Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/s4mI3bAdH3vPpaactFXgA5Jp89o.roa
File: s4mI3bAdH3vPpaactFXgA5Jp89o.roa (raw, json)
Hash identifier: Px8c+Pfy68NodVqQfUoNvgIw2DHiP1qeQRGmqRiJsLI=
Subject key identifier: B3:89:88:DD:B0:1D:1F:7B:CF:A5:A6:9C:B4:55:E0:03:92:69:F3:DA
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 01856E2FA2D4239ECEEBA1F87054CAF79C2F
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/s4mI3bAdH3vPpaactFXgA5Jp89o.roa
Signing time: Sun 01 Jan 2023 16:34:53 +0000
ROA not before: Sun 01 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52106
IP address blocks: 194.180.44.0/22 maxlen: 22
45.148.40.0/22 maxlen: 22
194.61.159.0/24 maxlen: 24
194.61.56.0/24 maxlen: 24
194.60.205.0/24 maxlen: 24
194.60.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a2:d4:23:9e:ce:eb:a1:f8:70:54:ca:f7:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jan 1 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b38988ddb01d1f7bcfa5a69cb455e0039269f3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:42:b7:0d:af:72:f5:fc:a0:b2:71:22:41:
83:73:63:0e:d8:ee:0a:dd:7e:15:5a:eb:b0:1c:7b:
4e:ce:f7:ff:3c:21:e8:fb:97:c4:36:af:a4:af:d7:
de:6a:83:22:3b:dd:88:d3:45:63:8e:5a:ed:24:a7:
22:25:65:b0:ad:26:b6:83:25:35:62:b7:ff:86:42:
ab:43:b5:10:dd:2a:cd:c1:ee:47:e0:2d:f9:45:d8:
06:86:be:8e:e4:19:f1:1e:27:8f:a1:80:bd:69:7c:
93:65:82:f7:ad:0d:ae:38:71:78:c9:27:c6:9f:26:
70:55:8f:57:a1:53:f2:3a:24:70:4c:b3:c9:40:92:
05:61:ea:44:32:5f:0f:10:1d:6d:cd:d8:36:6a:ca:
fd:3a:c8:6c:f7:11:70:4c:21:7d:ea:77:ec:43:02:
ac:ca:ce:f0:71:a7:1e:4c:e1:89:b1:03:a6:5e:e5:
16:a7:65:99:b7:b0:94:96:85:72:2f:c8:e5:da:8b:
e8:1e:ef:4a:36:15:1d:84:17:8c:46:82:58:c2:bb:
52:91:f9:9b:99:75:89:12:37:3b:6a:a7:bc:ca:58:
91:71:9f:87:ce:5e:70:18:72:3d:8e:d4:29:96:87:
f5:1a:2d:7e:47:97:31:cc:34:8f:29:28:8c:ea:76:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:88:DD:B0:1D:1F:7B:CF:A5:A6:9C:B4:55:E0:03:92:69:F3:DA
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/s4mI3bAdH3vPpaactFXgA5Jp89o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.40.0/22
194.60.202.0/24
194.60.205.0/24
194.61.56.0/24
194.61.159.0/24
194.180.44.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f1:5a:9e:75:b0:9d:63:24:68:06:ef:eb:43:e4:f0:10:7b:
b2:2e:de:52:67:5d:32:bf:77:a8:42:17:8d:d3:28:a1:f1:58:
a3:fe:c2:b1:81:98:d6:3f:c2:8e:3c:65:3c:f2:df:c0:7a:c7:
bf:4f:b7:d4:34:51:3e:71:8d:ba:78:36:af:4f:33:29:3b:af:
19:24:8b:36:f1:ad:b8:8f:57:01:0c:85:88:12:f8:dc:c2:c7:
06:a2:6d:93:df:30:9e:ac:52:f3:df:c3:3b:70:df:2b:aa:4d:
35:7d:b4:1b:9b:7f:56:20:0b:25:9b:9e:3d:3a:ca:35:5c:bb:
9c:93:71:42:35:df:43:d0:a6:b7:48:2c:43:70:fb:7b:80:3a:
a6:5a:e6:9d:e4:9e:fd:5a:f9:cc:41:73:f8:0f:be:83:e5:20:
7a:a5:5f:fd:3b:eb:23:7a:3c:7b:d9:47:54:cb:c3:e9:93:fe:
b4:f1:e0:36:bd:8e:b8:ea:d4:c5:8a:ec:cc:2a:92:bc:60:90:
9d:6a:10:5e:a6:c7:4a:e3:85:b8:5b:60:f5:84:eb:d5:bb:98:
db:b9:77:df:b5:67:4f:78:b6:a5:a5:22:9a:9d:85:47:48:64:
a8:54:0f:ed:03:bb:3c:d5:5d:92:80:66:80:a8:45:ad:d1:90:
01:b1:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:41 2025 by rpki-client