Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/bm5AsgTCLJ2G8eKZA2ZMque2wjI.roa
File: bm5AsgTCLJ2G8eKZA2ZMque2wjI.roa (raw, json)
Hash identifier: 98H+kadYlE7nhweE9BCmFal9KDlYKPfIu5CqguyU6os=
Subject key identifier: 6E:6E:40:B2:04:C2:2C:9D:86:F1:E2:99:03:66:4C:AA:E7:B6:C2:32
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018AFAAF2920E4AE651762E829ED527405F7
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/bm5AsgTCLJ2G8eKZA2ZMque2wjI.roa
Signing time: Wed 04 Oct 2023 12:34:57 +0000
ROA not before: Wed 04 Oct 2023 12:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.147.152.0/22 maxlen: 22
85.8.168.0/22 maxlen: 22
2.56.184.0/22 maxlen: 22
194.124.144.0/24 maxlen: 24
194.121.59.0/24 maxlen: 24
45.90.248.0/22 maxlen: 22
194.31.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:af:29:20:e4:ae:65:17:62:e8:29:ed:52:74:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 4 12:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e6e40b204c22c9d86f1e29903664caae7b6c232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:ae:ed:14:df:84:5a:f2:df:26:eb:e4:b5:
ad:e6:81:27:7d:40:e6:6f:87:60:c3:7c:cb:9a:fd:
46:98:3f:49:b7:3a:15:9e:ff:f3:40:9a:4b:f3:89:
51:36:2a:b4:8c:ed:9d:b8:3e:9d:e2:87:54:ae:13:
8a:b7:a9:c7:72:2a:de:93:6b:8a:2f:6c:72:80:28:
1a:30:c7:e1:89:96:f8:35:ad:99:c0:b5:ea:8d:37:
d2:97:04:41:c8:23:b4:b9:11:b5:a4:81:3d:d7:cd:
f4:39:a4:4c:82:5b:f5:4a:8d:d5:49:96:1a:d3:18:
28:75:c6:1b:c2:a0:e1:82:bc:c8:cf:14:e7:f6:44:
1a:24:2a:32:20:72:c6:17:a4:ab:77:19:f9:e9:f2:
f9:96:0f:4b:db:38:e1:95:32:7a:25:6e:70:3c:52:
0e:a3:48:0d:1a:a1:f4:d0:19:e0:7f:15:9b:e0:a0:
1d:fb:9d:99:06:3b:e4:15:20:00:86:60:2b:46:37:
49:f8:b9:ba:84:05:d8:86:cb:dc:21:d9:1a:d3:f5:
79:0b:9e:0c:b2:14:aa:ca:81:9d:2d:74:f8:44:c0:
9a:86:47:07:5f:11:56:bf:13:e7:ad:69:1f:4d:3d:
f7:0b:c1:a3:a6:1d:2d:a9:9c:cf:30:43:30:61:87:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:40:B2:04:C2:2C:9D:86:F1:E2:99:03:66:4C:AA:E7:B6:C2:32
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/bm5AsgTCLJ2G8eKZA2ZMque2wjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
45.90.248.0/22
45.147.152.0/22
85.8.168.0/22
194.31.180.0/22
194.121.59.0/24
194.124.144.0/24
Signature Algorithm: sha256WithRSAEncryption
00:37:85:24:c1:eb:8f:b0:2c:d8:eb:18:87:43:83:12:b9:6e:
17:9d:1e:37:99:f8:6a:41:5a:fd:f6:fb:ca:6a:d1:44:86:01:
c2:b4:39:57:cd:ed:35:f6:81:34:3e:2e:38:e1:b5:b4:0e:d6:
b7:10:4d:8d:b9:0a:b1:70:b3:d3:5d:0b:c2:f0:6f:96:e6:c7:
f5:3c:4d:36:37:09:dc:f1:85:80:27:0f:17:d9:3b:d5:51:e5:
92:ec:a8:4d:d8:4f:df:41:c0:0f:e9:0d:b8:2f:7d:94:82:8d:
a9:29:cd:60:7a:92:78:04:ef:22:b8:81:3d:a8:e2:55:58:26:
5b:f8:06:62:07:73:a0:c8:8b:05:9c:d9:83:25:21:53:74:a4:
1f:77:c0:1b:e3:4e:2c:fe:ac:8f:98:76:c4:c0:69:5b:e3:ac:
85:84:ae:03:49:d9:59:53:97:29:6d:85:0b:f4:44:9e:94:d4:
d5:eb:29:3e:15:d7:0e:fb:6a:e9:be:07:97:79:46:60:82:30:
ed:77:f3:df:01:d1:3d:ea:d2:92:d7:7e:23:38:9e:78:6d:f2:
25:f4:59:69:83:e2:3f:9a:98:ad:0a:5f:81:8d:78:3a:40:06:
af:bc:c1:8e:cf:90:c5:17:bb:35:e8:4a:41:69:62:65:14:c0:
12:6e:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:59 2025 by rpki-client