Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I-_bLT8a5HCvvAzVnfQ7NQkEu20.roa
File: I-_bLT8a5HCvvAzVnfQ7NQkEu20.roa (raw, json)
Hash identifier: tWmuY+aI/QUQMwHDzD82DtxhdGQD1R1PF1QtdrHXH2c=
Subject key identifier: 23:EF:DB:2D:3F:1A:E4:70:AF:BC:0C:D5:9D:F4:3B:35:09:04:BB:6D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018534E09332842D816EA779CB5ABBA74ECB
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I-_bLT8a5HCvvAzVnfQ7NQkEu20.roa
Signing time: Wed 21 Dec 2022 13:30:11 +0000
ROA not before: Wed 21 Dec 2022 13:30:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205132
IP address blocks: 84.238.167.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
94.236.169.0/24 maxlen: 24
83.228.61.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
83.228.87.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
213.91.157.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
84.238.192.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
84.238.194.0/24 maxlen: 24
84.238.193.0/24 maxlen: 24
46.10.156.0/24 maxlen: 24
46.10.179.0/24 maxlen: 24
77.85.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:e0:93:32:84:2d:81:6e:a7:79:cb:5a:bb:a7:4e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Dec 21 13:30:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23efdb2d3f1ae470afbc0cd59df43b350904bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:8e:43:f2:2b:23:92:1d:f1:48:df:54:1b:
30:47:34:be:61:8f:e2:65:5d:ea:2a:0a:8f:49:63:
c4:b7:8a:2a:aa:ef:34:9a:db:3c:d3:69:97:fd:28:
92:b0:36:d3:27:e1:01:7c:c2:53:d4:2d:63:24:87:
c1:b2:38:8a:15:3f:1b:0e:bf:28:55:b5:95:43:86:
2e:d3:3b:ef:2d:56:28:2b:3e:a4:d4:f0:05:07:42:
4d:85:16:8b:8c:c3:b9:13:db:2a:83:d4:86:1a:a2:
65:a4:94:2b:8f:91:1f:82:12:af:4b:1e:3e:a9:6c:
93:ad:7f:4d:df:d6:a4:92:f7:39:cb:1b:16:43:91:
19:bf:5a:97:83:4f:cd:ad:35:37:0c:81:d1:5a:40:
56:11:94:7e:b6:e4:d7:f7:46:2a:f8:46:6b:c7:9c:
f3:cd:55:14:0c:9f:8b:26:ec:92:f9:9d:a5:33:6a:
37:5b:2b:e9:0d:23:80:6a:df:43:9f:e8:23:91:b1:
a5:b9:bf:bf:b1:03:b5:b8:3e:03:2d:64:9c:27:1a:
f4:d6:11:aa:a3:4d:b5:98:fb:52:ce:12:22:9e:ae:
12:58:6e:e5:b5:b5:1e:c6:f0:38:bc:d5:46:2b:74:
cd:0e:e6:bd:2f:b5:e3:7c:d6:bf:06:a1:55:15:bf:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:DB:2D:3F:1A:E4:70:AF:BC:0C:D5:9D:F4:3B:35:09:04:BB:6D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/I-_bLT8a5HCvvAzVnfQ7NQkEu20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.156.0/24
46.10.179.0/24
77.85.170.0/24
77.85.198.0/24
83.228.61.0/24
83.228.86.0/23
83.228.89.0/24
84.238.167.0/24
84.238.192.0-84.238.194.255
94.236.169.0/24
212.72.199.0/24
212.72.221.0/24
213.91.157.0/24
213.91.173.0/24
213.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
58:68:86:cc:84:2a:b6:93:f8:7a:03:37:36:60:7c:59:2c:19:
43:66:90:c6:7c:ff:98:02:cf:e4:a5:bf:ec:6e:1e:0c:c9:a5:
95:0a:f9:ca:68:9a:f4:ee:40:e9:c2:ac:33:6a:99:01:51:3b:
00:50:86:45:1d:9f:86:f1:e3:9b:5e:e8:96:81:94:b9:d7:69:
e9:21:cd:c9:cd:1d:55:72:22:04:49:ba:1c:dd:66:21:b0:c8:
ce:8d:8f:0b:1e:7c:ef:5f:60:8c:44:49:98:c7:e8:db:6e:57:
c9:2f:06:74:b2:d4:fd:0d:07:07:d3:71:06:24:59:f6:2b:b2:
b3:b5:91:d2:e6:62:d9:f3:0d:6f:62:71:5b:9b:75:24:32:c5:
b8:62:1d:da:dc:9e:ba:3d:ee:af:c3:63:29:b1:83:f7:03:45:
db:b4:19:0c:d1:79:90:1b:bc:e7:82:5a:f2:b8:b4:7f:a1:44:
e2:72:ba:0a:f9:5e:3f:27:fa:3c:7c:6a:1a:fb:58:0c:1a:13:
5f:ea:e3:96:8c:75:6a:24:c7:9b:86:dd:66:00:94:12:67:98:
e4:f3:04:55:9f:a2:fd:40:fa:22:33:64:33:c5:b0:03:50:ed:
a8:f5:15:b9:78:6c:07:c0:9b:f9:19:33:36:c9:db:6e:e9:72:
17:0e:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:48 2025 by rpki-client