Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/3JgI_Acwxyb80_RLU7Bf9zYuzIk.roa
File: 3JgI_Acwxyb80_RLU7Bf9zYuzIk.roa (raw, json)
Hash identifier: V/ssdMVb72iZ1deZhKcVdToFBZglNxS6P9avZ7S11dk=
Subject key identifier: DC:98:08:FC:07:30:C7:26:FC:D3:F4:4B:53:B0:5F:F7:36:2E:CC:89
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 018C68500E7DC11B66BF8B6BB58DE22108B2
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/3JgI_Acwxyb80_RLU7Bf9zYuzIk.roa
Signing time: Thu 14 Dec 2023 12:32:06 +0000
ROA not before: Thu 14 Dec 2023 12:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 188.244.117.0/24 maxlen: 24
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
91.190.155.0/24 maxlen: 24
188.93.140.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
185.223.207.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:50:0e:7d:c1:1b:66:bf:8b:6b:b5:8d:e2:21:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Dec 14 12:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc9808fc0730c726fcd3f44b53b05ff7362ecc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:fc:64:cc:db:e6:13:65:26:6f:ff:18:2c:
ec:ea:fc:ca:f4:fb:8d:96:32:a7:62:80:4c:16:17:
b7:91:95:bc:ae:ed:92:2f:8b:6e:71:a8:bc:d1:f6:
93:48:54:08:e3:d1:09:e3:c6:3c:07:2f:a9:8f:33:
00:e1:d2:b0:5a:96:76:d2:17:33:76:2b:63:f8:88:
59:24:4c:49:bd:c7:83:16:4b:1c:1f:4e:2a:88:ea:
52:a6:df:ec:1e:3c:00:02:07:46:fc:3e:68:e5:b0:
c5:91:83:5c:bb:6e:fc:3e:52:79:90:14:17:9c:e1:
6c:35:1e:9e:ce:db:8c:76:79:14:25:b3:de:2b:00:
9f:98:33:20:1c:4b:4d:d5:98:9d:d9:e2:96:75:ab:
11:f5:88:a9:49:b8:53:11:98:bb:22:54:66:ed:72:
f6:1c:f3:18:aa:4a:95:95:49:4d:8d:c5:ad:ea:be:
af:af:cb:31:c0:f0:39:71:84:34:ff:07:1a:9c:a5:
17:0b:b4:8b:ac:a7:81:cf:75:e5:26:b5:f0:c6:5d:
43:3d:c2:41:d2:36:52:ed:7a:da:eb:14:bc:29:c3:
6e:e1:4d:5d:46:2f:20:bf:a2:db:ac:cd:b2:10:ed:
ea:7b:d6:7b:ec:4c:ef:c0:7a:34:db:97:a4:2b:44:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:08:FC:07:30:C7:26:FC:D3:F4:4B:53:B0:5F:F7:36:2E:CC:89
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/3JgI_Acwxyb80_RLU7Bf9zYuzIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
91.190.155.0/24
109.205.61.0/24
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
IPv6:
2a0e:dc0:2::-2a0e:dc0:6:ffff:ffff:ffff:ffff:ffff
2a0e:dc0:8::/47
Signature Algorithm: sha256WithRSAEncryption
2f:4b:10:eb:2e:7c:ad:7d:13:e7:66:d2:92:f7:5b:bb:93:b5:
00:94:a2:85:69:b2:cb:9d:84:a7:27:61:7c:e6:75:4d:3b:db:
10:44:4b:06:12:cb:5b:9a:36:33:b6:c8:bc:3a:c4:c4:ee:8b:
65:9a:1d:2b:83:15:cd:a0:2e:90:f1:6e:18:e9:90:f0:be:b3:
5a:bd:35:9d:45:43:a9:5d:86:c8:ea:e8:82:c7:f4:7e:9b:46:
28:90:9c:62:17:2c:90:6c:38:1e:1e:b2:e0:fc:2c:3b:89:ad:
bf:ea:b0:71:cb:9f:94:f1:b7:b3:73:08:b4:81:13:48:23:05:
3f:d4:b5:cb:87:38:08:b5:7c:57:d0:c0:f8:0b:0e:64:33:1d:
17:79:8a:21:a7:7d:aa:f2:45:b2:fa:60:17:77:e3:4a:78:0e:
f8:c8:77:6b:06:22:d9:7a:43:76:13:f1:08:79:2a:1e:93:96:
2c:f3:25:63:5d:d6:5b:37:db:af:f9:8c:9b:13:7e:4f:1f:33:
b7:71:44:c6:38:0c:87:7a:ba:38:c1:cb:2b:59:0f:d0:fa:09:
70:de:00:51:52:53:88:b4:20:bf:84:2d:4c:3f:d0:7c:97:f5:
eb:b1:f5:cf:bc:35:d2:9b:ff:46:ed:d2:e2:fe:3f:95:88:13:
ea:bc:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:49 2025 by rpki-client