Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/G6w1FKWd18mdKC4Ub1ylqXdAujU.roa
File: G6w1FKWd18mdKC4Ub1ylqXdAujU.roa (raw, json)
Hash identifier: 31F6eYSgKyW/jv/LrPv9pxrbt3snR0xFp6jlBA0BUFo=
Subject key identifier: 1B:AC:35:14:A5:9D:D7:C9:9D:28:2E:14:6F:5C:A5:A9:77:40:BA:35
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0188A9749F8C8473053568957C82016068A5
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/G6w1FKWd18mdKC4Ub1ylqXdAujU.roa
Signing time: Sun 11 Jun 2023 07:56:12 +0000
ROA not before: Sun 11 Jun 2023 07:56:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 185.233.14.0/24 maxlen: 24
185.233.13.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.43.0/24 maxlen: 24
88.135.42.0/24 maxlen: 24
88.135.41.0/24 maxlen: 24
88.135.40.0/24 maxlen: 24
185.67.101.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
88.135.45.0/24 maxlen: 24
185.132.82.0/24 maxlen: 24
185.132.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:74:9f:8c:84:73:05:35:68:95:7c:82:01:60:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jun 11 07:56:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bac3514a59dd7c99d282e146f5ca5a97740ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:c2:85:7c:f5:93:cb:d9:e0:52:6e:1b:38:
db:e9:55:7e:5b:d4:20:cf:ea:bd:64:c0:7e:2d:d0:
07:d5:2d:8d:8c:a0:76:b6:c5:a4:76:56:56:a7:1d:
7a:0e:ae:f1:19:47:cf:01:7e:a2:a5:b0:9d:df:61:
c5:0c:a6:1b:d9:2f:9e:fa:22:1e:e0:0a:f7:82:62:
cb:5b:ef:1b:f0:65:63:12:21:ee:34:b2:9d:25:bd:
7b:f4:a8:88:41:d4:60:05:ff:52:d7:73:dc:17:3a:
d8:93:b1:c0:bd:fc:fd:82:15:6c:f1:f5:7e:e2:92:
72:0b:55:b2:49:05:7f:d5:7e:e5:55:b0:d0:16:34:
d2:65:75:dc:00:38:2b:f3:cf:eb:5c:80:e5:fc:9f:
72:54:c6:30:26:85:27:b9:d9:3c:35:f2:aa:c5:8f:
78:78:5f:e7:02:57:ee:db:8d:24:9c:a9:dc:e7:b4:
46:70:ec:98:c6:41:d1:86:9f:b2:dc:73:5f:81:e1:
a9:7f:c0:0e:d5:1e:b1:16:b5:b8:58:d7:12:61:7d:
9c:bf:2e:55:97:43:b7:3a:05:83:de:91:3e:6c:02:
03:c4:31:72:08:72:93:d5:c9:39:3b:c9:9b:8e:b6:
9f:9c:8b:9e:71:f4:1a:4b:69:bc:7d:67:59:e4:90:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:35:14:A5:9D:D7:C9:9D:28:2E:14:6F:5C:A5:A9:77:40:BA:35
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/G6w1FKWd18mdKC4Ub1ylqXdAujU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0-88.135.45.255
88.135.47.0/24
185.67.101.0/24
185.132.80.0/24
185.132.82.0/24
185.233.13.0-185.233.14.255
Signature Algorithm: sha256WithRSAEncryption
5f:82:2e:cb:c2:ca:c0:79:73:1e:39:e1:b8:47:75:1d:1c:da:
4a:4e:54:ab:55:65:75:77:93:2e:ea:66:bd:72:15:3c:12:c1:
ca:bd:3a:f0:3c:98:0c:15:59:27:44:98:8e:8a:83:4a:0a:a8:
a5:a4:48:f5:1f:f4:c6:a2:f4:27:ff:02:9e:cb:a3:0b:a5:a0:
52:b9:e4:a8:a8:0c:d1:ee:30:ca:e4:37:1a:ec:02:8d:83:5d:
f6:e3:73:3a:52:07:fe:0e:3d:e0:ef:8f:32:68:8d:20:43:77:
b5:96:53:ab:06:08:7b:fd:be:e3:99:49:c8:c1:64:af:09:ba:
78:24:ab:52:b3:4e:09:67:c1:b9:42:31:82:7a:54:59:d3:ad:
8f:cf:ce:0f:8c:e5:ce:68:79:0f:66:5c:44:90:c8:da:12:47:
9a:60:bd:0d:48:f6:79:a0:8d:f6:3c:ba:84:a4:15:d6:ea:1c:
79:a2:8b:4e:41:39:3a:21:ad:77:e1:a5:ab:44:27:94:2f:df:
7c:04:ae:1a:ae:cb:49:95:77:27:4a:c5:e1:6f:c6:a1:e6:a2:
09:40:b4:f8:bf:dc:18:a7:8d:ae:b7:4f:c2:94:69:80:d4:e6:
ac:70:fd:c6:62:04:b9:62:2c:02:c1:11:8f:96:97:e5:27:a9:
7f:3e:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:44 2025 by rpki-client