Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/pftWwnqw-7TUSprqFdhW6aCypVc.roa
File: pftWwnqw-7TUSprqFdhW6aCypVc.roa (raw, json)
Hash identifier: MmqsQqTmpwgbQfA3vkBjis086qhd4DMUt9/AFZMYHOA=
Subject key identifier: A5:FB:56:C2:7A:B0:FB:B4:D4:4A:9A:EA:15:D8:56:E9:A0:B2:A5:57
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 08F001F5
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/pftWwnqw-7TUSprqFdhW6aCypVc.roa
Signing time: Sat 01 Jan 2022 06:59:42 +0000
ROA not before: Sat 01 Jan 2022 06:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 95.214.136.0/22 maxlen: 24
185.25.156.0/22 maxlen: 24
45.67.100.0/22 maxlen: 24
185.175.160.0/22 maxlen: 24
45.87.168.0/22 maxlen: 24
185.182.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149946869 (0x8f001f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jan 1 06:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5fb56c27ab0fbb4d44a9aea15d856e9a0b2a557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:a1:81:41:f1:ce:d9:de:35:db:d6:de:fa:
bf:0f:a0:d8:5a:41:bb:c0:51:bd:e4:04:e8:38:d5:
1b:f1:9f:49:55:f6:c8:15:17:86:dd:07:4e:2c:2d:
d7:6d:8e:a0:0f:8d:7d:6f:c6:49:b0:5f:6d:f3:b9:
30:aa:c0:05:bf:fa:bb:24:fa:d9:2e:48:7c:3d:c5:
20:11:23:4b:d1:f3:1b:98:d1:14:8b:0e:52:1c:77:
14:ab:8f:a8:dd:df:ad:12:c9:69:7c:ce:bb:07:f6:
4a:fe:8f:26:2d:ff:c1:2c:bd:70:18:73:f5:a4:75:
5a:c6:0d:72:5a:fd:b4:78:5d:38:65:fb:da:84:ba:
c2:08:ca:8f:5a:27:1e:2f:a1:18:de:b6:3f:83:fc:
ca:07:64:78:fa:5e:8c:fd:33:1b:7a:fb:63:81:7a:
6e:ee:7d:9c:7a:24:ce:91:02:5d:38:4c:07:c8:8b:
7e:5a:2e:14:c3:3d:f6:13:09:b3:95:1b:2b:5d:c0:
bd:da:a4:5d:51:47:5d:6b:97:de:1f:c0:b4:8d:ba:
b4:bc:e2:df:e5:18:67:fa:e7:57:ac:59:1d:a5:d3:
9b:42:14:6b:24:f4:ea:c3:0f:b1:44:d1:00:dd:30:
98:16:a4:fe:cd:01:52:05:3b:35:98:69:30:11:de:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FB:56:C2:7A:B0:FB:B4:D4:4A:9A:EA:15:D8:56:E9:A0:B2:A5:57
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/pftWwnqw-7TUSprqFdhW6aCypVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.100.0/22
45.87.168.0/22
95.214.136.0/22
185.25.156.0/22
185.175.160.0/22
185.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
63:28:e9:0a:b7:fa:bd:d1:05:ee:2f:e6:09:13:c2:66:d6:4f:
00:d2:a7:b3:49:df:de:37:8e:34:7d:80:07:2e:70:b2:20:f0:
1e:6b:1f:7a:64:32:31:85:6d:e9:cf:f2:c1:b5:71:58:46:cb:
db:9a:4d:fe:07:04:b2:ff:59:31:a2:f2:b0:89:46:1e:3f:b8:
87:e4:d6:bc:02:a3:16:ee:f7:15:d0:4f:04:04:49:be:c6:e7:
dd:5d:29:3e:b8:92:54:26:6e:4c:56:3e:44:11:70:3d:55:fa:
e2:2e:e3:0c:b2:ab:9e:19:20:69:81:28:af:8e:bd:8c:aa:ec:
b9:d6:8d:71:62:80:da:1c:f2:58:c4:42:1c:39:7d:4b:a9:2c:
3b:fe:45:48:e5:5e:81:bf:f5:a8:78:74:30:79:1d:a6:3f:ce:
4a:e5:ee:90:4d:0a:b0:a1:e1:1c:19:31:02:14:64:18:fb:5f:
ca:73:52:b6:ef:fc:f4:c6:af:e4:90:e3:2c:bd:7a:39:54:ae:
f7:0b:4e:85:7b:29:ab:c5:cd:f4:5a:a7:0f:d2:ec:d4:60:65:
6c:37:ee:7e:4e:f3:0b:94:7d:85:e0:e4:ce:d5:f9:70:19:c7:
fd:8d:a0:4f:3f:b1:03:5f:11:e5:2a:c4:6f:e7:3d:42:84:bd:
5d:28:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:09 2025 by rpki-client