Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/54U-GiK8ODTNP4qrrPXsAXB5zfg.roa
File: 54U-GiK8ODTNP4qrrPXsAXB5zfg.roa (raw, json)
Hash identifier: pJZJ4cJRB/Ij8fEOk9SnWauK0ZAMTKFAxlHwl6sQhSI=
Subject key identifier: E7:85:3E:1A:22:BC:38:34:CD:3F:8A:AB:AC:F5:EC:01:70:79:CD:F8
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01856C784FD93C5A965DDEDE7566F77FFBD3
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/54U-GiK8ODTNP4qrrPXsAXB5zfg.roa
Signing time: Sun 01 Jan 2023 08:35:01 +0000
ROA not before: Sun 01 Jan 2023 08:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 185.169.228.0/22 maxlen: 22
45.147.152.0/22 maxlen: 22
85.8.168.0/22 maxlen: 22
2.56.184.0/22 maxlen: 22
193.37.220.0/22 maxlen: 22
31.40.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:4f:d9:3c:5a:96:5d:de:de:75:66:f7:7f:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 1 08:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7853e1a22bc3834cd3f8aabacf5ec017079cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:30:56:84:ee:81:2e:e8:7d:8c:0c:45:4f:
02:cb:f2:09:9f:ff:b2:e5:95:97:e8:bb:2d:91:88:
97:de:b7:dc:43:45:a1:f0:c8:65:d3:9c:6c:b6:10:
d8:8b:8a:32:dd:81:cf:83:b5:c6:a5:61:0b:49:45:
3f:d6:d3:e8:55:a0:7e:53:57:a1:92:3e:0e:ae:8f:
d9:d7:ee:66:1e:f8:cd:0f:dc:99:28:4a:b6:f1:9d:
97:b0:36:55:15:f3:0e:ab:63:1b:8a:dc:d8:df:33:
27:06:e3:2f:6b:53:89:ab:73:5b:b9:12:e9:f5:c6:
12:41:c7:3c:a9:a3:01:d8:0e:16:e9:b7:dc:cb:05:
ac:e5:32:85:b2:d3:5d:2a:3c:0d:2b:ec:4a:d5:19:
85:01:6e:9f:2c:f9:4a:b1:11:d4:9d:25:24:19:43:
2b:01:80:1b:7b:12:29:66:6a:08:d9:8b:2c:d1:10:
36:a0:49:92:27:33:ad:dc:84:d1:aa:37:5a:1f:ec:
87:a9:8f:52:29:79:c8:24:d6:6e:d9:9f:d3:a4:e1:
01:ce:a4:1a:db:03:b6:ef:42:3c:cf:b1:18:f1:50:
b8:93:94:9f:c2:e9:7a:59:75:15:4f:60:b4:06:64:
bb:16:9b:fa:4b:27:3f:c7:93:73:e3:13:31:ca:b5:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:3E:1A:22:BC:38:34:CD:3F:8A:AB:AC:F5:EC:01:70:79:CD:F8
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/54U-GiK8ODTNP4qrrPXsAXB5zfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
31.40.232.0/22
45.147.152.0/22
85.8.168.0/22
185.169.228.0/22
193.37.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:86:d4:00:fd:1f:71:4f:e9:63:17:43:46:51:af:a3:ef:2b:
78:2e:33:bd:c2:74:f7:3f:73:63:b2:d4:14:fb:fd:c0:4c:e5:
f8:79:5d:1e:14:a8:87:ed:19:78:ef:02:77:32:74:13:ea:85:
c7:57:b4:e7:f4:a4:60:5c:b6:1b:e6:e8:17:d5:e6:28:f5:3d:
8c:d0:57:e2:d2:9f:09:97:42:34:42:1e:f7:5c:50:98:04:25:
bd:bb:8b:c3:30:c3:08:83:7f:90:2c:1f:26:76:b9:bc:cd:96:
9f:33:46:45:50:15:e5:bb:88:86:27:96:e7:46:42:06:5a:19:
2d:86:20:65:b0:6d:10:ea:3d:63:0c:f4:6d:34:7d:79:13:e4:
6c:53:51:f9:d2:9b:e3:a4:66:c0:22:fb:3d:a5:6d:0d:62:8e:
dd:f7:fc:6a:00:4f:25:da:09:a1:e8:91:68:5b:62:bc:7b:aa:
af:14:9c:63:bd:09:d2:ab:1d:41:2b:56:bb:4c:ba:f9:b6:97:
51:69:b4:82:44:28:ec:57:1e:90:7d:e8:fb:74:3c:24:c8:ba:
81:de:f5:5e:ad:60:7b:82:00:c9:a7:8d:df:47:1c:02:28:bb:
07:c2:ac:2d:62:4a:51:dc:36:c4:94:db:34:19:f4:07:3b:4c:
f9:e9:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:02 2025 by rpki-client