Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tUpHz4PXrzoNVYvnF5YthFTqwtk.roa
File: tUpHz4PXrzoNVYvnF5YthFTqwtk.roa (raw, json)
Hash identifier: RwBflOK8sGgbQsRpWJl8eSrUCOBJw1ytJiiSNk+h91A=
Subject key identifier: B5:4A:47:CF:83:D7:AF:3A:0D:55:8B:E7:17:96:2D:84:54:EA:C2:D9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01890B9F060A9ED98F1FA2F29CEED335F891
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tUpHz4PXrzoNVYvnF5YthFTqwtk.roa
Signing time: Fri 30 Jun 2023 09:25:18 +0000
ROA not before: Fri 30 Jun 2023 09:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.218.100.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
185.210.234.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.90.17.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.226.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:9f:06:0a:9e:d9:8f:1f:a2:f2:9c:ee:d3:35:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 30 09:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54a47cf83d7af3a0d558be717962d8454eac2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:a3:47:af:8b:f7:40:08:fe:54:f2:60:08:
2c:24:07:dc:2d:4a:73:58:9b:67:73:4f:c9:94:f5:
b4:bc:07:2f:7d:24:da:0a:f0:6d:8c:dc:64:27:b1:
3e:bd:0d:ca:b9:b3:7e:c8:79:00:5e:b8:ff:4c:96:
42:de:17:9a:0f:32:c8:4c:c9:fc:54:8b:4f:e5:36:
12:d8:c5:bd:58:50:3a:40:96:b4:07:31:55:b9:d3:
8a:cf:7f:77:22:d6:a9:1b:4b:fd:68:da:4d:84:da:
e3:66:b3:63:ac:02:4e:8e:51:e5:cf:f7:5c:ad:d8:
45:6e:6e:c7:65:ed:71:30:7a:b4:a9:10:5e:ab:a7:
86:c3:ef:69:00:4e:2d:35:e9:ab:4e:3b:1b:0e:16:
3a:b8:57:4e:d2:44:58:d2:04:b9:14:b1:97:eb:f1:
c0:e5:73:eb:c5:0b:ad:da:2e:11:2c:8b:3c:29:c1:
e5:a3:fa:93:60:0d:13:84:74:3e:22:96:b7:4e:47:
59:03:30:f3:55:1a:79:7f:25:94:e4:98:d2:68:df:
0f:8c:5f:2c:1a:4c:64:9e:2d:58:58:8f:be:b6:fa:
4d:3a:ae:f1:ff:59:e6:14:73:01:28:b4:8f:4f:11:
52:e0:db:b4:f7:51:ed:46:b4:9d:db:0f:40:03:25:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4A:47:CF:83:D7:AF:3A:0D:55:8B:E7:17:96:2D:84:54:EA:C2:D9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tUpHz4PXrzoNVYvnF5YthFTqwtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.17.0/24
45.147.224.0/24
45.147.226.0/24
185.210.234.0/23
185.214.103.0/24
185.218.100.0/24
185.218.102.0/24
185.225.0.0/23
185.225.22.0/24
185.230.52.0/24
185.246.115.0/24
193.58.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:1c:27:da:a5:22:8c:ed:dd:5f:6d:cf:86:40:87:01:dc:cd:
46:b2:c1:69:29:41:cf:c4:04:1f:0d:6f:61:fd:8b:e6:14:a5:
ff:ac:7f:bc:fb:d2:7a:46:75:00:f8:96:40:91:b4:79:ba:76:
49:7a:22:88:68:35:68:40:ff:c2:f8:8e:86:33:83:a4:0d:6b:
b1:6a:98:96:96:2d:23:e4:36:5c:02:3d:71:e9:33:b3:e8:ae:
a6:e8:0b:50:74:f1:b7:96:7e:b9:01:9d:1d:26:29:1d:02:7c:
66:2c:19:8f:9c:fc:86:6c:12:04:47:01:59:d7:d5:74:80:e5:
72:b9:43:f1:ba:81:42:30:f9:4f:b7:23:41:1e:ff:4e:d8:db:
db:73:c2:1f:08:c7:ed:dc:7e:f9:39:2c:a1:5c:96:2f:9b:37:
8e:27:7e:6b:43:03:53:49:4f:b1:22:6b:2c:4c:8c:2b:0b:93:
89:26:97:cb:d8:92:49:eb:91:b1:a6:60:4e:8a:b5:ac:5f:17:
ca:7a:14:4f:35:c8:36:2d:b1:b4:d9:71:c7:18:a7:77:b8:b0:
d1:b6:66:fb:25:59:9f:2e:94:72:16:98:1d:de:fa:e7:7f:7e:
dc:cc:88:69:51:1d:8c:d4:e2:6c:e9:28:3e:55:60:c4:5f:ac:
fd:e9:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:25 2025 by rpki-client