Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lBPMV3bw7IaZ6ldxAHk5BXnnQo8.roa
File: lBPMV3bw7IaZ6ldxAHk5BXnnQo8.roa (raw, json)
Hash identifier: kpRkIhIhP9x8SNDquP2OC0IR6DO/hk6XeyhzBCVOrLY=
Subject key identifier: 94:13:CC:57:76:F0:EC:86:99:EA:57:71:00:79:39:05:79:E7:42:8F
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018C14322CBA9AB38FEDCB9942BB77362D9B
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lBPMV3bw7IaZ6ldxAHk5BXnnQo8.roa
Signing time: Tue 28 Nov 2023 04:31:21 +0000
ROA not before: Tue 28 Nov 2023 04:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 176.116.0.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
185.235.230.0/24 maxlen: 24
31.222.227.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:32:2c:ba:9a:b3:8f:ed:cb:99:42:bb:77:36:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Nov 28 04:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9413cc5776f0ec8699ea57710079390579e7428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:88:05:7e:26:31:40:74:27:2d:da:0a:11:
2a:af:52:63:3f:d6:5e:75:f4:46:bc:92:17:6f:d5:
e8:e4:0f:eb:2f:08:17:90:03:dd:6b:a6:42:b5:d9:
54:d0:16:83:4b:b3:61:93:79:06:26:c6:d8:9d:4e:
36:8a:ee:f7:fb:fa:ff:3b:85:2f:91:bc:5c:99:99:
4c:6a:e0:cd:e7:b4:9b:8d:16:53:7a:e0:fc:38:12:
d7:33:62:0c:73:7b:49:a5:2e:49:4e:61:b2:41:b3:
d6:ef:8d:1b:0d:db:1d:a3:ce:2e:60:11:77:4a:65:
df:71:0b:61:a9:d9:46:4c:90:8b:de:67:5b:94:7c:
20:16:81:a3:3c:3f:a5:d3:a9:66:8f:e7:10:f7:e1:
27:00:59:ce:3b:62:9a:bd:cd:9a:59:f8:f8:23:c7:
f3:ef:8c:87:fc:66:97:98:3c:8e:0d:07:ba:15:5f:
ac:66:c8:97:c3:cc:0a:be:bd:b6:50:9a:66:9d:df:
f6:f9:f5:7d:e8:19:93:a6:36:02:80:b2:2a:df:69:
4c:2f:7a:c9:5a:ff:b8:2d:80:97:43:6e:d5:65:17:
18:34:18:fb:c2:8a:21:8b:6a:26:fd:f5:a5:ea:2c:
03:f9:2c:7c:34:e3:f5:ff:6b:88:af:cd:c2:87:a8:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:CC:57:76:F0:EC:86:99:EA:57:71:00:79:39:05:79:E7:42:8F
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/lBPMV3bw7IaZ6ldxAHk5BXnnQo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
185.235.230.0/24
IPv6:
2001:678:e30::/48
Signature Algorithm: sha256WithRSAEncryption
1e:f3:8d:5c:7d:eb:fc:8d:f2:b6:1f:db:b8:6f:47:9d:fe:69:
c4:7d:92:87:53:9a:cf:2e:ce:ca:44:1e:fd:f2:23:d6:8f:3e:
64:c2:2a:88:d3:1e:69:33:6a:28:5e:06:c8:8c:75:4d:4a:e9:
4c:4e:53:69:59:4a:af:bd:7a:4e:07:61:5c:1c:cc:67:36:4f:
93:fb:3c:b2:24:e9:ae:1b:c7:86:18:e4:89:d4:61:33:f0:9f:
07:45:c0:d4:65:9b:71:e3:aa:9a:54:db:c9:c5:3d:8b:e7:2c:
8e:3e:49:8c:17:4e:a9:ba:19:8a:2b:28:95:5d:99:8b:83:d5:
c6:15:13:38:ff:06:c0:09:80:b6:00:6c:b2:e8:1c:32:b7:17:
b6:4e:cb:2d:2a:74:98:4a:5e:c1:e9:61:d4:54:78:0b:66:fd:
6c:78:4b:6a:e8:d8:4b:00:bc:60:c1:2f:23:c8:c9:a9:ec:2d:
0d:db:27:2b:49:f2:a2:0d:d6:b8:33:a5:b2:fe:ad:34:2d:f6:
67:e7:5e:35:14:d7:96:1d:5e:ff:2b:eb:a0:99:1c:a1:7d:75:
79:7d:3d:0d:ad:6f:96:b1:3a:0a:55:41:d0:1e:18:2f:d6:a9:
14:d8:ab:0e:6b:19:50:68:6d:33:dd:48:90:82:0f:19:73:b8:
4f:c9:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:10 2025 by rpki-client