Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/_SEiBiaB310gj86gRRz5dArdswM.roa
File: _SEiBiaB310gj86gRRz5dArdswM.roa (raw, json)
Hash identifier: JWzh3hBlBfJDVTBXHrJrQYEvStY/VvfIijK6mlWACf4=
Subject key identifier: FD:21:22:06:26:81:DF:5D:20:8F:CE:A0:45:1C:F9:74:0A:DD:B3:03
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01881F16D3133ECF6D886545F8B29604F27A
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/_SEiBiaB310gj86gRRz5dArdswM.roa
Signing time: Mon 15 May 2023 11:06:09 +0000
ROA not before: Mon 15 May 2023 11:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 194.113.238.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
45.80.228.0/22 maxlen: 24
185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:16:d3:13:3e:cf:6d:88:65:45:f8:b2:96:04:f2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: May 15 11:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2122062681df5d208fcea0451cf9740addb303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:8b:08:ab:33:85:43:aa:1d:c0:a3:46:71:
62:f9:f3:e8:16:9b:08:36:ca:48:c8:51:09:e7:e2:
e9:8a:cf:58:cb:79:d8:2c:e2:f6:72:27:cb:bc:a6:
f6:fc:71:53:25:f8:36:ad:74:29:22:b5:af:10:00:
35:95:9f:04:d7:8e:e7:f3:71:a6:ca:e1:b0:61:fb:
eb:23:09:3c:86:4d:82:f1:d9:81:9e:49:b3:cb:b7:
62:b3:0a:45:20:e2:0d:87:dd:44:6b:c3:c1:d7:65:
09:6a:eb:cc:99:4e:93:f2:b2:46:c9:cb:81:f7:91:
c3:24:55:74:12:f9:79:97:22:43:29:26:03:88:6d:
db:54:88:b6:31:e4:e1:ec:a5:a1:aa:f2:d4:36:c5:
5b:25:01:f4:48:e1:c8:ac:12:a3:30:28:20:49:ba:
e4:88:0e:ea:bf:a6:7f:1a:4a:50:cd:71:b5:73:19:
0d:6d:aa:1e:e2:e7:b0:8a:3e:51:3f:20:26:27:19:
f7:19:85:2f:90:87:a8:43:83:c7:ce:3c:7b:1a:2c:
90:67:5e:76:e2:10:b9:c1:31:03:2b:22:ab:5d:7f:
e0:12:76:6f:10:cf:5c:77:32:65:d2:ea:51:a3:4f:
85:67:0e:59:cc:75:f0:18:8a:c8:c5:a0:14:6c:5d:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:22:06:26:81:DF:5D:20:8F:CE:A0:45:1C:F9:74:0A:DD:B3:03
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/_SEiBiaB310gj86gRRz5dArdswM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
185.221.196.0/23
185.232.19.0/24
185.238.88.0/22
185.246.216.0/24
194.113.238.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:00:ee:30:8b:09:ac:c5:93:a7:d4:2d:55:02:c3:ee:d3:dc:
90:86:0f:86:64:ba:7a:87:c2:f8:d9:26:4a:36:7c:20:fa:b3:
b6:bb:fb:dc:bb:e2:c1:ed:c9:0a:7a:55:b6:d0:d9:05:9e:d8:
90:86:e8:cd:11:92:bd:f4:be:f5:43:96:02:41:75:d6:b8:bf:
8f:82:b2:7f:fc:cf:29:6f:17:9e:43:d3:49:df:4a:29:4e:ce:
f1:09:8c:04:6f:03:36:67:63:30:be:0b:0a:2f:fa:c5:e4:ab:
22:5d:9f:fc:8f:e7:c0:a1:b7:27:f8:16:67:3e:d0:0b:61:8b:
4c:63:12:6b:f6:48:79:b3:4b:fa:08:27:00:81:f6:29:e1:15:
fa:47:c7:46:a0:8a:b4:97:4a:27:0d:3a:39:81:3c:b3:e4:2f:
31:54:24:c6:4a:08:61:65:41:a2:37:44:e2:11:87:47:ee:18:
d3:c5:f7:af:ec:4b:ab:20:ba:a7:48:28:5e:cb:65:b0:ec:bd:
92:8e:d7:ac:58:c0:15:17:73:f8:7a:ce:1a:22:15:6d:e2:1b:
97:8d:cd:f8:b6:9b:5e:66:83:92:32:03:47:ab:67:76:e0:04:
69:e9:d5:24:72:15:1b:41:92:1d:bd:3c:64:1a:1f:e8:76:53:
f5:f4:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:15 2025 by rpki-client