Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/LO1_d0yVCX7HVnwtb_vj0j8vr3o.roa
File: LO1_d0yVCX7HVnwtb_vj0j8vr3o.roa (raw, json)
Hash identifier: b/Gy3NRgV53/rI0VdowZ3tk3HJrLHOk2SjimatAe6iY=
Subject key identifier: 2C:ED:7F:77:4C:95:09:7E:C7:56:7C:2D:6F:FB:E3:D2:3F:2F:AF:7A
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0189BAEC08718D8ACB8D3D5FD593819B4573
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/LO1_d0yVCX7HVnwtb_vj0j8vr3o.roa
Signing time: Thu 03 Aug 2023 10:22:58 +0000
ROA not before: Thu 03 Aug 2023 10:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.15.102.0/23 maxlen: 23
5.152.169.0/24 maxlen: 24
185.15.101.0/24 maxlen: 24
5.152.168.0/24 maxlen: 24
5.152.168.0/21 maxlen: 21
5.8.184.0/24 maxlen: 24
5.8.185.0/24 maxlen: 24
5.8.186.0/24 maxlen: 24
5.8.191.0/24 maxlen: 24
5.8.190.0/24 maxlen: 24
5.8.187.0/24 maxlen: 24
37.1.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:ec:08:71:8d:8a:cb:8d:3d:5f:d5:93:81:9b:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Aug 3 10:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ced7f774c95097ec7567c2d6ffbe3d23f2faf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:c8:08:52:90:1f:98:4c:55:99:cc:a4:c8:
17:97:2f:da:ce:c4:21:7c:62:72:a1:63:c7:d1:b9:
28:76:50:3e:a4:47:4b:6a:80:f8:10:5a:8a:d4:b6:
04:0f:cd:1e:4e:99:06:e8:b5:d8:f3:ed:77:ef:04:
52:6a:83:c1:94:63:89:e3:18:a0:9c:b4:ca:58:60:
00:d3:50:c5:1f:d9:65:bc:43:d0:24:05:9e:6a:bd:
fd:b7:25:14:18:d5:32:74:c1:64:58:96:97:6d:f4:
de:3e:5a:15:02:64:a2:39:05:cc:5b:7d:11:f6:b3:
35:7b:7b:3b:74:d5:01:b3:6b:00:b2:64:ac:fa:07:
17:af:ff:b3:8e:6f:6a:6a:25:06:29:77:e5:6e:08:
6a:43:ec:bc:09:c8:52:b5:fb:69:a4:92:ae:0b:bf:
73:5d:b6:14:41:49:fc:7a:44:dc:ac:e8:e6:aa:fc:
34:91:ce:44:96:ac:58:dd:a3:86:d0:04:03:93:1a:
f3:ea:79:9a:53:d4:5b:a9:f5:b5:72:47:91:01:40:
6a:6f:ef:bd:d0:bf:71:79:f9:d5:04:64:bf:10:73:
45:ed:61:76:9b:de:03:d5:18:31:7a:d0:86:9f:02:
82:dd:19:1f:51:b5:cd:31:c8:1b:b6:77:3e:94:96:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:7F:77:4C:95:09:7E:C7:56:7C:2D:6F:FB:E3:D2:3F:2F:AF:7A
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/LO1_d0yVCX7HVnwtb_vj0j8vr3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/22
5.8.190.0/23
5.152.168.0/21
37.1.183.0/24
185.15.101.0-185.15.103.255
Signature Algorithm: sha256WithRSAEncryption
25:a6:a8:2d:11:75:0b:62:2b:f2:35:ed:65:4d:9a:50:ea:68:
5e:fc:1e:db:92:c9:74:71:78:f6:c1:11:ea:0e:ce:82:23:f1:
0f:d8:47:00:5d:66:65:bb:67:90:2e:3d:bd:1d:f4:e3:f3:f8:
e5:03:b3:a5:45:45:49:5a:93:9a:e2:b6:08:d2:da:8b:bc:7f:
cd:43:fb:10:31:eb:34:a4:42:71:1c:21:b9:24:dd:23:b2:9b:
0b:ed:fa:be:35:32:8d:bc:e8:4a:d7:64:b3:1b:4c:6b:88:5c:
5e:f0:8f:46:91:a2:55:54:56:28:a8:36:24:6e:0a:ab:8a:91:
4f:4a:87:da:5a:28:14:26:d0:bf:13:28:fe:1e:ac:aa:43:71:
87:ba:47:00:ef:ea:86:73:1f:a5:2d:31:d1:40:15:87:24:57:
f9:b1:c6:e9:5b:c6:6e:67:64:d6:25:15:2b:63:a3:cc:89:a8:
41:50:43:c5:58:d2:cd:cc:a7:d4:11:81:c2:a9:14:24:62:fd:
4b:5f:dc:80:ab:e3:a5:89:a4:06:91:eb:58:7c:3c:57:3e:83:
08:9a:7b:6e:f2:d1:a2:48:31:1a:27:bd:2e:34:44:99:74:52:
26:ad:d0:d2:f5:e9:a6:ce:9d:dd:b5:d0:83:d2:e8:ab:50:48:
3c:7c:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:28 2025 by rpki-client