Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zFEpDvUc6nM7MrQzXNFTVw0_oR4.roa
File: zFEpDvUc6nM7MrQzXNFTVw0_oR4.roa (raw, json)
Hash identifier: PaLa1KZLnNPVa8i75MeGgu/TI6KDsGA0PG42RTzbg0s=
Subject key identifier: CC:51:29:0E:F5:1C:EA:73:3B:32:B4:33:5C:D1:53:57:0D:3F:A1:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AA79D2CA5F4429BFCC748EBCBD81EEDC1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zFEpDvUc6nM7MrQzXNFTVw0_oR4.roa
Signing time: Mon 18 Sep 2023 09:26:50 +0000
ROA not before: Mon 18 Sep 2023 09:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.225.22.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.194.177.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.147.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:9d:2c:a5:f4:42:9b:fc:c7:48:eb:cb:d8:1e:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 18 09:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc51290ef51cea733b32b4335cd153570d3fa11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:17:18:cf:ab:d7:83:29:42:47:b2:bc:d1:
de:02:07:2e:7f:a9:2f:69:83:21:1b:d3:d1:81:24:
33:d1:df:bc:0c:2a:c0:f1:ec:da:65:8f:fe:cd:3b:
77:09:3b:e3:11:d8:25:15:77:74:f8:5e:d1:9e:1d:
32:a8:48:f0:99:b3:c1:fe:3c:a7:3c:6b:31:c9:e5:
66:34:ad:e7:d5:0b:b9:63:d2:f8:81:57:90:25:d4:
6c:e3:bb:a9:d5:d9:9a:ee:e1:59:95:54:7d:b4:86:
51:53:2e:63:b6:33:1a:50:60:76:88:bb:25:13:bf:
12:fe:e6:00:de:41:13:64:4d:55:c2:04:dc:cd:d5:
d7:13:b8:66:43:ac:35:29:e6:f8:c9:5a:56:d9:d9:
fa:35:00:72:83:97:16:7f:d7:7f:4e:47:c4:34:19:
83:67:73:a6:40:86:15:d9:5e:27:8e:68:de:1a:61:
60:25:d7:0e:0f:3d:28:79:78:0e:f6:6a:23:e3:2a:
ae:6c:a9:fe:7d:01:30:bc:78:f0:72:46:d6:9e:d7:
2f:48:a9:b1:85:ba:8e:85:48:48:44:a6:19:d0:e9:
18:f3:2a:86:da:88:05:99:6e:d4:6c:10:5c:13:46:
b3:4b:36:e7:69:e8:b3:c1:ec:0c:6b:af:04:0f:39:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:29:0E:F5:1C:EA:73:3B:32:B4:33:5C:D1:53:57:0D:3F:A1:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zFEpDvUc6nM7MrQzXNFTVw0_oR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.8.23.0/24
45.90.19.0/24
45.147.224.0/24
185.36.204.0/23
185.194.177.0/24
185.209.73.0/24
185.210.233.0/24
185.220.249.0/24
185.222.29.0/24
185.223.80.0/24
185.225.0.0/23
185.225.22.0/24
185.246.112.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
29:eb:5a:1d:16:bd:25:82:e4:be:22:0f:fc:35:60:72:b6:e1:
1a:21:8a:99:03:d8:08:ea:f6:50:16:49:0c:82:37:0b:1b:a7:
bf:18:38:a5:c9:c8:f7:55:20:de:42:13:99:ef:37:9c:dd:cf:
38:2f:36:88:a8:f5:25:70:6a:c7:ae:d6:37:61:cd:2b:92:87:
36:65:e8:c2:3b:fd:6e:56:8d:18:24:90:59:4e:55:ab:8d:d0:
8e:23:60:88:fd:9e:81:58:21:8a:78:46:38:12:48:31:1b:f4:
e2:c9:50:26:b6:b0:f4:60:2e:c6:76:a0:5a:26:6c:3d:6f:f3:
6c:9b:7a:a9:fe:ee:81:30:14:88:9f:3c:77:88:5f:80:14:6c:
c9:db:09:cf:25:e4:85:5c:5e:e8:ed:2f:8b:92:46:9c:a5:5a:
85:93:55:e8:f1:66:5d:2a:0e:ff:38:13:d8:2c:05:12:43:20:
dd:6b:87:68:a0:6f:68:c1:9c:f1:3b:39:0d:34:0d:5f:d5:ad:
5c:87:5c:8f:ba:61:ac:3c:ac:ad:bb:04:4e:82:f4:93:e1:6d:
b0:f8:64:6d:b9:67:cb:9d:18:d7:db:57:7a:f5:95:a3:c6:98:
68:1e:3e:09:14:29:ee:7c:11:36:74:74:0e:92:e7:30:eb:e3:
8a:b4:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:42 2025 by rpki-client