Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/p-9P3MB3I0q6xOnhVmlOGpIRjPs.roa
File: p-9P3MB3I0q6xOnhVmlOGpIRjPs.roa (raw, json)
Hash identifier: 4d5Oc95YG55mIpwTql/uZfU+twYx81K31ivQK541c9s=
Subject key identifier: A7:EF:4F:DC:C0:77:23:4A:BA:C4:E9:E1:56:69:4E:1A:92:11:8C:FB
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0677D76D
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/p-9P3MB3I0q6xOnhVmlOGpIRjPs.roa
Signing time: Fri 04 Mar 2022 08:37:38 +0000
ROA not before: Fri 04 Mar 2022 08:37:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108517229 (0x677d76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 4 08:37:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7ef4fdcc077234abac4e9e156694e1a92118cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:cb:cd:97:d9:6a:04:c3:67:6d:c5:ed:f5:
ed:13:c6:0a:9d:44:6f:85:d0:3a:79:cd:e5:0e:57:
6d:f4:50:ca:02:5f:3a:13:99:95:ee:3e:f7:6a:9a:
fd:1c:99:c9:f0:27:5a:a5:31:f0:5d:9b:be:59:50:
a0:cc:b3:0a:d7:3a:35:84:dd:43:ff:e1:ed:a9:1c:
4d:bf:2a:e6:88:d5:90:53:03:78:98:7b:b0:d0:63:
d5:bd:97:f5:a6:db:b1:1f:a0:5d:73:0c:12:2f:8c:
c9:99:ac:90:59:3e:d6:6f:ba:08:b4:3f:29:42:05:
05:70:a9:12:70:05:8b:de:61:ea:5d:3e:23:2c:e6:
16:61:7d:91:9b:28:99:27:16:7f:f3:22:34:1b:3e:
ba:20:49:12:ec:87:6d:4f:3a:3d:88:a4:c7:1a:50:
3d:91:33:4d:f0:da:a7:f2:8a:71:b7:46:04:ff:6c:
73:06:47:b6:fe:47:0a:e9:e4:d7:dc:ef:c1:c0:51:
dd:35:3e:fa:c8:43:84:54:1b:60:8b:c3:8d:71:e0:
d9:a7:af:91:12:7d:8c:99:dc:49:e7:38:c5:0e:f7:
fa:80:ea:4f:09:ed:2e:66:99:f2:0b:c1:9b:bf:af:
09:c0:6e:24:da:b7:e9:e4:10:4c:84:af:f8:1e:a8:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:4F:DC:C0:77:23:4A:BA:C4:E9:E1:56:69:4E:1A:92:11:8C:FB
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/p-9P3MB3I0q6xOnhVmlOGpIRjPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/23
94.137.75.0/24
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
5c:75:9d:1b:d8:11:70:dd:e0:2e:80:73:db:93:a6:43:a7:7e:
73:f5:a2:5b:9e:55:93:e8:7a:c7:98:f6:b8:d8:dd:b6:30:8b:
9b:3c:1b:9e:6a:76:4f:37:b5:db:e1:d5:32:28:d1:e0:b0:b1:
75:19:64:25:5f:88:82:3a:45:00:8c:9f:bf:42:6f:b6:e2:48:
cd:6a:fa:98:80:94:cb:ab:a6:00:86:3a:f7:1e:5c:13:eb:cd:
8b:b4:71:5f:92:48:23:9f:1b:1b:dc:4c:c9:26:d1:ba:c5:de:
23:0d:53:ef:d1:ff:7a:17:1f:1b:f9:28:9e:34:4b:86:d7:28:
0f:d8:6e:c0:e3:c3:54:8e:08:ef:db:cd:8d:28:50:e1:1d:8d:
01:78:17:a4:8f:cb:77:86:aa:1b:bb:5d:b7:32:e3:3a:ab:eb:
86:dd:d4:0b:32:ef:e6:07:0f:99:7b:66:ec:bb:52:e6:47:e5:
50:c7:10:fa:66:cb:51:13:97:b6:1f:a4:43:a8:16:ae:e7:a1:
b4:69:2b:2d:6e:ac:17:2b:94:b5:2d:3e:54:15:04:18:ba:1f:
be:bf:c7:27:21:43:35:cb:80:0b:e3:f8:2d:62:c7:e6:a3:a6:
b5:be:70:86:02:ee:2e:8f:74:e3:3e:c3:fd:42:8b:cd:d7:3e:
9e:df:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:32 2025 by rpki-client