Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/8J0tdeh9YvCveXMqU9SlPdkQ2DA.roa
File: 8J0tdeh9YvCveXMqU9SlPdkQ2DA.roa (raw, json)
Hash identifier: iKejON5XJXrvWxpC7J913PbX3gER1p++c40HfZZBkSQ=
Subject key identifier: F0:9D:2D:75:E8:7D:62:F0:AF:79:73:2A:53:D4:A5:3D:D9:10:D8:30
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01856F38FE060C0EE56E039D34F5BDC4B81E
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/8J0tdeh9YvCveXMqU9SlPdkQ2DA.roa
Signing time: Sun 01 Jan 2023 21:24:44 +0000
ROA not before: Sun 01 Jan 2023 21:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15544
IP address blocks: 185.104.144.0/24 maxlen: 24
185.104.144.0/22 maxlen: 22
185.104.145.0/24 maxlen: 24
185.104.146.0/24 maxlen: 24
185.104.147.0/24 maxlen: 24
213.140.132.0/24 maxlen: 24
213.140.131.0/24 maxlen: 24
213.140.128.0/24 maxlen: 24
213.140.130.0/24 maxlen: 24
213.140.128.0/19 maxlen: 19
213.140.129.0/24 maxlen: 24
213.140.133.0/24 maxlen: 24
213.140.135.0/24 maxlen: 24
213.140.134.0/24 maxlen: 24
213.140.137.0/24 maxlen: 24
213.140.136.0/24 maxlen: 24
213.140.139.0/24 maxlen: 24
213.140.138.0/24 maxlen: 24
213.140.143.0/24 maxlen: 24
213.140.146.0/24 maxlen: 24
2a02:2298:4000::/36 maxlen: 36
2a02:2298:8000::/36 maxlen: 36
2a02:2298::/36 maxlen: 36
2a02:2298::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:fe:06:0c:0e:e5:6e:03:9d:34:f5:bd:c4:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 21:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09d2d75e87d62f0af79732a53d4a53dd910d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:7e:10:e5:ab:92:28:1c:4f:a1:1a:5c:c9:
aa:68:87:cc:2e:49:71:21:4c:9a:b5:d7:6f:65:ca:
de:a3:d1:f4:62:99:e4:12:26:7b:4f:52:1d:fc:df:
71:2f:80:66:21:bb:60:3f:b0:7f:5a:65:46:19:80:
f1:c5:c9:68:25:11:06:34:df:52:7e:0d:25:7d:f2:
80:72:e4:00:3e:b3:46:c8:b0:c5:49:ae:5a:80:50:
a5:97:31:f1:1e:a9:d9:e0:8b:da:ec:cc:ae:42:49:
f8:b1:1c:ce:9f:2e:83:f2:b6:d7:2c:fb:8d:95:62:
b2:d6:97:a2:05:1d:66:64:89:fc:5e:74:e9:18:d8:
6b:ce:01:43:97:55:c5:fa:71:82:8c:a8:6b:aa:2c:
f7:9a:c7:bd:ee:6d:ec:5e:28:a8:f3:83:e2:50:8f:
43:e7:ac:ee:fd:13:b7:f3:d9:de:01:9b:45:cc:73:
1e:c5:f8:a4:eb:4b:b0:d0:83:18:61:e4:96:52:7b:
f7:1d:d6:fc:40:73:ad:33:44:c1:0d:cb:c7:2f:bd:
da:e5:70:8f:20:14:45:e8:44:0d:e1:24:a3:da:25:
d0:40:67:51:4f:68:d2:15:4c:7c:9a:9d:8b:07:39:
e5:80:0c:44:bc:89:5c:65:94:c5:ae:34:76:1a:43:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:2D:75:E8:7D:62:F0:AF:79:73:2A:53:D4:A5:3D:D9:10:D8:30
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/8J0tdeh9YvCveXMqU9SlPdkQ2DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.144.0/22
213.140.128.0/19
IPv6:
2a02:2298::/32
Signature Algorithm: sha256WithRSAEncryption
28:bc:f0:95:40:ba:10:4c:83:02:82:4f:a4:5a:7c:0f:7d:54:
36:b6:39:7f:ff:70:c1:f2:b6:b1:67:d9:5a:54:b4:06:b9:ed:
ff:26:79:48:e8:ac:e6:60:57:ab:a1:1b:3f:e1:21:bd:f2:e4:
6c:6c:81:de:ac:3b:4e:6c:47:fb:be:f1:1a:48:65:98:bb:57:
c8:a0:74:92:9d:c2:6c:fa:d1:f7:c9:d4:d8:fe:49:fd:24:a4:
c9:ed:6f:74:31:24:ea:4b:24:ff:53:f9:d2:cd:3b:34:84:64:
c1:28:c4:94:ed:42:b1:6e:b3:10:c8:8e:ae:45:55:e0:61:45:
af:ff:5b:d8:07:4a:4f:28:56:a9:f6:31:f3:cf:b7:e4:4c:a8:
51:f4:c7:24:2b:dc:e0:e1:1e:db:79:14:b8:a3:08:e0:27:9c:
93:ce:14:41:19:c5:18:e4:74:61:04:8c:f9:13:09:98:31:82:
9a:b5:6a:e6:d1:04:36:ca:c5:17:4c:22:60:1d:e2:a6:7e:0f:
bb:73:cc:f7:74:69:9d:c1:76:3b:a7:dd:3f:68:57:5b:8d:1a:
a4:fa:04:84:c8:52:a6:d2:55:13:a5:b3:57:11:f3:b2:c3:04:
25:65:53:1a:bb:93:c5:b6:3b:34:ea:ac:fb:4c:34:81:2c:cd:
94:97:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:10 2025 by rpki-client