:73:eb:ca:31:fa:9d:d9:aa:04:ba:c1:11:f3:0c:f4:d5:c8:
be:92:f8:4c:73:90:ca:42:53:d5:d2:86:01:16:1c:4a:64:d7:
9b:61:49:40:5f:c9:c2:02:8b:2e:33:b6:5d:40:18:10:35:17:
6b:6b:07:63:90:22:ef:38:c2:e4:57:78:06:0c:29:e1:28:a9:
c4:59:b8:2c:79:01:6e:1e:54:d7:2c:db:dd:61:65:8c:d0:46:
dc:49:c5:39:b8:43:d8:9a:06:96:a5:4a:3c:d8:a9:06:c4:27:
8b:7f:e7:d7:05:2b:49:d7:80:06:93:d0:9d:1b:3b:bd:7a:0a:
5e:d0:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:11 2025 by rpki-client