Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/f83BBHzdoFEn1nz-V1B8kIkvOkg.roa
File: f83BBHzdoFEn1nz-V1B8kIkvOkg.roa (raw, json)
Hash identifier: ZBtPSIiiPj0OpvtqOeeDwxqUarV5i2WulDZts3ivrFc=
Subject key identifier: 7F:CD:C1:04:7C:DD:A0:51:27:D6:7C:FE:57:50:7C:90:89:2F:3A:48
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018B8F781F2BD270A7CABBAB37F74BA0EDFF
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/f83BBHzdoFEn1nz-V1B8kIkvOkg.roa
Signing time: Thu 02 Nov 2023 09:58:16 +0000
ROA not before: Thu 02 Nov 2023 09:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 87.117.68.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
147.189.214.0/24 maxlen: 24
217.14.184.0/21 maxlen: 21
109.224.226.0/23 maxlen: 24
178.248.128.0/21 maxlen: 21
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
94.154.184.0/22 maxlen: 24
193.35.146.0/23 maxlen: 23
176.116.116.0/22 maxlen: 22
212.59.72.0/21 maxlen: 24
91.239.57.0/24 maxlen: 24
194.146.160.0/22 maxlen: 24
213.225.224.0/22 maxlen: 24
217.20.244.0/22 maxlen: 24
79.135.122.0/23 maxlen: 24
185.231.136.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
144.178.252.0/23 maxlen: 23
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:78:1f:2b:d2:70:a7:ca:bb:ab:37:f7:4b:a0:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Nov 2 09:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcdc1047cdda05127d67cfe57507c90892f3a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:c3:20:ea:a7:70:ae:99:22:c2:31:21:79:
da:78:30:85:b4:fa:ff:d8:b0:fd:ff:a5:53:42:1e:
66:cf:79:f3:bd:27:0a:5b:bc:0e:82:86:9f:8a:c8:
2e:11:f1:58:f2:74:25:c4:43:b9:09:00:6a:80:43:
3a:71:78:99:99:e7:c8:40:24:ab:95:fc:72:84:07:
ae:04:7e:e1:0a:5e:6d:1c:84:66:74:ca:df:7b:69:
bf:af:17:e0:35:ac:14:60:9e:06:89:2c:0c:b0:b8:
0a:f9:6b:40:05:25:eb:dd:5c:33:4d:b4:c5:17:15:
69:3e:00:7d:31:91:6e:1e:c8:83:71:2b:c5:65:c5:
b4:69:20:ea:d0:73:78:14:d8:92:f1:f7:68:44:53:
56:ab:f9:35:1c:c0:3c:ed:23:84:39:49:34:e6:f3:
9f:dd:fe:6a:46:e1:c6:f3:73:9c:ba:3d:87:1a:22:
2c:3e:e4:73:08:2c:32:7d:f2:8b:db:c8:67:fc:bb:
19:05:8d:89:53:c0:94:9d:c7:01:e8:a9:5d:f2:da:
2c:c7:6a:77:37:b4:6d:d1:d5:98:b1:7a:fd:0b:24:
46:93:eb:dc:9c:c1:92:e8:e6:16:37:36:a5:9a:de:
8a:f5:da:4e:22:9f:b2:c3:9b:ab:af:a3:c3:c9:b0:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:C1:04:7C:DD:A0:51:27:D6:7C:FE:57:50:7C:90:89:2F:3A:48
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/f83BBHzdoFEn1nz-V1B8kIkvOkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.226.0/23
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.206.172.0/22
212.59.72.0/21
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
26:79:b3:6d:e0:94:cd:04:f1:3f:13:ab:7d:14:39:37:c8:31:
65:c4:47:96:a1:a0:6a:dc:b1:f0:20:c4:6d:ec:87:54:3c:e8:
a1:a4:28:ad:fe:96:4c:e6:3e:83:3e:8c:c8:a2:ac:73:18:6a:
3f:16:c9:f7:ce:0a:46:93:e9:74:3a:b7:00:8b:0b:c7:26:14:
9a:13:a8:f3:aa:9b:4a:94:6c:c5:f4:ef:a5:6f:5b:df:fc:b8:
5b:13:73:e4:33:5e:c5:62:13:15:c7:ce:70:ba:34:c3:7a:a9:
c6:3e:27:d4:48:cc:35:4e:49:b4:b5:31:9c:4f:dd:58:ed:a9:
e2:0e:4b:a1:29:b1:89:8a:8c:c5:fd:33:c0:df:43:ae:ad:de:
98:d9:6b:98:2b:0d:27:b4:22:15:16:7f:3e:41:36:ab:c0:e0:
6e:ec:fe:72:e8:a3:e2:5e:a1:02:38:61:98:57:8d:20:f5:32:
4f:05:87:76:21:5d:24:13:7f:dc:fc:48:f4:b7:62:19:4d:9d:
35:83:7c:9d:52:19:1c:20:ae:54:16:4e:80:e0:35:d9:68:03:
3b:37:2c:9c:04:47:cc:d9:88:bf:f4:26:36:f1:41:63:c7:2b:
da:3d:f1:07:1e:45:0c:2e:d1:0d:2e:4b:5e:c8:0c:c3:7e:d0:
7f:58:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:21 2025 by rpki-client