Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/w-0a4TMD2V-uO-AJ_wzttpG2oFE.roa
File: w-0a4TMD2V-uO-AJ_wzttpG2oFE.roa (raw, json)
Hash identifier: o5eBjnDhsg4Yf9fqLPij0Huio2KLHFQfdlMNW3PbwiY=
Subject key identifier: C3:ED:1A:E1:33:03:D9:5F:AE:3B:E0:09:FF:0C:ED:B6:91:B6:A0:51
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 01856EAFA54AA456B6044BD50C3D284C6580
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/w-0a4TMD2V-uO-AJ_wzttpG2oFE.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203391
IP address blocks: 185.136.98.0/24 maxlen: 24
185.136.97.0/24 maxlen: 24
185.136.96.0/22 maxlen: 22
185.136.96.0/24 maxlen: 24
185.136.99.0/24 maxlen: 24
45.83.251.0/24 maxlen: 24
45.83.250.0/24 maxlen: 24
45.83.249.0/24 maxlen: 24
45.83.248.0/24 maxlen: 24
2a06:fb00:3::/48 maxlen: 48
2a06:fb00:2::/48 maxlen: 48
2a06:fb00:1::/48 maxlen: 48
2a06:fb00:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a5:4a:a4:56:b6:04:4b:d5:0c:3d:28:4c:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ed1ae13303d95fae3be009ff0cedb691b6a051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:41:3e:0f:24:86:2d:e8:48:9c:f3:9b:82:
c2:5a:a9:3f:4c:5c:af:2d:f4:ee:38:87:6b:59:22:
f9:9f:cb:c5:f9:eb:5c:1e:7e:9e:94:8e:9b:5d:39:
b7:4c:16:5e:4d:dc:41:3d:bc:b4:1b:e2:98:54:da:
27:c4:78:69:40:e0:d3:43:25:fd:b4:a9:7b:7b:f5:
88:ea:64:55:75:64:15:ee:4f:8b:18:bb:21:d3:2b:
f9:9e:c5:28:b4:77:ee:dc:37:7f:1a:13:ec:c9:21:
1a:8a:c3:85:a5:44:b6:d3:f4:6d:e4:5b:d7:01:81:
7e:33:69:6e:e7:f5:e0:6e:2a:6d:92:31:47:3c:c6:
6e:a2:1d:b5:2c:0c:a1:ea:24:4e:f9:9f:b7:f2:80:
09:d2:c8:9c:db:a4:26:ac:c4:5e:6f:ba:27:8e:01:
37:cb:20:61:a3:fd:f6:06:22:80:e1:31:17:ba:03:
02:7b:6c:a9:09:81:ba:5d:6c:de:3d:cb:6f:e3:20:
16:38:c3:f8:94:ac:d6:39:15:98:b5:58:7a:1f:7b:
2e:7c:23:5c:38:12:13:de:4f:3a:66:ab:11:c2:b1:
6a:bd:e7:58:52:d1:70:27:72:2e:90:31:38:23:13:
ee:f0:ad:bf:64:2d:6c:45:48:10:61:47:e0:db:0b:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:1A:E1:33:03:D9:5F:AE:3B:E0:09:FF:0C:ED:B6:91:B6:A0:51
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/w-0a4TMD2V-uO-AJ_wzttpG2oFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.248.0/22
185.136.96.0/22
IPv6:
2a06:fb00:1::-2a06:fb00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:2d:2b:70:6b:db:40:fc:0f:82:50:0a:82:9b:c9:82:15:e8:
b6:59:70:8a:70:cb:a4:c5:96:fb:6e:b1:75:0f:37:33:3a:04:
8c:6b:a8:de:11:c7:96:0b:72:65:fd:8b:ca:38:5a:d9:7c:2b:
8f:48:d1:1e:05:72:40:28:98:fc:97:76:c1:69:9e:14:44:fb:
3a:29:5a:4b:07:df:61:6b:d7:11:02:cf:2d:f8:98:88:3d:a7:
d1:ea:6e:1e:b3:86:0d:8e:81:3b:ad:e4:c4:5c:b2:7d:d9:74:
8b:4c:9f:66:93:5b:39:69:35:a9:0b:0b:f9:be:81:88:a1:b5:
44:b3:2d:65:05:4d:cc:90:57:85:b6:4a:c7:91:1e:08:f3:4f:
37:f1:3e:78:8e:43:4b:e6:fa:61:c5:76:37:fa:ff:64:7d:f0:
5b:fd:7b:45:a3:0f:fc:98:9c:64:b2:d0:a5:16:44:36:b1:10:
a3:5a:5b:46:24:62:b7:ad:e2:a1:1a:69:ce:69:45:0f:06:4c:
8e:ec:35:66:6f:c0:78:ee:92:2a:9e:0a:f0:46:68:2e:6c:7f:
af:26:b7:41:fa:2f:32:5a:a6:81:67:f9:53:56:10:6e:c2:64:
e5:56:92:96:cb:a6:8f:80:0e:00:e3:2e:e6:a1:35:82:50:9b:
8f:29:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:44 2025 by rpki-client