Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5nncBKi35Q4RGs8Y6gjx9JIT5uc.roa
File: 5nncBKi35Q4RGs8Y6gjx9JIT5uc.roa (raw, json)
Hash identifier: dhZEvGXo1NqNvmvW0SMAyk16wPUACP1hJJx5uBHu3+A=
Subject key identifier: E6:79:DC:04:A8:B7:E5:0E:11:1A:CF:18:EA:08:F1:F4:92:13:E6:E7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188E51150137DBE7491960097FA2108D657
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5nncBKi35Q4RGs8Y6gjx9JIT5uc.roa
Signing time: Thu 22 Jun 2023 21:44:57 +0000
ROA not before: Thu 22 Jun 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.90.19.0/24 maxlen: 24
185.210.234.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.226.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e5:11:50:13:7d:be:74:91:96:00:97:fa:21:08:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 22 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e679dc04a8b7e50e111acf18ea08f1f49213e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:0a:16:17:7a:38:da:1c:06:d2:dc:05:86:
a4:d2:30:31:3e:24:3b:7d:a2:e7:f3:42:72:5d:94:
ff:e6:6c:97:92:a8:b1:91:ae:a7:43:fa:9e:a6:3b:
89:58:05:77:ad:d8:2b:b9:a8:02:c9:60:5d:3f:2e:
62:66:0c:43:46:80:09:46:ae:0b:9c:28:b0:04:b8:
da:48:af:d4:5d:3c:ce:fa:98:86:f2:d8:b3:b7:69:
1e:a3:7d:26:23:01:d3:e0:2c:23:77:85:6a:4f:66:
69:05:44:1c:05:a4:ca:bf:5b:89:53:7f:bd:23:55:
42:d8:f8:e1:16:93:7d:9e:77:9b:c3:aa:a9:56:e0:
d5:a1:41:f5:55:2c:d4:ea:89:e8:76:11:a7:82:06:
cc:f5:43:02:d6:77:30:37:7a:1a:20:87:8a:16:fc:
c1:87:b9:34:cc:b2:64:09:53:e7:34:3a:ef:7d:b0:
66:e4:ed:59:33:ce:0b:66:e7:35:f2:58:92:f5:56:
dd:e3:b4:76:c3:39:f2:87:a3:e4:59:a7:15:46:89:
fd:10:c6:e7:5e:cb:2f:68:bf:c3:de:3d:e3:5d:c1:
4b:89:0a:d8:1a:2c:43:03:45:21:c3:85:3a:2f:28:
29:53:11:50:24:b7:57:2f:81:b4:69:60:a7:be:66:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:DC:04:A8:B7:E5:0E:11:1A:CF:18:EA:08:F1:F4:92:13:E6:E7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5nncBKi35Q4RGs8Y6gjx9JIT5uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.19.0/24
45.147.224.0/24
45.147.226.0/24
185.210.234.0/24
185.225.0.0/23
193.58.145.0-193.58.147.255
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
76:10:0c:22:8d:43:54:87:1c:08:dc:84:19:82:cd:46:2e:4d:
f7:0d:83:9a:e7:24:2a:8e:2b:28:d9:3c:c4:b9:2a:89:23:a0:
c6:f2:eb:1a:62:c0:62:7f:15:29:16:a9:26:a3:76:73:d6:23:
b1:96:a1:b3:9c:58:35:37:78:8c:ae:6a:f2:08:08:ed:ba:fb:
bc:4b:9b:93:5c:13:97:a8:fb:ae:09:62:66:7a:49:b8:75:98:
d6:b0:32:6d:dc:7c:03:7a:9e:a9:2f:23:11:1e:7d:09:36:1a:
e1:21:2f:4a:e2:80:73:4a:c0:f1:95:f8:1d:d7:37:0c:69:ee:
a3:cd:1e:b9:bb:08:4d:81:c6:1c:8b:d4:4d:7d:4c:e2:17:61:
ce:b7:ba:c1:2f:77:3b:d1:23:fc:11:86:90:18:ac:92:07:ca:
c1:c8:a6:99:0c:51:63:0d:dd:0c:d7:14:8d:8c:83:1c:ca:61:
d4:9f:58:1a:4e:65:5a:3a:f4:89:5b:c2:ad:f9:1b:dc:7e:1e:
42:08:8b:fc:98:45:fa:05:a2:ff:10:0b:4f:79:dc:90:4e:50:
d6:3f:f7:77:fe:0e:f7:2e:9e:7a:71:a7:4a:23:2e:c7:06:85:
aa:36:dd:9e:21:9b:2f:8a:de:a7:18:d8:6f:2b:56:a4:e5:67:
6a:1e:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:57 2025 by rpki-client