Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eAf2z6qW5lBdO6u26o1rCgUF2YA.roa
File: eAf2z6qW5lBdO6u26o1rCgUF2YA.roa (raw, json)
Hash identifier: gYI8yL9dqswUuLzg2al0dQgh6y0lnwwInX1TVGaNRzg=
Subject key identifier: 78:07:F6:CF:AA:96:E6:50:5D:3B:AB:B6:EA:8D:6B:0A:05:05:D9:80
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 018ADF678C52E19B50337A075EEFA3453261
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eAf2z6qW5lBdO6u26o1rCgUF2YA.roa
Signing time: Fri 29 Sep 2023 05:26:59 +0000
ROA not before: Fri 29 Sep 2023 05:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57822
IP address blocks: 185.54.246.0/24 maxlen: 24
185.54.245.0/24 maxlen: 24
185.54.247.0/24 maxlen: 24
94.247.105.0/24 maxlen: 24
94.247.104.0/24 maxlen: 24
94.247.109.0/24 maxlen: 24
94.247.108.0/24 maxlen: 24
94.247.107.0/24 maxlen: 24
94.247.106.0/24 maxlen: 24
2a02:47a0:4::/48 maxlen: 48
2a02:47a0:203::/48 maxlen: 48
2a02:47a0:3::/48 maxlen: 48
2a02:47a0:201::/48 maxlen: 48
2a02:47a0:202::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:67:8c:52:e1:9b:50:33:7a:07:5e:ef:a3:45:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Sep 29 05:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7807f6cfaa96e6505d3babb6ea8d6b0a0505d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:0d:3d:fe:29:4b:70:9d:8a:f0:c2:96:05:
81:79:a1:fb:71:be:e3:ce:8e:99:f1:56:f8:b5:cb:
69:64:30:fa:15:38:71:be:d7:02:ca:ce:61:9a:1b:
04:06:31:11:c0:b0:2d:0b:a0:09:21:34:63:75:df:
65:a2:a1:23:fe:65:55:d6:ea:9e:e5:6f:bc:04:33:
35:a8:e6:d1:3d:64:37:f1:8d:2f:18:63:82:b0:e1:
91:51:b1:05:03:eb:33:1d:6e:84:64:12:73:ab:af:
46:75:c4:eb:ba:b2:d2:73:67:47:0c:70:b1:07:87:
ac:80:e2:1d:8d:ce:38:ad:25:fb:0d:ed:72:45:fb:
b5:3e:dd:0e:11:11:c1:02:c3:0b:fb:f5:7f:ff:94:
92:35:53:1a:33:7a:11:ca:8d:b8:9d:76:06:b6:02:
0e:22:f4:8f:a1:0f:7f:c4:63:90:9c:c8:22:79:03:
53:10:f0:c1:6e:4c:b6:14:01:ab:7a:39:28:74:41:
6b:a6:10:e9:d5:d6:55:f8:75:ca:43:d2:c3:88:05:
38:34:0b:a0:c7:4c:42:d8:d4:b5:56:f2:aa:6d:ef:
50:84:e4:5c:66:bf:02:69:4e:e7:c9:15:dc:ae:b0:
88:b4:91:ee:38:10:3d:d9:38:cb:62:12:3b:45:f5:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:F6:CF:AA:96:E6:50:5D:3B:AB:B6:EA:8D:6B:0A:05:05:D9:80
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eAf2z6qW5lBdO6u26o1rCgUF2YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.104.0-94.247.109.255
185.54.245.0-185.54.247.255
IPv6:
2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff
2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:13:e5:f7:90:5c:0c:0d:0d:c3:37:1b:96:66:08:45:65:fe:
85:15:22:e4:8a:f8:70:46:0c:b4:1c:f2:ae:c2:c2:89:09:9d:
35:b5:a9:8f:5f:b4:fd:d3:0d:e3:71:78:b3:87:61:1d:db:bf:
5e:79:ce:cb:c0:ae:10:f8:1f:bb:6e:fe:7e:64:3d:6b:ee:ff:
08:65:75:f2:da:76:7c:fd:4e:0b:18:87:dd:66:45:b7:2b:fd:
ee:10:0b:be:ec:9c:e2:fc:09:44:ed:d1:31:3e:2e:99:cb:3e:
68:15:17:29:9c:24:73:9b:ef:ff:7c:24:0b:bb:8e:66:b3:99:
05:59:d2:6a:9d:3a:1b:b8:2f:d3:c5:d8:c7:15:df:99:1f:b6:
c8:2a:2e:9b:6f:e4:a3:55:b1:8e:1b:37:15:f1:d7:bd:de:d9:
d3:08:b4:c7:a8:14:3c:94:0a:dc:60:16:a9:46:41:0e:ce:fb:
5a:f5:08:13:18:ec:ad:d1:e4:53:8d:b5:8c:3a:c4:dd:af:62:
7c:d3:a0:8a:27:da:67:e1:a2:10:6d:cf:d9:42:c2:55:6c:a2:
8f:5c:65:66:30:4f:c8:71:30:02:3c:1c:39:65:fd:01:89:92:
66:8d:a2:97:17:4b:ae:07:b4:23:99:28:50:6c:a6:5c:35:44:
91:08:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:42 2025 by rpki-client