Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ALMGsxFjUMCXPnNTEbtFeMXuDUQ.roa
File: ALMGsxFjUMCXPnNTEbtFeMXuDUQ.roa (raw, json)
Hash identifier: B+UbcFLWrvlwJvvFE2+eooPwgcIXfWy4MRwPyLY5dqY=
Subject key identifier: 00:B3:06:B3:11:63:50:C0:97:3E:73:53:11:BB:45:78:C5:EE:0D:44
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139C60C8D18925095371CE760FDE130
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ALMGsxFjUMCXPnNTEbtFeMXuDUQ.roa
Signing time: Mon 02 Jan 2023 06:44:49 +0000
ROA not before: Mon 02 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29068
IP address blocks: 94.184.160.0/20 maxlen: 21
94.184.171.0/24 maxlen: 24
94.184.172.0/22 maxlen: 22
94.184.170.0/24 maxlen: 24
94.184.168.0/23 maxlen: 23
94.184.168.0/22 maxlen: 22
194.225.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c6:0c:8d:18:92:50:95:37:1c:e7:60:fd:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b306b3116350c0973e735311bb4578c5ee0d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:ec:af:6f:a9:11:6f:62:55:e6:17:ae:a4:
54:dd:5b:00:4d:ec:1c:36:f1:fd:d7:a6:61:25:19:
73:6d:27:ee:ca:56:19:5c:b1:f3:d8:7e:8f:c7:52:
68:77:66:c9:7e:02:92:ab:18:e0:1a:27:ee:99:6e:
c4:ef:84:af:19:88:1c:80:58:55:19:30:7c:82:1d:
d6:01:1f:1a:cb:a3:ed:a7:63:ab:4b:1b:b6:71:74:
ce:44:7b:57:a1:62:62:29:e5:58:9f:e2:54:fd:52:
68:34:7a:4e:7d:15:0d:18:91:db:71:91:2d:95:a1:
cf:a0:e3:99:d2:8e:6b:98:d5:56:96:f4:70:5d:f3:
f7:7f:c5:d6:b7:8f:e6:2a:9c:e5:b6:59:88:59:06:
03:c4:0c:c0:5a:3c:55:42:97:61:32:b2:61:13:22:
5b:92:4b:3b:c6:b2:ec:d8:4f:57:8e:7b:f9:64:0a:
74:47:9f:7d:97:95:d9:28:5b:bd:47:83:8e:45:64:
62:7b:8f:a8:b7:67:c6:d9:2b:3f:ba:64:74:f9:d6:
11:17:bb:41:36:35:96:9d:87:78:22:23:82:c8:1e:
bc:6d:8d:d2:42:d1:11:3d:63:ec:e2:c0:7a:78:05:
f1:4e:91:0e:12:36:5d:6c:51:20:8a:c5:0e:b8:37:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:06:B3:11:63:50:C0:97:3E:73:53:11:BB:45:78:C5:EE:0D:44
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ALMGsxFjUMCXPnNTEbtFeMXuDUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.160.0/20
194.225.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:ac:66:db:3d:ba:d6:15:4d:98:36:3d:f6:92:ac:8d:82:2d:
83:2e:f6:26:10:e4:44:bd:ac:4b:0b:0e:09:fa:5c:78:a0:25:
89:71:c3:ac:d4:c9:d1:9f:4f:54:45:05:92:25:2a:fe:1e:6d:
a0:85:07:bb:55:d6:7a:ee:1a:ce:c7:34:4b:9f:dd:de:f5:38:
4b:2a:7d:d6:dd:02:87:6c:b7:9b:96:1f:e8:33:55:e0:4f:a8:
f0:bb:b1:ce:9d:3a:47:5a:5d:b3:74:bc:eb:22:a2:b1:43:6c:
41:c0:7e:d5:da:11:1c:ad:7b:64:b4:32:96:8f:11:3c:02:b2:
48:29:28:77:e0:61:3b:8f:13:8d:27:c3:5d:41:ee:fe:e4:34:
72:03:3c:06:dd:e1:0b:b6:f4:7e:56:8c:3d:2b:b1:5e:62:ae:
5c:1d:9d:1c:fc:56:81:3b:ec:04:28:b7:e5:b2:24:26:51:12:
8a:92:83:aa:d4:9e:de:c2:fe:69:e5:88:98:a4:84:70:8c:ec:
c8:58:35:e3:ea:6e:13:cd:de:4b:66:ba:e6:43:65:a6:2e:db:
d6:e4:8f:18:2c:3e:5c:c1:2b:90:b9:4a:3c:30:3c:41:71:c2:
5d:95:5e:97:79:36:48:37:f2:d5:28:db:87:72:e0:f5:e0:2d:
1c:02:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:33 2025 by rpki-client