Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/__l-BkZ-JtiOfe3cuAheEE4H1WA.roa
File: __l-BkZ-JtiOfe3cuAheEE4H1WA.roa (raw, json)
Hash identifier: 1qdtsEvhy7ZBbjltA3rPcz1t0gc3cle2pImtaIQuniA=
Subject key identifier: FF:F9:7E:06:46:7E:26:D8:8E:7D:ED:DC:B8:08:5E:10:4E:07:D5:60
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 13EDA182
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/__l-BkZ-JtiOfe3cuAheEE4H1WA.roa
Signing time: Tue 29 Mar 2022 18:37:08 +0000
ROA not before: Tue 29 Mar 2022 18:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203391
IP address blocks: 185.136.96.0/22 maxlen: 22
185.136.96.0/24 maxlen: 24
185.136.98.0/24 maxlen: 24
185.136.97.0/24 maxlen: 24
185.136.99.0/24 maxlen: 24
45.83.250.0/24 maxlen: 24
45.83.249.0/24 maxlen: 24
45.83.248.0/24 maxlen: 24
45.83.251.0/24 maxlen: 24
2a06:fb00:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334340482 (0x13eda182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Mar 29 18:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff97e06467e26d88e7deddcb8085e104e07d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:3d:e6:8b:af:cf:07:6b:6a:eb:82:2d:9f:
6d:10:12:cc:64:d9:2b:01:bd:00:67:72:e5:f4:ed:
cf:04:6c:a3:97:6c:c9:56:a1:9d:09:51:16:01:27:
1a:c1:b7:bc:d6:2a:20:12:5b:66:b6:63:73:98:0c:
43:d3:0a:79:c2:a3:fe:63:7a:58:3c:55:56:d9:c2:
04:07:4f:ac:de:15:ab:8e:3e:f8:9e:26:48:a8:ff:
b8:b9:c1:61:00:55:2d:49:e9:be:84:eb:1d:ba:b2:
21:4f:22:2d:64:03:9e:55:25:de:45:f6:23:62:31:
7f:96:18:83:3c:01:8c:ac:43:fa:70:c8:10:40:1f:
f4:99:a3:1b:e0:7f:1f:3c:a1:a4:05:3e:39:da:24:
f9:c7:80:cf:74:aa:83:2e:c8:7d:5e:9f:ac:99:d3:
b5:2b:1f:b4:18:09:5f:7a:76:af:df:fd:cd:7b:82:
ec:76:4e:b7:38:5a:a5:48:d7:67:c3:dc:9c:25:20:
6b:0a:63:04:c2:69:61:d2:17:80:e3:77:15:d8:58:
56:6d:08:aa:25:a8:df:e9:98:7e:41:9d:0c:2c:41:
2d:6f:c5:db:af:72:4d:06:69:df:c2:b6:1e:05:9f:
2a:6a:6d:c3:21:64:af:d9:b3:74:18:78:97:3c:be:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:7E:06:46:7E:26:D8:8E:7D:ED:DC:B8:08:5E:10:4E:07:D5:60
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/__l-BkZ-JtiOfe3cuAheEE4H1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.248.0/22
185.136.96.0/22
IPv6:
2a06:fb00:1::/48
Signature Algorithm: sha256WithRSAEncryption
b9:de:8a:a4:10:b6:ee:4b:69:5c:e7:21:62:94:a1:2a:bd:a1:
26:a2:91:b0:d2:68:2a:70:4d:99:5b:3b:91:e3:3f:97:a1:1f:
66:a6:26:17:f7:1d:91:e7:c9:c0:a0:bc:30:e2:6f:2c:b3:a6:
e0:54:34:bb:2c:06:f1:1b:3f:0b:80:a7:53:e6:37:d7:62:e5:
e7:88:72:26:cc:c1:bb:b5:8b:02:11:2a:c1:2a:c8:88:f8:8a:
cb:85:74:0a:d8:20:59:6c:ab:e1:18:18:7b:c4:bc:94:3d:a5:
e0:d5:fa:34:73:c1:97:49:87:5c:4b:0c:71:ed:d1:69:d5:c6:
72:69:bd:61:ce:12:8d:4a:55:32:4d:19:23:a3:a5:c3:ec:bf:
af:7c:59:99:1c:63:73:b0:11:e6:df:f7:2e:9c:12:79:c1:f4:
61:7e:ac:00:b2:b5:d6:62:23:ee:6f:75:ea:61:59:a5:45:44:
48:a7:e8:77:d8:f4:44:11:b0:ba:d8:8a:02:e4:b6:e7:e7:18:
af:b5:bb:58:44:90:4c:80:03:01:50:3c:0d:61:93:d3:cd:45:
d7:5f:d9:23:50:fc:af:11:42:97:b1:34:6f:fb:bf:32:b9:20:
6b:4e:67:da:58:31:d2:19:48:5e:f1:3d:05:37:c0:83:48:5b:
3c:ea:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:03 2025 by rpki-client