Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vcS6k5KQHWT3lwi8ciWOa9xHnfM.roa
File: vcS6k5KQHWT3lwi8ciWOa9xHnfM.roa (raw, json)
Hash identifier: +veBYEJdXVvgA7o9CphwY9M5xI5Ag8EylioFsjdLxvk=
Subject key identifier: BD:C4:BA:93:92:90:1D:64:F7:97:08:BC:72:25:8E:6B:DC:47:9D:F3
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B515794F003616900BBE30D76B62A8D1C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vcS6k5KQHWT3lwi8ciWOa9xHnfM.roa
Signing time: Sat 21 Oct 2023 08:26:16 +0000
ROA not before: Sat 21 Oct 2023 08:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:57:94:f0:03:61:69:00:bb:e3:0d:76:b6:2a:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 21 08:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc4ba9392901d64f79708bc72258e6bdc479df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:71:66:81:10:7b:a6:d3:72:50:bb:39:6f:
43:9c:57:cd:0d:96:11:25:55:64:c2:11:28:58:1e:
dd:48:5e:d7:96:fb:07:5b:58:b2:bb:3a:d1:b1:0f:
98:69:3f:fb:63:4d:ae:c3:6c:73:f4:59:90:94:f4:
ad:48:68:91:1c:7c:8f:74:de:85:40:64:d8:51:58:
fb:94:f1:ff:3a:b0:a6:9c:12:c5:3c:c1:16:27:30:
70:f3:38:4c:c8:16:48:8b:f8:ed:92:54:84:f4:d8:
65:2f:d7:8d:b3:85:53:5d:0e:37:59:61:0e:a5:0e:
7c:a0:68:5e:c1:9f:23:c3:72:aa:84:a6:a7:31:4b:
b1:cc:8c:cb:5a:75:ff:02:95:cd:38:50:8e:2a:8d:
e2:be:f5:4b:c8:48:af:87:ab:8e:af:ed:ec:a4:87:
14:3f:8d:e3:19:c0:87:37:b2:40:de:0e:03:18:7c:
12:e0:c9:9e:a2:b6:67:85:d5:db:d6:6e:d6:bb:ec:
a7:1f:d7:44:12:77:c9:d4:bd:48:c1:73:56:52:23:
56:ee:63:64:11:32:29:4b:ae:63:8a:cc:d0:04:ef:
ea:04:40:f7:5f:76:83:4e:60:38:71:6a:e1:50:3f:
02:38:e5:17:ab:80:29:5b:7d:a5:ce:98:0b:6b:07:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:BA:93:92:90:1D:64:F7:97:08:BC:72:25:8E:6B:DC:47:9D:F3
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vcS6k5KQHWT3lwi8ciWOa9xHnfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.243.48.0/22
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
93:bf:87:f1:8f:ff:25:6f:6c:d1:29:65:25:41:f4:3f:7b:63:
ef:d2:99:54:49:42:77:35:29:20:6f:74:a5:0f:e2:00:68:ce:
87:0c:83:a4:3d:14:a5:8e:47:a7:0b:87:5b:58:7a:52:1e:52:
e5:14:63:bd:38:52:4d:89:f8:b0:21:d7:76:13:40:d7:7e:2b:
45:ec:bc:78:0c:67:b8:b1:12:b3:e0:3f:81:24:69:25:29:1c:
17:6c:06:d0:e8:36:92:48:43:cf:81:12:d6:88:a5:f9:20:67:
7f:9f:1e:72:fe:15:74:3f:e7:ed:2d:95:71:4b:d5:26:bc:5d:
4e:d1:52:f6:f2:e2:77:c9:9c:e3:7b:27:2f:61:93:4f:ae:23:
35:44:7a:28:55:4c:2c:2d:c8:52:5a:c1:ed:0a:c6:70:93:03:
da:92:1d:2e:9e:5e:c8:7d:2a:73:d3:0d:7d:d6:ae:1f:ca:8a:
cc:5b:fa:e9:79:40:b4:d7:bc:0c:61:53:cf:9a:fe:50:55:08:
04:39:bc:26:f8:c4:ac:8a:12:f7:08:6c:84:0e:f3:91:8a:06:
cb:5f:55:f9:b0:25:41:cb:93:74:82:51:bc:f4:98:cf:84:50:
4e:60:d0:84:bb:43:25:da:63:c3:bc:b9:44:9d:5e:c5:60:c9:
49:e4:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:06 2025 by rpki-client