Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/lW9IT59-f9xafQmsl_3KkeeEblI.roa
File: lW9IT59-f9xafQmsl_3KkeeEblI.roa (raw, json)
Hash identifier: Yh8ZnTwFiWsrHzlk7VJIbIHDglNXia6eiUDExAl9oGw=
Subject key identifier: 95:6F:48:4F:9F:7E:7F:DC:5A:7D:09:AC:97:FD:CA:91:E7:84:6E:52
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 07BF6CDD
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/lW9IT59-f9xafQmsl_3KkeeEblI.roa
Signing time: Sat 01 Jan 2022 08:02:26 +0000
ROA not before: Sat 01 Jan 2022 08:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206375
IP address blocks: 45.135.204.0/24 maxlen: 24
45.135.206.0/24 maxlen: 24
45.135.205.0/24 maxlen: 24
45.135.207.0/24 maxlen: 24
139.28.106.0/24 maxlen: 24
139.28.107.0/24 maxlen: 24
185.188.131.0/24 maxlen: 24
185.188.129.0/24 maxlen: 24
185.188.128.0/24 maxlen: 24
185.188.130.0/24 maxlen: 24
185.219.179.0/24 maxlen: 24
185.219.176.0/24 maxlen: 24
185.219.178.0/24 maxlen: 24
185.219.177.0/24 maxlen: 24
139.28.104.0/24 maxlen: 24
139.28.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129985757 (0x7bf6cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Jan 1 08:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=956f484f9f7e7fdc5a7d09ac97fdca91e7846e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:b8:fb:35:e4:e1:a4:c2:4e:fd:82:b9:0e:
c3:68:e2:f0:bb:63:d8:ca:1e:49:0a:08:09:ce:e0:
f9:24:ff:48:fd:19:23:11:2c:7d:58:af:e9:1a:cd:
9c:d3:ca:44:de:58:a8:53:e2:70:d6:ee:b1:81:bf:
a1:9c:32:8b:bc:9e:f0:76:63:15:fb:1d:94:e9:8e:
a0:3f:4f:c3:60:a0:65:3c:f9:5b:12:d0:81:fe:cb:
41:79:db:7d:40:e2:26:c9:04:19:69:dd:78:67:64:
80:2d:f0:11:37:4b:f9:1a:b1:1b:f5:fa:82:33:49:
1c:95:51:c9:f3:e0:56:12:85:b2:09:47:66:fc:e9:
a3:8a:e2:93:c1:ce:8f:32:f8:4a:5f:db:82:5c:ce:
7d:12:e4:55:f6:f8:2f:bc:e4:4d:f4:d6:dc:28:a6:
1c:60:76:86:f7:46:04:87:f8:05:52:e4:c0:63:e8:
f3:0e:19:9e:f1:31:bd:c1:6d:f2:0e:8a:4b:7c:d8:
91:38:ab:c8:08:96:58:0d:f5:f1:66:65:bb:28:61:
f9:15:65:50:26:c6:0e:92:37:ed:d3:1a:99:a0:56:
2d:e4:06:10:27:61:0c:5b:df:36:07:88:dc:94:a2:
f6:28:39:d4:f6:c0:ae:6c:ff:43:49:82:59:08:41:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:48:4F:9F:7E:7F:DC:5A:7D:09:AC:97:FD:CA:91:E7:84:6E:52
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/lW9IT59-f9xafQmsl_3KkeeEblI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.204.0/22
139.28.104.0/22
185.188.128.0/22
185.219.176.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6c:73:29:ae:be:ae:0a:59:3d:33:8b:66:c1:18:6f:04:df:
3d:ae:88:52:be:ba:d5:cb:9c:a9:3c:46:36:8d:4a:4d:f2:ef:
97:f7:1d:63:bb:98:61:77:ab:aa:49:66:6b:5c:17:33:76:46:
2a:f8:a9:be:10:62:84:ba:3d:0c:12:8d:cd:0a:a5:fd:55:d2:
15:4f:11:d9:6b:96:d6:f4:16:66:25:de:f0:12:7d:24:82:2c:
bb:ab:71:c4:d4:ee:85:b6:bb:f5:b0:c5:a7:3e:fb:85:40:7e:
6b:6c:2e:a9:3d:19:07:d5:78:e6:d9:cc:87:ce:d6:a7:6c:26:
9a:72:26:7e:ce:2d:18:0e:a6:c8:39:0a:28:de:e2:b9:af:cc:
98:f4:68:9f:79:69:96:cc:39:87:d2:2b:16:fc:5a:6f:45:d5:
8f:a0:c1:9c:0a:57:c8:0f:ca:03:5e:9d:3f:42:a6:e2:b5:90:
2e:c6:c7:17:ba:f8:d3:11:a7:38:8e:2b:6a:fc:f4:b1:c1:f7:
1a:b4:13:0d:fb:e1:58:97:28:88:37:9e:05:bb:8f:30:14:9a:
01:f5:63:8a:76:1a:00:0a:d8:ea:9b:e0:39:7b:2e:2f:3b:a4:
60:32:ca:26:78:30:44:e3:4d:c2:42:ea:6a:10:f4:8d:6a:b2:
13:49:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:43 2025 by rpki-client