Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/1r_YSDVeNxGg2oYUBd2pfwZWQPA.roa
File: 1r_YSDVeNxGg2oYUBd2pfwZWQPA.roa (raw, json)
Hash identifier: sBiyFaWLrkJsNysK9Q/7iHWm6VkcnZvyOCZFtyL8H50=
Subject key identifier: D6:BF:D8:48:35:5E:37:11:A0:DA:86:14:05:DD:A9:7F:06:56:40:F0
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 01856D66356BFBDEE1CFF55A41A1232474C4
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/1r_YSDVeNxGg2oYUBd2pfwZWQPA.roa
Signing time: Sun 01 Jan 2023 12:54:52 +0000
ROA not before: Sun 01 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198770
IP address blocks: 37.230.248.0/24 maxlen: 24
128.0.66.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
141.101.228.0/24 maxlen: 24
141.101.231.0/24 maxlen: 24
85.92.116.0/24 maxlen: 24
85.92.117.0/24 maxlen: 24
85.92.118.0/24 maxlen: 24
37.230.152.0/24 maxlen: 24
37.230.153.0/24 maxlen: 24
37.230.154.0/24 maxlen: 24
37.230.155.0/24 maxlen: 24
141.101.204.0/24 maxlen: 24
178.170.225.0/24 maxlen: 24
37.18.74.0/24 maxlen: 24
37.18.75.0/24 maxlen: 24
37.18.76.0/24 maxlen: 24
37.18.77.0/24 maxlen: 24
2a0d:b1c0:c0::/44 maxlen: 44
2a0d:b1c0:abc0::/44 maxlen: 44
2a0d:b1c0:500::/44 maxlen: 48
2a0d:b1c0:d0::/44 maxlen: 44
2a0d:b1c0:ffff::/48 maxlen: 48
2a0d:b1c0:aaaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:35:6b:fb:de:e1:cf:f5:5a:41:a1:23:24:74:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Jan 1 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6bfd848355e3711a0da861405dda97f065640f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:3c:4f:d0:eb:85:28:ed:9c:ed:0c:cf:6f:
6e:8b:53:4a:1a:26:a6:88:fa:a3:12:8d:42:14:96:
6d:36:ff:3e:5c:56:5e:87:22:7e:38:5f:7c:0c:60:
fc:c6:ae:3e:ce:97:62:0a:c1:d7:85:04:3b:21:19:
89:c5:90:b5:c4:f2:a8:2b:1f:8b:55:47:59:12:0b:
cc:a6:8b:70:00:04:07:65:20:29:05:9d:71:d6:93:
c2:bd:27:ef:d5:f6:9b:2f:2c:dd:23:24:c2:1c:ca:
d0:eb:89:48:95:a3:54:02:8b:7f:44:e4:53:56:88:
72:ee:c3:f0:5b:a2:db:d9:46:18:05:7d:5f:b2:a4:
d3:d4:d1:ab:7b:4a:f9:5f:a8:5e:93:3c:c0:00:5b:
83:a7:2d:20:fe:e0:95:f9:bf:52:bf:96:32:99:9c:
09:32:83:a2:71:df:85:c9:b1:c7:87:ef:29:f4:a3:
f0:37:78:b3:be:7f:d6:98:fd:67:05:c1:c5:1b:57:
69:74:e0:f3:31:78:f0:93:97:aa:ac:63:6e:ce:fd:
c5:c3:e3:b6:27:5d:8d:b5:c3:21:91:47:9f:0a:76:
72:78:69:9d:3b:d5:ed:28:bb:5a:98:da:e5:fe:df:
3e:b7:28:3e:65:58:b1:a3:63:d2:13:66:95:7d:25:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:D8:48:35:5E:37:11:A0:DA:86:14:05:DD:A9:7F:06:56:40:F0
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/1r_YSDVeNxGg2oYUBd2pfwZWQPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
85.92.116.0-85.92.118.255
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0:c0::/43
2a0d:b1c0:500::/44
2a0d:b1c0:aaaa::/48
2a0d:b1c0:abc0::/44
2a0d:b1c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
8a:9e:ae:94:64:19:db:5a:07:17:6f:2a:45:4d:d9:ab:53:19:
a1:84:ca:fd:b4:f4:80:d7:46:a4:47:93:e6:8a:d8:cf:07:6d:
6d:fa:50:c9:f5:6b:01:e1:89:b0:3d:da:d4:2b:6a:48:78:52:
24:00:1e:78:22:6f:70:fc:26:11:d3:4f:dd:43:2d:fe:f5:98:
d3:c7:41:de:2e:23:17:86:cc:2a:d9:98:e0:f6:9f:cc:cd:a6:
70:f6:05:62:fc:5f:fe:42:d4:62:5d:a1:e0:d4:28:6e:c0:9b:
c9:be:5f:e8:49:0e:e9:61:3f:df:ec:65:71:83:a4:a2:9e:41:
ae:26:b2:70:8d:e3:50:73:32:4a:53:0f:06:a5:c3:9e:fe:c7:
3f:ca:4a:95:02:ec:cc:e0:f5:9f:1b:42:46:d3:cb:1f:5c:cf:
a3:9f:aa:a4:54:c4:7d:84:5d:e7:b8:76:e6:e5:bc:ec:a9:d8:
10:06:48:8c:f6:7a:a1:78:d9:21:25:6a:9f:43:90:af:19:82:
e3:17:8a:3d:51:a9:26:cc:6a:58:f1:c7:9c:a8:b0:e2:37:ba:
46:dc:dc:f4:a1:0d:da:04:6c:90:03:15:5c:56:ab:77:75:66:
ce:c0:c7:19:75:26:95:f4:38:27:dc:0c:79:eb:48:82:62:69:
55:6a:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:39 2025 by rpki-client