Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/l4b2lxANOrvYm9wEIa5wVhaXmlw.roa
File: l4b2lxANOrvYm9wEIa5wVhaXmlw.roa (raw, json)
Hash identifier: ff9rdFO00MwuJnYi5dXKoW7Ha7bIPWZgtZsFt4f22Co=
Subject key identifier: 97:86:F6:97:10:0D:3A:BB:D8:9B:DC:04:21:AE:70:56:16:97:9A:5C
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01872CA08849FE0B89037D7FDCCFDEC419E4
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/l4b2lxANOrvYm9wEIa5wVhaXmlw.roa
Signing time: Wed 29 Mar 2023 09:08:50 +0000
ROA not before: Wed 29 Mar 2023 09:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 206.204.0.0/20 maxlen: 32
43.252.28.0/22 maxlen: 32
206.204.32.0/20 maxlen: 32
103.211.184.0/23 maxlen: 32
206.204.48.0/20 maxlen: 32
37.61.226.0/24 maxlen: 32
94.176.48.0/20 maxlen: 32
216.194.80.0/20 maxlen: 32
103.225.128.0/22 maxlen: 32
45.130.120.0/22 maxlen: 32
103.207.152.0/23 maxlen: 32
193.151.52.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:a0:88:49:fe:0b:89:03:7d:7f:dc:cf:de:c4:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 29 09:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9786f697100d3abbd89bdc0421ae705616979a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:dc:58:b0:7c:51:25:b1:56:6f:85:45:7e:
c6:de:69:04:ed:65:69:c2:cc:60:92:df:b2:e0:41:
9e:29:f3:b6:91:2b:a2:c0:19:f9:8c:69:0b:43:48:
07:e9:b0:7b:e5:60:0f:12:db:8e:3b:22:fe:2f:5e:
b9:a1:a6:f3:df:c8:bd:9c:1e:c0:ff:92:58:af:e6:
e4:3c:17:fc:2e:f8:60:3f:d4:c3:a7:d5:69:18:fd:
9b:4d:8e:a9:46:4e:78:58:67:c7:3e:6a:4d:b8:d5:
3c:26:86:54:c0:91:70:db:ba:87:0e:62:51:f5:7c:
b6:02:4d:b4:00:79:de:5b:1b:8d:2c:fa:f4:42:6e:
6a:0f:71:8d:4a:01:38:e0:05:16:f7:0d:df:cc:ed:
88:b3:10:52:c7:bc:04:64:ec:e1:16:30:e7:5a:b9:
19:96:25:d3:f6:fe:c2:0a:c4:6a:fe:ef:4c:f6:a2:
e4:24:9d:59:a4:eb:9f:0d:d5:d0:4d:a4:56:ac:35:
f4:8d:bf:1b:1d:3e:53:12:1e:42:cb:bf:6e:d3:4b:
ca:11:55:b1:51:81:ca:b9:22:83:6b:40:b7:10:e5:
c6:00:ac:6a:ce:3c:47:97:8d:32:b8:84:5a:b9:ba:
55:6b:ac:22:b9:9b:8b:dd:84:7c:0e:ec:36:55:13:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:F6:97:10:0D:3A:BB:D8:9B:DC:04:21:AE:70:56:16:97:9A:5C
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/l4b2lxANOrvYm9wEIa5wVhaXmlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.130.120.0/22
85.208.148.0/22
94.176.48.0/20
103.30.12.0/22
103.207.152.0/23
103.211.184.0/23
103.225.128.0/22
180.94.216.0/22
193.151.52.0/22
206.204.0.0/20
206.204.32.0/19
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:77:54:64:fa:fe:e4:d7:6c:81:77:c7:72:2d:7e:c9:30:32:
b8:43:44:a7:c7:8f:62:3b:89:79:e1:bd:e2:04:ed:4f:cb:aa:
d6:3e:59:46:83:91:87:89:58:e0:7f:ce:51:51:9c:55:b3:bd:
e6:fb:07:d5:a4:98:83:79:21:ab:e3:2c:05:9b:2d:89:3a:48:
5a:34:d3:eb:0f:71:dc:d0:df:98:e3:56:62:48:78:e3:d2:2f:
3f:d5:57:da:39:d7:a8:54:68:8b:ff:3e:cd:18:7e:39:1c:98:
3f:b4:b0:41:db:4a:de:17:c9:15:cd:2e:89:9a:72:a6:cd:46:
88:a8:0c:2b:5a:da:f2:21:dd:94:a7:ae:f3:d3:b2:6c:7a:11:
3d:10:ce:01:5b:a5:b9:3d:90:ea:ec:df:fd:c1:60:8e:f2:01:
75:51:d3:cd:a0:21:0c:2d:eb:16:0c:9f:9f:e1:4c:86:43:46:
5d:b2:58:23:8c:9c:a5:d8:8e:2a:9b:63:f5:dc:33:13:d9:0d:
56:91:20:bc:2b:13:a1:03:15:3a:88:11:d4:10:b3:50:5a:65:
33:26:73:6f:62:91:d0:f1:76:f8:cd:5a:72:1a:b0:a8:71:49:
68:64:c0:f9:fa:15:b3:a1:82:b3:7f:42:a9:fa:4f:0d:39:cd:
78:02:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:53 2025 by rpki-client