Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eGkZtd7cSvDxxoIh9LMRSiQtv9o.roa
File: eGkZtd7cSvDxxoIh9LMRSiQtv9o.roa (raw, json)
Hash identifier: RGZAsqeEQXGTf/0wzUBPvRi6oWzvgZn+Uc5xbKYrBA4=
Subject key identifier: 78:69:19:B5:DE:DC:4A:F0:F1:C6:82:21:F4:B3:11:4A:24:2D:BF:DA
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0187A27B98CA8D415166C57891FB5321359E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eGkZtd7cSvDxxoIh9LMRSiQtv9o.roa
Signing time: Fri 21 Apr 2023 06:23:41 +0000
ROA not before: Fri 21 Apr 2023 06:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50563
IP address blocks: 89.46.140.0/24 maxlen: 24
88.148.115.0/24 maxlen: 24
89.46.140.0/23 maxlen: 23
89.46.141.0/24 maxlen: 24
88.148.53.0/24 maxlen: 24
88.148.52.0/23 maxlen: 23
88.148.52.0/24 maxlen: 24
176.56.116.0/24 maxlen: 24
94.76.171.0/24 maxlen: 24
5.154.44.0/24 maxlen: 24
176.227.145.0/24 maxlen: 24
178.156.121.0/24 maxlen: 24
5.154.0.0/24 maxlen: 24
84.236.143.0/24 maxlen: 24
94.76.141.0/24 maxlen: 24
94.76.146.0/24 maxlen: 24
178.156.57.0/24 maxlen: 24
185.27.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:7b:98:ca:8d:41:51:66:c5:78:91:fb:53:21:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Apr 21 06:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=786919b5dedc4af0f1c68221f4b3114a242dbfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:56:0c:d8:47:c6:b2:61:74:cf:66:79:d9:
45:06:2e:c2:c4:35:d1:d2:ff:39:5b:a1:2f:8b:45:
60:30:62:85:55:f0:8e:37:47:c0:98:5c:1f:81:a0:
03:e6:f7:01:8c:27:06:e9:03:29:b0:88:38:c0:e1:
fd:ee:e7:32:42:20:71:05:df:c4:ac:e3:c8:da:17:
2f:60:89:0b:96:c7:32:4a:54:90:2c:56:6d:08:66:
f0:bc:91:7c:d3:94:4e:17:76:31:50:97:de:f3:13:
72:23:5d:22:87:40:ff:3a:1c:e1:79:92:fa:20:38:
71:68:e8:55:33:aa:f8:3b:dd:1a:b6:3e:6b:f0:08:
e8:59:6e:66:e2:6b:b7:a0:1e:8d:c1:c7:e2:02:56:
dc:30:79:ce:c8:1a:43:ee:af:75:eb:fc:3e:a0:2b:
6a:62:c5:f3:91:81:08:4e:2c:25:0e:3e:a4:52:dd:
01:9e:39:ea:63:ac:fd:f7:66:93:0b:64:57:1d:26:
df:44:03:40:ef:fa:ba:c7:26:fe:4f:0f:08:ed:4d:
95:75:ab:d7:03:1a:3f:0e:2b:10:28:29:02:ce:2a:
08:9a:9b:fc:95:6f:25:e5:c7:be:7d:db:10:40:ee:
dd:47:b0:18:99:0d:ab:a5:d0:4c:c7:55:72:37:c7:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:19:B5:DE:DC:4A:F0:F1:C6:82:21:F4:B3:11:4A:24:2D:BF:DA
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eGkZtd7cSvDxxoIh9LMRSiQtv9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.0.0/24
5.154.44.0/24
84.236.143.0/24
88.148.52.0/23
88.148.115.0/24
89.46.140.0/23
94.76.141.0/24
94.76.146.0/24
94.76.171.0/24
176.56.116.0/24
176.227.145.0/24
178.156.57.0/24
178.156.121.0/24
185.27.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ef:a3:88:d7:c5:8d:e5:94:e9:33:cd:f8:37:bb:69:28:60:
5e:27:bd:e6:53:f7:90:15:91:ce:e5:34:53:2c:3e:c2:7f:9a:
e2:43:9d:46:27:26:83:71:26:66:b1:db:26:42:5c:fb:3d:e2:
b6:38:38:8c:15:72:b5:7d:4d:15:b7:0c:cf:c0:d2:1d:cd:01:
6f:cf:fb:86:d1:03:d0:43:77:0f:a7:18:38:95:3e:29:79:1c:
26:0f:cc:5b:d1:f5:dc:df:57:d9:cd:27:5b:96:83:29:dc:ca:
6a:3f:c0:4f:07:6e:ca:cb:2e:c5:8d:03:0a:2d:72:ce:02:a0:
de:b4:fc:fe:bc:ac:10:ce:0d:a5:9c:93:25:a2:f2:f6:ae:83:
d8:ee:fe:07:0e:b8:a5:e8:61:06:ee:f8:cd:61:71:dd:c3:6e:
fc:92:05:5e:8b:05:15:4f:28:5d:78:58:e0:55:9a:5c:81:8a:
fc:17:5d:2b:63:63:35:18:75:9f:aa:5d:4c:96:bc:5e:c5:16:
63:da:54:28:14:30:35:63:bc:42:8b:62:3a:e2:f6:2a:11:50:
71:80:1f:39:6d:38:7d:cf:40:34:99:65:49:e7:9a:b3:f4:2a:
e0:ac:d2:2e:bd:1e:f8:77:fc:61:23:29:07:4e:72:ed:99:1b:
d4:59:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:54 2025 by rpki-client