Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/cBv4BoAIoOIFyBe2QrsUhYUybrI.roa
File: cBv4BoAIoOIFyBe2QrsUhYUybrI.roa (raw, json)
Hash identifier: A4kbLM8O6qqp1/2Dka7g3wxRWWl+bp8F6E2JTr3H/LE=
Subject key identifier: 70:1B:F8:06:80:08:A0:E2:05:C8:17:B6:42:BB:14:85:85:32:6E:B2
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018795509E964FBFC6188848427C97B7BE1C
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/cBv4BoAIoOIFyBe2QrsUhYUybrI.roa
Signing time: Tue 18 Apr 2023 17:01:41 +0000
ROA not before: Tue 18 Apr 2023 17:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
79.141.174.0/23 maxlen: 23
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:50:9e:96:4f:bf:c6:18:88:48:42:7c:97:b7:be:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Apr 18 17:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701bf8068008a0e205c817b642bb148585326eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:51:cf:0f:9f:88:84:df:9b:a8:c6:87:58:
ba:54:c8:92:53:aa:5e:77:36:d8:18:71:6f:0a:e3:
d3:17:f9:e0:82:5f:74:44:da:8a:6b:a4:8a:f0:df:
d6:81:d4:d6:61:77:ee:1b:b4:8c:f0:b3:05:d2:f2:
3b:7b:9f:ae:11:34:a3:be:71:4a:a7:f7:15:d3:be:
76:39:40:9c:7e:4a:6f:51:8f:10:3f:fa:83:fc:ca:
14:3b:5b:29:3c:1b:35:a3:19:f3:45:67:4f:92:44:
25:a4:79:3e:3f:ef:bb:20:06:73:ea:21:13:89:11:
dd:db:ca:12:52:88:45:f5:63:3f:21:5c:78:31:55:
e1:f2:32:01:f3:a7:a5:70:c4:31:9a:e8:22:c0:86:
9b:db:85:9f:d3:d9:77:72:cc:da:76:c9:37:31:dc:
c4:0f:a2:9a:3e:b6:3a:ad:fd:a9:94:fe:4f:ec:66:
74:e7:33:63:f1:ad:24:c9:05:7d:6e:f3:12:02:c5:
ac:6f:89:3c:9d:e9:ca:e8:46:e9:ab:c0:ee:82:73:
4d:b8:36:b7:e2:b4:2d:a4:1e:38:9b:ab:97:ad:79:
de:ad:da:75:14:11:f4:3d:d0:d2:94:a8:b1:c9:a4:
73:d3:ad:92:bd:4c:ef:5e:25:88:d3:85:5f:18:58:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:F8:06:80:08:A0:E2:05:C8:17:B6:42:BB:14:85:85:32:6E:B2
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/cBv4BoAIoOIFyBe2QrsUhYUybrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0/24
77.83.198.0/24
79.141.164.0/23
79.141.172.0/24
79.141.174.0/23
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.193.0-185.104.194.255
185.117.88.0/22
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:c5:fa:d5:56:e6:13:1a:78:76:2e:27:91:11:c7:71:de:dd:
84:b2:83:ff:8b:26:2e:7e:d7:b6:db:9b:eb:a5:7f:d1:1e:84:
95:9d:59:05:40:47:3b:82:52:2f:02:3a:df:a0:bf:82:71:58:
32:bc:da:f0:b5:0f:04:ce:04:6f:38:a5:23:c3:51:e1:ad:8e:
04:fb:85:e9:e1:6b:74:23:10:45:9a:e2:75:54:bf:11:4f:6a:
0a:5b:f2:13:d0:ac:6c:57:98:af:ef:33:7a:4c:9d:d3:84:cc:
9d:89:e9:51:cc:30:eb:3f:0e:d8:29:12:c9:8b:c7:06:dc:1f:
5d:31:09:17:51:44:b7:26:2c:b4:62:2c:c8:2e:22:5b:fa:86:
3e:44:a9:f4:54:e1:4f:96:71:9f:8e:59:f6:65:26:5d:dc:98:
a3:44:40:fe:0d:35:e1:c7:ad:8a:96:85:16:f1:4b:d5:79:16:
6a:87:a2:1a:80:4a:c6:f3:e0:5c:c2:bd:fa:5d:2e:31:45:dd:
45:52:87:58:a8:31:7c:fd:98:cb:5a:7e:7d:eb:ae:3d:bc:c6:
67:7a:28:4a:31:78:35:bb:c7:d7:84:24:1e:72:58:02:51:47:
4f:9d:95:33:09:8b:d0:30:38:f7:2b:e6:ca:ec:54:7a:d3:2d:
91:dd:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:02 2025 by rpki-client