Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/1-M0NCPFWdeaRtUjoJKPKrXl3jKY.roa
File: 1-M0NCPFWdeaRtUjoJKPKrXl3jKY.roa (raw, json)
Hash identifier: 3uhb7aXg1aS98xJpibhFumpaCNcGjpzvpkH4tMH8cpQ=
Subject key identifier: F8:CD:0D:08:F1:56:75:E6:91:B5:48:E8:24:A3:CA:AD:79:77:8C:A6
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0188582E88B6F475FA2043035A50CE19C65A
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/1-M0NCPFWdeaRtUjoJKPKrXl3jKY.roa
Signing time: Fri 26 May 2023 13:10:24 +0000
ROA not before: Fri 26 May 2023 13:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206805
IP address blocks: 185.159.111.0/24 maxlen: 24
45.84.152.0/23 maxlen: 23
45.84.155.0/24 maxlen: 24
45.84.154.0/24 maxlen: 24
193.19.100.0/23 maxlen: 23
45.145.190.0/23 maxlen: 23
45.145.188.0/23 maxlen: 23
185.247.192.0/22 maxlen: 24
185.228.48.0/22 maxlen: 24
178.159.32.0/23 maxlen: 24
188.64.149.0/24 maxlen: 24
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:2e:88:b6:f4:75:fa:20:43:03:5a:50:ce:19:c6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: May 26 13:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cd0d08f15675e691b548e824a3caad79778ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:5c:0d:05:eb:62:6f:16:c8:02:6c:ae:e4:
bc:80:29:ba:7c:49:a0:0b:1e:f6:46:29:22:38:36:
7f:8f:13:8f:7d:84:2a:fe:82:e7:f4:ec:b6:50:9e:
31:a2:47:f2:89:4b:8a:d0:70:f3:34:76:e7:a3:75:
36:18:7d:6a:03:03:d4:4b:83:29:39:fd:a1:dc:2f:
ab:ee:50:a3:ca:ad:0f:d5:99:37:a5:4c:70:78:a4:
d3:55:2b:09:c8:f2:b1:ff:19:42:03:e3:f2:fc:db:
d3:ed:27:a4:b3:db:cc:41:19:02:5f:7e:f0:96:cf:
46:ee:a8:c2:00:97:78:0f:dd:77:05:76:26:76:76:
50:f4:91:1f:f3:82:17:3b:58:2d:ea:86:16:64:af:
b5:be:c7:93:39:02:da:b3:18:5c:42:04:82:87:d6:
f0:c4:5e:03:33:b9:f7:7d:b5:73:a6:b7:8c:75:9f:
5e:d3:e5:90:a1:51:46:dd:cc:f1:5c:71:ec:bd:b4:
85:6e:00:ac:fa:c7:08:c3:f9:c5:5a:5f:52:9c:1b:
4b:a0:fb:f3:06:77:0b:6f:8e:5b:73:b2:59:ef:6f:
d3:62:c2:3a:99:5f:cc:13:75:b6:d1:46:f5:26:4b:
8b:d0:8b:0a:21:dc:21:6d:4f:1e:b5:70:7a:91:fe:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:0D:08:F1:56:75:E6:91:B5:48:E8:24:A3:CA:AD:79:77:8C:A6
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/1-M0NCPFWdeaRtUjoJKPKrXl3jKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0/24
193.19.100.0/23
IPv6:
2a0c:ee00::/39
2a0c:ee00:20c::/48
Signature Algorithm: sha256WithRSAEncryption
68:ac:6b:92:ba:cd:a5:38:03:20:05:21:0f:a1:5d:66:81:b7:
9a:b1:ca:96:5b:63:ee:5e:e0:47:06:3f:73:db:a0:c4:8e:cc:
39:51:c8:b5:00:f7:e9:4e:9c:34:fd:d0:4f:66:04:5f:c2:40:
38:97:d2:ab:fc:c1:10:ff:14:cb:c7:4c:9b:89:ff:7b:a6:cf:
11:76:1f:10:4a:a5:00:b5:a3:ce:76:d1:77:d8:22:bf:3c:00:
40:19:66:7c:75:ca:99:d8:0f:c2:44:1b:51:42:23:b9:54:a6:
3e:c5:10:3f:a0:d0:9a:19:6d:2b:a9:8f:52:90:6e:8d:3f:7b:
df:0d:bf:68:6f:33:e6:22:b0:2f:ad:94:f5:1a:c4:09:07:4c:
31:38:8c:67:d3:10:a3:05:ab:f0:53:1d:9e:f6:52:37:eb:1e:
0e:fb:aa:50:04:d0:e1:48:66:a1:7b:01:49:28:8f:a3:e9:69:
78:28:6a:39:58:d4:02:b2:f9:9a:ae:85:7e:6a:72:b5:fe:58:
00:1c:51:6c:68:82:63:4d:3b:07:53:21:c6:9d:70:b7:d1:31:
56:41:44:ec:76:4a:25:40:aa:82:f4:aa:e2:f5:39:a4:64:78:
a5:8a:44:7c:20:93:88:7c:99:dc:27:32:ad:50:0c:20:3f:28:
91:54:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:25 2025 by rpki-client