Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/dxBOx2-MJzYkZg8ZAwVo4mIkWIQ.roa
File: dxBOx2-MJzYkZg8ZAwVo4mIkWIQ.roa (raw, json)
Hash identifier: lqgkqq1TyW3UD9y+3R5L7W9SzVQQKsfF5GG8jC8vOa8=
Subject key identifier: 77:10:4E:C7:6F:8C:27:36:24:66:0F:19:03:05:68:E2:62:24:58:84
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 018572BA69333537A30E15E7FE77DB6B290E
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/dxBOx2-MJzYkZg8ZAwVo4mIkWIQ.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47288
IP address blocks: 193.218.105.0/24 maxlen: 24
193.218.121.0/24 maxlen: 24
193.218.40.0/24 maxlen: 24
193.218.43.0/24 maxlen: 24
93.184.144.0/24 maxlen: 24
93.184.145.0/24 maxlen: 24
93.184.147.0/24 maxlen: 24
93.184.146.0/24 maxlen: 24
93.184.149.0/24 maxlen: 24
93.184.148.0/24 maxlen: 24
93.184.151.0/24 maxlen: 24
93.184.150.0/24 maxlen: 24
93.184.152.0/24 maxlen: 24
93.184.157.0/24 maxlen: 24
93.184.159.0/24 maxlen: 24
93.184.158.0/24 maxlen: 24
93.184.154.0/24 maxlen: 24
93.184.153.0/24 maxlen: 24
93.184.156.0/24 maxlen: 24
93.184.155.0/24 maxlen: 24
185.168.152.0/24 maxlen: 24
185.168.154.0/24 maxlen: 24
185.168.154.0/23 maxlen: 23
185.168.153.0/24 maxlen: 24
185.168.155.0/24 maxlen: 24
2a00:dc00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:69:33:35:37:a3:0e:15:e7:fe:77:db:6b:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77104ec76f8c273624660f19030568e262245884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:c3:40:2d:7c:1c:0f:68:e7:cb:0d:ab:e9:
55:7e:5c:cf:bc:f2:58:51:ea:96:8c:18:52:b0:6c:
ee:f3:ca:e2:66:bc:b7:a2:ee:1e:c9:1b:7d:a4:62:
0d:8b:61:99:97:27:1d:31:7b:e1:b5:d5:de:07:88:
e2:95:87:a4:b9:92:dd:c7:01:d9:b7:97:d4:b3:3d:
4e:54:a1:30:6c:40:8a:52:a4:39:f7:01:da:80:95:
9d:51:e9:13:ca:ec:33:48:9c:ee:7f:ce:e5:33:8f:
fc:6a:05:f2:80:8d:fe:7b:4f:67:ed:34:2f:fe:69:
7b:74:44:8d:11:c4:9a:b6:be:0d:1a:4f:b5:8b:6b:
04:26:b8:1a:57:c3:47:11:a9:54:fa:08:c1:ec:86:
4c:5c:96:11:92:96:e0:56:28:05:c5:28:13:1b:fc:
47:5f:6b:f0:43:4b:25:3f:3a:5c:05:79:09:63:c7:
af:5f:03:af:c3:81:2e:f9:16:43:a1:29:36:4c:2f:
dc:5b:95:f5:dd:6e:07:12:f0:69:39:a5:16:ef:8f:
a7:cd:0f:82:a5:f5:80:fb:e5:ae:41:67:c8:08:c9:
7c:7b:48:3b:e2:d9:3a:67:ad:5d:68:22:31:87:4f:
24:15:29:b7:d4:29:84:3b:ae:21:95:6e:e8:b1:41:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:4E:C7:6F:8C:27:36:24:66:0F:19:03:05:68:E2:62:24:58:84
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/dxBOx2-MJzYkZg8ZAwVo4mIkWIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.144.0/20
185.168.152.0/22
193.218.40.0/24
193.218.43.0/24
193.218.105.0/24
193.218.121.0/24
IPv6:
2a00:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
49:af:2c:0c:fa:36:9d:50:92:a2:47:64:40:1e:f4:9a:2f:9d:
01:dc:3b:53:f0:f0:26:93:3e:70:98:69:28:9f:b0:6a:36:f2:
68:f5:a9:d2:67:11:f7:17:6b:f5:84:44:db:be:23:71:3b:6f:
7d:f7:85:a9:b6:41:57:b5:bf:9f:38:44:30:bf:66:6a:dc:18:
e4:4c:4b:6b:12:2d:eb:fe:f4:38:a3:30:f9:08:80:ca:01:95:
d2:b6:e3:fd:ae:81:0b:f7:50:3c:21:4c:6a:52:9d:b8:11:3e:
8d:0c:1c:20:05:59:ea:84:ed:bb:c5:ae:87:f6:92:64:f5:29:
ab:ff:e5:62:d1:c0:a1:94:a6:37:69:a2:27:80:87:08:c5:68:
58:0d:33:59:25:91:42:f2:0b:6d:1f:e6:44:e8:e5:2e:0d:60:
29:ad:6f:a7:27:6f:a6:8e:f4:93:c9:9f:fe:6f:5d:61:72:3c:
5b:ca:48:a6:1a:4a:d8:99:15:e2:15:f4:8e:51:9e:64:ac:78:
d4:90:a0:70:8e:13:83:23:f7:ab:2b:6c:f4:fc:88:dd:ff:b6:
72:0f:d8:91:76:2f:36:52:28:0f:4e:f4:f5:57:be:9a:89:77:
1e:d2:e4:7f:1a:b7:54:4c:32:63:9a:40:bf:3b:c0:4f:d2:e6:
98:fa:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:18:24 2025 by rpki-client