Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Pt8-gFUA24bmvpgH9PhB3YN5RVM.roa
File: Pt8-gFUA24bmvpgH9PhB3YN5RVM.roa (raw, json)
Hash identifier: UEczXlTkNY4ftJbKXdDXlvDOxWy49OBgcXddn81vJ8w=
Subject key identifier: 3E:DF:3E:80:55:00:DB:86:E6:BE:98:07:F4:F8:41:DD:83:79:45:53
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 01856C4A4E07ED99988EA5A6A10B0E1B1DE5
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Pt8-gFUA24bmvpgH9PhB3YN5RVM.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25460
IP address blocks: 185.118.28.0/22 maxlen: 22
45.154.208.0/22 maxlen: 22
5.61.120.0/21 maxlen: 21
2a01:5ac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4e:07:ed:99:98:8e:a5:a6:a1:0b:0e:1b:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3edf3e805500db86e6be9807f4f841dd83794553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:b6:75:a3:8e:40:3b:5d:25:b4:58:65:a6:
47:9a:28:9b:6d:79:f9:1a:8e:bf:a6:69:45:00:de:
56:a0:f9:6e:14:88:87:8c:e8:46:ee:b6:97:44:af:
72:34:34:57:6b:c1:46:6f:cf:c2:d7:97:29:30:74:
38:64:28:08:fd:46:93:92:23:76:be:17:52:14:13:
5a:6c:e6:bb:dc:85:31:4b:d8:1d:39:39:27:4d:27:
90:08:fd:cf:a5:a7:81:99:a8:bb:10:d1:21:20:ee:
ea:db:a9:53:a9:2c:4f:9f:ff:13:40:70:ef:a5:aa:
4c:92:fc:23:6f:0c:8a:0c:d9:72:9b:b5:60:83:62:
5c:77:26:cd:70:46:14:db:ba:0e:56:72:79:f7:a2:
31:bd:94:ae:f4:1f:0d:b2:0a:ca:5d:60:66:6c:03:
4a:2e:e9:d1:7f:90:8c:53:25:d5:59:d6:e4:d6:0f:
84:d3:5d:60:07:60:c5:21:56:bc:7c:82:71:59:ba:
3c:98:b4:a4:4f:e2:94:ff:8f:b9:0a:87:82:0f:de:
d1:25:aa:df:34:0a:20:d4:af:6e:0b:68:f7:88:03:
48:61:83:b9:a0:e5:03:1a:78:ea:4f:d0:50:fd:bb:
fa:12:fc:ea:e3:01:b4:d1:fe:6f:c2:93:3d:a8:96:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:3E:80:55:00:DB:86:E6:BE:98:07:F4:F8:41:DD:83:79:45:53
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Pt8-gFUA24bmvpgH9PhB3YN5RVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.118.28.0/22
IPv6:
2a01:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
d3:96:0a:c4:22:b2:b7:60:7a:29:53:9a:3c:c7:f7:cf:e6:60:
b3:4f:1f:ee:10:10:92:e7:96:01:86:88:cc:6f:cc:a9:16:69:
fe:a2:62:b4:4b:06:c1:49:ff:bf:ca:80:28:26:e6:18:7b:8d:
6e:dc:e7:c2:2a:d6:6f:74:06:e0:1e:92:2e:f0:51:0a:62:b1:
c4:da:a1:3a:f5:f7:46:be:a3:09:9e:f9:46:97:ff:ab:ce:f9:
eb:66:34:18:bd:85:94:db:e6:53:35:66:4c:1a:a0:39:d3:22:
c2:d7:29:7f:e6:fb:4c:41:cf:a8:44:82:9b:44:92:6f:1c:a4:
48:86:e6:34:a6:30:ec:8c:1f:21:0e:b9:93:2b:f2:d9:be:35:
5a:85:3f:ce:c1:1b:82:f2:83:30:83:98:7a:f7:5f:64:6d:ec:
13:90:02:be:05:ed:ec:58:44:98:13:db:cf:9c:c7:6f:c3:85:
71:bb:c7:56:b4:9e:5f:70:04:34:32:1a:a9:67:26:e4:5b:74:
a8:ad:40:cf:db:8d:bd:b1:98:e4:5d:76:a1:17:dd:c6:2b:f6:
33:3e:a2:65:58:c0:94:38:9c:b2:02:21:ae:b7:ed:0a:a4:ab:
b5:42:01:fd:69:72:0b:4b:23:2c:bf:2b:18:f4:2d:44:f1:29:
12:57:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:11 2025 by rpki-client