Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L1b53OstN2dJC9vb_hCDyhSxxZo.roa
File: L1b53OstN2dJC9vb_hCDyhSxxZo.roa (raw, json)
Hash identifier: KHa0dkLlzhVy8Q0MXGjAxp+OVjBHBWk/PYj8OMEL1cQ=
Subject key identifier: 2F:56:F9:DC:EB:2D:37:67:49:0B:DB:DB:FE:10:83:CA:14:B1:C5:9A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188FC24498FB5742733BD8F0550DDBFE1EB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L1b53OstN2dJC9vb_hCDyhSxxZo.roa
Signing time: Tue 27 Jun 2023 09:16:56 +0000
ROA not before: Tue 27 Jun 2023 09:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.210.234.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.90.17.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.226.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
185.214.101.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:24:49:8f:b5:74:27:33:bd:8f:05:50:dd:bf:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 27 09:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f56f9dceb2d3767490bdbdbfe1083ca14b1c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:b2:8f:84:0e:d0:d7:75:34:7c:32:b2:32:
a3:e4:91:f3:41:db:6f:68:5d:78:b6:75:a4:d7:64:
06:c3:6a:2b:ec:6d:96:de:c5:81:75:f8:1b:15:17:
26:e0:ac:44:fd:94:f9:56:99:e3:32:85:74:cd:29:
43:de:9b:b8:98:78:83:05:03:35:2a:55:57:f3:1b:
98:75:d2:d8:7a:93:42:06:72:9a:f5:29:d5:f7:0d:
73:3b:bd:8b:c8:20:43:a6:39:9f:f7:bd:ca:0d:b4:
4f:fe:1e:2b:ea:ca:06:e2:cb:3a:1c:eb:b2:e7:c7:
d0:a0:b7:d1:60:a3:26:0b:9e:05:86:9e:4c:0c:22:
ee:fb:d9:bf:b4:86:39:d2:c9:09:c4:a0:a4:a0:de:
b6:17:02:a4:9e:3f:6c:45:74:b5:9b:60:fc:98:06:
4a:23:f4:97:0c:5a:cb:28:88:19:f4:6f:af:61:94:
a6:5a:75:2c:f4:9f:f4:36:f2:9a:1a:1f:54:43:f7:
22:39:cc:35:ee:06:ba:ed:bc:64:2c:9d:20:29:09:
79:67:eb:49:23:ee:2c:6b:dc:b9:de:2c:d2:b9:e7:
5f:ff:6b:1c:76:3f:ef:cc:24:c9:cb:26:0c:a1:88:
ba:11:4d:de:5d:09:38:55:96:2e:e2:3a:61:fe:5c:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:F9:DC:EB:2D:37:67:49:0B:DB:DB:FE:10:83:CA:14:B1:C5:9A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L1b53OstN2dJC9vb_hCDyhSxxZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.17.0/24
45.90.19.0/24
45.147.224.0/24
45.147.226.0/24
185.210.234.0/24
185.214.101.0/24
185.225.0.0/23
185.225.22.0/24
185.230.52.0/24
193.58.144.0/22
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6b:18:fc:2b:12:9a:54:4d:d0:b8:f6:6c:e5:79:e2:df:85:
92:71:c7:1e:e7:42:65:1b:d1:99:89:32:ae:51:22:58:cf:be:
d2:c9:2b:ee:9c:16:6e:2e:3b:e2:1d:75:7e:e9:12:e7:27:e8:
84:b4:6b:b5:26:06:12:a0:8b:1d:63:44:93:e5:c8:55:b6:81:
49:6c:e2:69:36:64:12:0a:24:49:8d:c3:c1:c1:25:5d:8d:b1:
a5:7e:6c:d2:30:28:f7:db:ab:62:59:e8:34:eb:2a:fd:ec:e8:
70:d8:99:28:a4:dd:52:52:70:be:19:f6:43:e3:bb:33:e3:8b:
2b:bd:d4:e5:d3:37:1d:3c:d1:23:2f:f4:ce:0d:a3:be:6a:f8:
e1:00:e6:b6:6e:f4:de:36:ce:e0:9c:83:7b:2e:5c:c7:31:7a:
bf:90:43:c1:a6:85:49:ba:7a:9a:80:60:09:72:3f:cc:ed:fd:
fd:04:07:60:68:f0:cf:be:e5:7e:78:c3:23:eb:93:6a:bf:59:
7b:83:ab:69:0c:39:f5:2f:9a:c2:7b:b8:45:0e:03:1a:3a:80:
a5:bc:85:60:9a:fa:c2:1e:88:02:69:ac:34:e1:c6:95:bf:a7:
e5:45:28:71:a1:69:a1:d7:ed:44:40:b7:08:86:9b:2b:a7:c4:
43:3a:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:16 2025 by rpki-client