Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-RGaQ8mObrblNSlnVr7VpYZ5qFk.roa
File: 1-RGaQ8mObrblNSlnVr7VpYZ5qFk.roa (raw, json)
Hash identifier: 1aBQCt0k0GZJ2ehgk24J2+HQ8LmoeOEmxkTJOFoHCGI=
Subject key identifier: F9:11:9A:43:C9:8E:6E:B6:E5:35:29:67:56:BE:D5:A5:86:79:A8:59
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0185A10A4CB4E9E2A43497BA0EC428F16DB8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-RGaQ8mObrblNSlnVr7VpYZ5qFk.roa
Signing time: Wed 11 Jan 2023 13:34:44 +0000
ROA not before: Wed 11 Jan 2023 13:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3301
IP address blocks: 193.181.74.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
192.165.229.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.132.95.0/24 maxlen: 24
192.36.96.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.228.0/23 maxlen: 23
192.165.95.0/24 maxlen: 24
193.183.236.0/23 maxlen: 23
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.234.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:0a:4c:b4:e9:e2:a4:34:97:ba:0e:c4:28:f1:6d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 11 13:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9119a43c98e6eb6e535296756bed5a58679a859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:36:7e:7a:4b:04:f3:92:99:3b:b1:2b:0d:
8b:37:d0:d7:30:c3:ec:b4:02:c8:a8:10:57:d1:8e:
9f:0a:76:41:9d:fa:d7:1f:5d:4a:ee:ca:4b:ec:c1:
7b:2d:40:c5:aa:57:7d:c8:fa:c2:c9:1b:55:c0:e6:
e8:fd:ee:2b:34:db:e5:a3:a0:b1:90:ed:72:25:f3:
d5:ad:42:82:03:b9:83:2d:ce:42:36:77:74:c8:38:
9e:8b:21:cc:85:11:05:1e:f5:8a:92:ab:ae:bd:ca:
ff:7b:31:01:e1:1a:88:ea:a2:13:7f:c6:b3:2a:2a:
d9:00:ef:aa:ea:05:d7:84:0e:89:57:8d:e1:62:28:
40:f9:49:9a:d2:94:c7:60:8a:55:dd:4f:69:ee:7c:
cf:85:cb:20:b9:97:77:7a:8a:b5:3e:79:64:66:3e:
bc:ee:92:a5:e1:ed:57:74:ff:83:94:76:73:80:97:
b5:c6:46:49:eb:d6:bd:0a:72:49:80:71:b3:15:71:
7a:20:32:43:50:c8:2b:71:70:ec:b6:f4:de:9d:09:
b2:55:80:cf:0a:3b:09:c1:8f:4e:31:71:bd:39:a9:
81:ee:21:33:cd:5f:5a:2e:0b:de:07:a4:be:6e:d0:
94:90:e1:ef:7f:89:10:99:09:24:19:ec:59:73:6a:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:9A:43:C9:8E:6E:B6:E5:35:29:67:56:BE:D5:A5:86:79:A8:59
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-RGaQ8mObrblNSlnVr7VpYZ5qFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
99:5b:40:5f:a4:f1:59:8d:ad:d1:df:29:b0:18:eb:85:47:4a:
ad:1a:c1:a2:31:35:21:a4:39:73:bc:48:21:8b:50:ac:d6:7c:
3a:ba:2e:04:53:61:12:c5:28:09:f4:08:aa:22:2b:a1:0c:a9:
dd:74:c4:21:18:b6:20:9b:41:96:eb:c7:9f:ce:82:da:52:2b:
ad:cb:97:0d:b9:9c:b3:c2:0e:72:c8:7d:14:05:c5:44:94:26:
99:b0:1a:ab:2c:ce:09:eb:4a:77:01:e3:06:f8:59:23:c8:d7:
e4:76:61:a0:a8:16:af:9e:08:95:3a:7c:e3:cc:4c:25:36:d5:
8e:41:05:64:81:72:94:e3:41:d5:c4:e0:c7:52:5c:90:35:c7:
7d:16:88:d0:2f:0b:da:ff:d9:b4:d3:39:92:92:a2:18:aa:c7:
c2:21:01:8b:70:43:2f:99:b0:51:62:b6:4e:98:c7:da:d9:6e:
aa:cf:c0:b0:98:9c:3f:cb:64:47:76:e3:1d:05:39:2b:21:68:
5d:9e:d3:65:c8:92:44:0d:aa:7c:88:6f:50:79:fd:34:0c:f9:
48:ed:a9:d3:d0:21:c9:a8:bc:c4:ff:fb:37:48:92:4f:5a:cd:
89:9e:47:10:a2:85:0d:d1:09:fd:29:7a:0e:58:24:64:a4:70:
92:b7:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:23 2025 by rpki-client