Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/_NoD4iFgo6qnfuan4oKCTW6N0m4.roa
File: _NoD4iFgo6qnfuan4oKCTW6N0m4.roa (raw, json)
Hash identifier: p9WW2nZCJgQpXOGUG63plJJhkH9y09BfHmrTTS4zO48=
Subject key identifier: FC:DA:03:E2:21:60:A3:AA:A7:7E:E6:A7:E2:82:82:4D:6E:8D:D2:6E
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 018B4DEC566E0066A6018D541884FF81C114
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/_NoD4iFgo6qnfuan4oKCTW6N0m4.roa
Signing time: Fri 20 Oct 2023 16:30:16 +0000
ROA not before: Fri 20 Oct 2023 16:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.145.40.0/22 maxlen: 24
185.219.84.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
185.254.96.0/22 maxlen: 22
185.94.29.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
62.192.153.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
2a0c:4ac0:1100::/40 maxlen: 40
2a0c:4ac0:1200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:ec:56:6e:00:66:a6:01:8d:54:18:84:ff:81:c1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Oct 20 16:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcda03e22160a3aaa77ee6a7e282824d6e8dd26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:fd:16:74:79:e8:25:d2:6d:e3:f1:e5:b8:
2a:18:ad:42:8b:f2:c4:d6:3f:41:cf:3d:ec:6a:8a:
d2:ee:cb:e3:b8:7f:14:b7:d0:da:03:43:5c:7e:21:
b6:54:a0:a3:57:ee:4a:7c:36:a1:91:7f:2c:a1:a8:
9c:2f:75:c0:8f:2e:49:bd:68:3a:7a:f1:c1:42:ca:
a1:9e:64:81:2e:c7:aa:b5:3a:df:af:d6:6c:35:7d:
b8:55:d8:ef:cd:ee:0d:93:68:bc:46:6b:6c:43:1f:
06:5e:75:04:8c:0c:a1:73:bb:19:75:d7:ee:8d:db:
b4:9f:dd:0a:2a:3e:cc:df:fc:d8:08:bc:c6:34:9a:
9d:9a:1a:60:b2:a9:e5:03:f8:2e:d2:9f:89:60:05:
1b:38:72:43:61:b2:73:c3:e1:41:3e:96:f0:f1:71:
42:81:a3:98:bd:97:3d:b4:91:51:cb:a5:76:c8:42:
21:52:63:a4:fc:e0:56:c8:d1:ad:ec:41:17:e1:2f:
40:2e:2a:f8:a9:a0:25:6d:89:dd:94:22:d3:47:21:
0e:33:a0:7a:73:ab:be:0b:0e:7d:2a:cb:0f:2a:40:
77:f4:44:78:62:2d:1e:04:c2:e5:c5:69:9b:d6:93:
56:02:d7:7a:d5:f5:32:91:33:78:5e:96:14:2e:a9:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DA:03:E2:21:60:A3:AA:A7:7E:E6:A7:E2:82:82:4D:6E:8D:D2:6E
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/_NoD4iFgo6qnfuan4oKCTW6N0m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
c0:96:bf:0b:99:69:f7:69:50:e2:6c:ff:d4:59:41:62:f5:79:
1f:af:a5:94:a8:f5:53:57:6c:11:7b:41:58:d7:92:79:87:37:
de:2e:5e:15:2b:bc:f8:38:5b:c7:d1:06:09:a1:91:9d:ef:88:
12:44:eb:50:4f:66:6e:69:33:ca:ed:79:9c:54:5b:57:f7:dc:
15:de:6f:94:2f:9b:73:35:29:b1:40:b2:6a:21:52:04:42:ec:
e3:a7:49:0b:6a:5c:49:10:58:53:0f:ef:67:e5:d9:47:48:44:
47:51:56:b1:6b:74:69:10:44:29:82:67:e8:14:21:bd:59:18:
ff:d9:f9:d6:e6:2a:b7:fc:e4:88:85:05:30:aa:04:73:7d:36:
5d:fd:e3:e9:4c:bc:06:6f:35:c6:67:6e:d2:c8:4c:48:a0:7d:
dd:59:07:13:a4:a0:5d:b9:17:c5:83:20:94:32:de:77:6a:09:
e3:a1:98:ba:0d:ed:8d:7b:2d:a8:71:e2:c5:b7:0f:f2:12:7c:
b6:89:5d:e2:aa:ed:0e:11:6a:75:dd:cf:0c:2e:53:cc:81:09:
e2:9a:92:59:e1:09:70:08:34:e1:54:a4:f5:00:73:3e:b4:f5:
a7:44:6d:de:ef:56:4e:8e:5d:d1:df:37:b9:18:30:4f:d8:c3:
ab:e2:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:55 2025 by rpki-client