Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/0pazcmXETi7EjNxAjEfZspYYblI.roa
File: 0pazcmXETi7EjNxAjEfZspYYblI.roa (raw, json)
Hash identifier: 1EQKVtYZab+zxogaWX479pi18mGqvajSWmQDnerslaE=
Subject key identifier: D2:96:B3:72:65:C4:4E:2E:C4:8C:DC:40:8C:47:D9:B2:96:18:6E:52
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 01856CEF31049F87CDB4224BAC32B6258E6E
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/0pazcmXETi7EjNxAjEfZspYYblI.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39402
IP address blocks: 91.240.83.0/24 maxlen: 24
91.240.80.0/24 maxlen: 24
91.240.80.0/22 maxlen: 22
91.240.81.0/24 maxlen: 24
91.240.82.0/24 maxlen: 24
194.246.91.0/24 maxlen: 24
194.246.88.0/24 maxlen: 24
194.246.88.0/22 maxlen: 22
194.246.89.0/24 maxlen: 24
194.246.90.0/24 maxlen: 24
2a0d:e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:31:04:9f:87:cd:b4:22:4b:ac:32:b6:25:8e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d296b37265c44e2ec48cdc408c47d9b296186e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:47:2e:af:d0:e7:72:21:77:c6:89:b9:49:
ea:24:6c:3d:62:b8:ea:44:33:95:6f:dc:c4:40:d5:
5a:25:0a:a1:bf:c9:0e:2e:aa:fd:8c:bc:f0:6f:64:
73:bf:a4:18:ef:79:44:8d:6b:ab:b5:fa:de:9d:d1:
53:c0:2e:2c:a0:ed:c7:0e:d9:a3:28:89:05:04:17:
51:48:d7:43:6d:1a:8f:46:42:5a:74:e3:6b:df:02:
39:2e:22:b0:a3:4c:65:fe:98:e0:65:92:8e:9e:f3:
0f:17:34:98:97:18:6a:3d:ec:09:ec:d9:e6:bd:51:
f0:66:72:77:cf:30:13:fc:9c:88:fa:f9:c9:e1:ee:
8e:c1:0f:11:17:bd:14:0c:2c:bb:29:e8:99:6d:07:
52:c7:07:a5:c2:8a:f6:c6:5c:8b:f7:dd:5e:81:72:
e0:96:27:0b:58:c4:b3:19:68:fa:44:f6:d1:75:00:
3c:2b:ee:3e:4f:7c:fa:34:d1:ef:19:40:b2:66:4b:
3a:35:5a:f8:e4:2b:75:29:e0:1d:2b:66:59:09:88:
2c:64:93:4b:36:a3:3b:c1:01:37:79:f3:3e:c7:ee:
f8:4d:59:a5:d4:b6:a3:6d:9e:83:da:8f:02:2a:34:
2c:d7:6e:e8:e0:01:74:4e:f7:9c:1e:7e:cd:cf:a9:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:B3:72:65:C4:4E:2E:C4:8C:DC:40:8C:47:D9:B2:96:18:6E:52
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/0pazcmXETi7EjNxAjEfZspYYblI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.80.0/22
194.246.88.0/22
IPv6:
2a0d:e40::/29
Signature Algorithm: sha256WithRSAEncryption
76:22:7c:3d:08:22:0a:d3:28:0f:04:a9:69:b3:53:b0:72:17:
c7:8a:c7:48:70:a4:a7:f7:56:7f:6e:bd:4d:a2:71:c1:7b:27:
57:20:de:50:a3:94:3b:b3:48:45:e5:13:01:74:6c:48:ff:2a:
19:b3:26:d0:0c:43:c2:4b:94:76:65:ef:4f:a2:78:73:f1:c9:
61:01:23:8e:ae:32:c9:08:7e:e2:30:7b:f1:f1:95:da:a4:de:
67:67:f0:a3:9e:5e:a3:8e:f5:d2:94:f4:e9:f5:ee:b4:9e:cf:
9f:41:82:46:8c:eb:be:d5:6c:bf:17:22:42:d7:00:4b:9a:7f:
ca:11:9a:b5:63:b9:84:31:91:f5:b4:39:5d:05:4a:28:3f:75:
c0:15:91:4e:f0:67:e8:ad:f7:8b:78:92:f2:d7:bf:5a:f7:8b:
c6:e5:0a:76:a1:e9:54:e7:1a:bd:ed:13:e3:18:42:94:22:55:
07:d8:25:3c:5e:0d:8d:21:21:4d:58:a3:aa:4a:44:35:b3:02:
b8:9b:43:ab:bc:f7:71:d9:5f:44:40:51:3f:9b:df:d7:46:bf:
b7:d2:d9:ed:1e:eb:ac:37:02:a3:75:08:2b:78:ad:bb:26:27:
9e:fa:2a:15:02:75:34:47:79:8b:01:bf:4e:29:eb:d1:c8:1a:
a1:3e:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:10 2025 by rpki-client