Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/IdZuySlAvuViMzixNWXXacxbVCA.roa
File: IdZuySlAvuViMzixNWXXacxbVCA.roa (raw, json)
Hash identifier: iplqz0B+xQ0ZU87A0ff8oHgNNAJYT96N0tDoHTao/ng=
Subject key identifier: 21:D6:6E:C9:29:40:BE:E5:62:33:38:B1:35:65:D7:69:CC:5B:54:20
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 01856DE643BDF1AA1B4AA315F798AAD2E5D1
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/IdZuySlAvuViMzixNWXXacxbVCA.roa
Signing time: Sun 01 Jan 2023 15:14:45 +0000
ROA not before: Sun 01 Jan 2023 15:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41095
IP address blocks: 176.56.160.0/19 maxlen: 24
91.194.116.0/23 maxlen: 24
185.65.172.0/22 maxlen: 24
193.33.70.0/23 maxlen: 24
195.189.120.0/22 maxlen: 24
87.239.184.0/21 maxlen: 24
2a03:9d40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:43:bd:f1:aa:1b:4a:a3:15:f7:98:aa:d2:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 1 15:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21d66ec92940bee5623338b13565d769cc5b5420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:45:ae:bd:98:65:dc:da:96:dc:84:4c:c8:
ea:8b:18:62:da:be:e5:06:6c:76:01:19:3e:11:2b:
1e:e8:d9:4d:b0:92:0e:39:98:9e:10:a9:44:da:01:
52:ed:ff:1b:36:49:65:5f:36:a5:08:fb:2a:d1:7e:
f7:f7:02:de:df:f4:fc:e6:c6:89:69:2f:e1:e4:f9:
0f:38:7e:74:7c:6b:6e:a6:3c:dc:7b:e3:29:05:d6:
dd:06:48:62:a8:75:60:b2:fb:b4:f7:13:9e:14:b2:
49:d1:9a:8f:bf:b0:3b:3b:3c:43:22:05:bf:7c:4f:
1b:1e:44:c9:58:91:e5:ad:53:4b:d1:4b:a9:df:c2:
b1:af:ca:32:10:b2:a2:45:a2:b1:19:46:c5:0a:ae:
ea:0d:b7:5a:8b:93:58:3d:5a:94:a8:40:e3:01:40:
ee:af:c0:70:e7:1b:7c:01:2f:ab:6f:f0:41:43:2f:
48:db:ca:40:32:ea:13:63:a6:0b:14:ea:63:1a:43:
f1:85:eb:e8:b7:fa:cb:86:58:6c:19:a7:0e:dc:ea:
ed:8e:49:69:2e:59:33:70:34:f8:34:50:ba:38:04:
3f:e4:9e:a2:19:14:d1:f6:b8:f5:83:7b:6c:c8:90:
71:fa:9e:f3:6b:4f:55:4a:b8:59:3c:19:23:16:a0:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:6E:C9:29:40:BE:E5:62:33:38:B1:35:65:D7:69:CC:5B:54:20
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/IdZuySlAvuViMzixNWXXacxbVCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.184.0/21
91.194.116.0/23
176.56.160.0/19
185.65.172.0/22
193.33.70.0/23
195.189.120.0/22
IPv6:
2a03:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
39:4e:cf:94:8f:11:de:9f:6f:65:1e:03:ba:04:51:b2:db:ec:
30:f1:13:72:80:0c:3a:b3:d2:9e:0e:0c:21:6e:15:2b:de:cb:
73:f7:ae:b4:b3:91:f3:ed:98:d7:05:f1:84:c7:33:26:2f:f4:
c4:d9:98:dc:07:9d:a4:e7:3a:cf:a2:01:b4:ef:c5:67:00:58:
18:15:e4:38:ee:d9:ae:1a:c9:d3:a8:08:64:b6:72:e0:5d:91:
5a:a6:df:1c:d6:8e:7b:5c:72:1c:e2:9e:2f:05:28:aa:ba:45:
15:ca:8a:2e:9a:40:92:1a:0e:24:7d:99:2d:40:b0:20:69:2a:
0d:11:24:dc:1c:c3:c9:15:b6:6c:13:e5:e9:23:e4:e0:93:c1:
7e:60:4f:a1:00:b4:97:c0:08:3a:ea:0f:2a:07:c8:4b:50:fc:
25:ee:a7:a7:60:04:4e:23:65:cc:98:4b:da:5f:38:2e:04:20:
93:b4:83:04:81:f0:86:b5:b1:b1:d7:77:9c:e4:c0:c0:fc:20:
20:75:c5:05:df:b9:e7:82:f0:d0:c4:06:37:a7:9c:c4:4a:74:
4d:ba:73:8c:44:61:10:f0:08:0b:08:d4:98:6e:36:e4:36:78:
00:bd:b3:a5:a4:bb:0f:90:c3:f7:8c:9b:3b:96:c4:d0:5d:90:
20:63:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:30 2025 by rpki-client