Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7iZ2NP2O6fZ_HuHth6i1EQrwjaU.roa
File: 7iZ2NP2O6fZ_HuHth6i1EQrwjaU.roa (raw, json)
Hash identifier: mEWQvGUe8KguwlLfI7nkd3IOZ02vWttWjXw/k9u1waM=
Subject key identifier: EE:26:76:34:FD:8E:E9:F6:7F:1E:E1:ED:87:A8:B5:11:0A:F0:8D:A5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187EBC4F1509C5CCF465D9BA07BA77DD009
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7iZ2NP2O6fZ_HuHth6i1EQrwjaU.roa
Signing time: Fri 05 May 2023 11:56:05 +0000
ROA not before: Fri 05 May 2023 11:56:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.214.108.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:c4:f1:50:9c:5c:cf:46:5d:9b:a0:7b:a7:7d:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 5 11:56:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee267634fd8ee9f67f1ee1ed87a8b5110af08da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:df:bb:98:52:f3:38:66:0f:13:35:7a:fd:
8e:ae:6c:6a:b7:50:1d:55:84:57:12:d9:c7:9b:a2:
18:c1:d2:db:32:b8:01:a6:4a:f8:6c:c8:14:8a:54:
4b:23:fd:16:84:50:6e:c9:3f:5d:31:23:69:77:93:
e0:08:17:06:a7:b6:f5:47:a6:4a:b3:bc:3a:5a:65:
60:86:6a:8a:a6:ab:f6:df:b6:ef:8c:be:e8:6b:fb:
e6:00:76:97:4c:52:9d:42:86:a6:e2:34:a8:de:d9:
9f:38:11:f4:0b:a8:7c:6d:db:19:0d:b9:77:b7:d5:
70:56:cf:e3:e1:32:82:f7:4b:3c:45:e8:33:3f:91:
4f:2a:fc:5b:4e:05:30:de:2c:b8:69:98:5c:69:74:
cb:d8:10:e6:c9:6f:7a:8f:8c:18:ea:61:6f:a7:1d:
54:0c:c3:39:04:60:ac:63:93:83:17:0d:c2:27:bb:
e3:ce:7a:5f:46:e8:2c:1b:9c:2a:db:e5:90:a6:20:
da:ae:8e:a2:d5:ac:a7:08:21:7f:ff:0f:2f:cd:62:
63:be:52:c5:29:c5:70:63:fc:7e:c7:de:4b:c9:ae:
22:85:3d:c5:01:07:8c:b1:1d:ef:40:a4:e6:3b:76:
67:0b:d8:70:39:2b:4d:6a:52:de:3f:10:b4:18:cb:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:76:34:FD:8E:E9:F6:7F:1E:E1:ED:87:A8:B5:11:0A:F0:8D:A5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7iZ2NP2O6fZ_HuHth6i1EQrwjaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.204.0/24
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.214.108.0/24
185.223.76.0/24
185.225.2.0/24
185.226.105.0/24
185.226.107.0/24
185.228.74.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e3:a2:f2:dc:55:33:6c:a7:74:bb:59:99:4c:1a:02:ed:52:
82:a3:18:8c:bd:af:a9:42:a8:12:42:2c:01:1c:a8:1b:ab:76:
28:c0:b0:da:82:11:83:9a:87:93:be:3f:58:23:41:30:88:2e:
c2:2b:6e:d3:23:fa:c0:5a:63:ef:04:bd:0b:de:4c:00:0c:92:
f6:d3:b7:72:9f:d5:4a:8e:95:1a:68:0e:c8:c0:ff:5f:ca:a1:
b9:d2:3b:ab:33:76:3b:94:0b:97:71:4d:dc:18:ca:a5:50:6b:
37:94:5d:bc:f0:e2:a6:58:20:a3:05:b4:3e:b1:59:fd:69:bb:
2f:5f:4b:b9:ea:d6:71:8c:c0:6c:38:ef:0b:29:2f:10:63:3e:
d0:d3:e4:da:55:17:94:d2:de:3a:e0:b2:ae:d4:14:06:8f:0e:
1c:0c:03:dd:f1:cd:af:9b:75:f0:8d:a4:8a:8c:70:28:81:02:
25:46:ca:d8:8d:91:89:86:38:f1:c7:0c:68:11:aa:de:99:9d:
c3:8e:4f:54:a3:9c:1d:29:d8:86:7e:ce:e8:c3:12:b3:0d:28:
31:c3:b9:91:e1:6f:33:14:c0:0d:7b:07:5d:b8:76:2b:8b:24:
e6:24:06:f5:4e:63:dc:0f:29:00:79:3b:53:c1:6b:7c:bf:8c:
b0:ef:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:36 2025 by rpki-client