Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/C0EAIlI836pV8NJvVUfyTr7fScE.roa
File: C0EAIlI836pV8NJvVUfyTr7fScE.roa (raw, json)
Hash identifier: DMlvk5CObP31RY2C2CWnjMKAP39UTbWX5wg0K6aMFwM=
Subject key identifier: 0B:41:00:22:52:3C:DF:AA:55:F0:D2:6F:55:47:F2:4E:BE:DF:49:C1
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01877A75F0AAA6ACCE6715DB285C0C43DE90
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/C0EAIlI836pV8NJvVUfyTr7fScE.roa
Signing time: Thu 13 Apr 2023 11:52:42 +0000
ROA not before: Thu 13 Apr 2023 11:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.90.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:75:f0:aa:a6:ac:ce:67:15:db:28:5c:0c:43:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Apr 13 11:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b410022523cdfaa55f0d26f5547f24ebedf49c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:15:88:6a:4a:73:e2:8b:47:80:94:37:cf:
ab:1d:ec:70:71:29:77:a6:ad:f6:27:d9:3e:21:41:
84:8b:f3:58:fd:86:bf:bc:65:15:68:9b:7e:14:65:
80:95:7a:ae:a1:26:02:81:1f:72:7d:d6:26:04:67:
98:ff:0c:8c:3b:5c:e7:bf:54:57:b7:78:02:e9:a9:
a7:65:8e:1a:ba:42:c7:19:77:42:e2:bd:aa:6d:a9:
a1:dc:14:cc:72:44:a3:b2:b1:01:7d:6e:b1:4e:f7:
f7:48:7f:c1:ff:f2:d3:41:60:d1:41:4e:b3:6a:52:
37:a4:5c:3e:b4:13:87:4f:ad:83:bb:8d:b8:f2:d4:
5e:58:7c:3b:64:25:e9:85:0e:43:45:2d:bb:e5:5c:
77:05:e7:c1:15:f2:7c:d7:37:23:ce:d2:d8:1f:2f:
62:48:0f:2c:26:50:f5:1c:f5:55:71:14:85:0f:83:
3f:b7:5e:97:35:f8:3b:79:ac:98:f2:5a:4d:00:05:
c2:1c:37:f4:a5:b8:99:92:80:fe:ca:f1:81:f7:f8:
bc:13:34:7b:30:b3:f7:f1:fc:e2:24:fa:51:74:53:
91:d1:8d:86:6e:9a:89:85:81:85:9b:c7:ff:6f:15:
c9:8d:a6:0f:6b:d8:30:aa:21:82:00:d1:56:20:a0:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:00:22:52:3C:DF:AA:55:F0:D2:6F:55:47:F2:4E:BE:DF:49:C1
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/C0EAIlI836pV8NJvVUfyTr7fScE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0/24
77.83.198.0/24
79.141.164.0/23
79.141.172.0/24
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.193.0-185.104.194.255
185.117.90.0/23
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:a::/48
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:78:11:fc:d7:3c:b9:72:0b:f7:16:e9:57:5c:b1:dd:c4:08:
47:75:8f:a3:ec:3d:0d:7f:eb:98:c4:9c:a1:67:f9:54:45:07:
72:db:1e:bf:08:76:17:13:33:83:69:dc:a6:b1:7a:ba:51:71:
0c:de:d0:3b:57:b3:e1:86:98:bd:9d:e6:ef:94:4c:a7:9f:c1:
e9:78:66:53:ee:f7:b4:e4:ca:e8:89:3b:ae:c5:92:76:52:f9:
e6:f1:b6:77:aa:5c:53:a8:7d:25:5d:ab:b0:43:1a:c1:50:e2:
c3:9a:ea:69:db:a8:27:f3:71:b5:35:b0:8b:39:8e:0d:34:97:
be:7c:ea:36:b8:c2:d0:c8:1c:87:79:ec:60:fb:8d:d4:88:dd:
c5:c5:4e:35:25:b5:38:05:b2:21:e2:97:04:ab:3d:1b:62:be:
96:84:89:44:82:65:89:14:b3:7d:61:62:fc:5d:af:5c:5d:27:
03:e3:8e:5f:87:6b:c3:85:95:11:0f:cf:2b:37:4a:1d:4d:be:
b9:3b:81:c6:21:e7:98:76:da:05:33:32:53:fe:5e:cd:cb:4f:
45:67:d4:0e:10:67:e8:79:a0:d8:33:e1:d1:f2:47:b7:ea:01:
ed:cb:81:ec:4b:00:9e:5c:6a:f9:c5:47:8f:83:7d:7f:71:cc:
5b:ef:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client