Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/ppU7OSkW6g450H_1v6fLiPszRBw.roa
File: ppU7OSkW6g450H_1v6fLiPszRBw.roa (raw, json)
Hash identifier: eCdZn1ti3LFaoZsFt+OY70upI/0gNvJtLrKZVBk+y78=
Subject key identifier: A6:95:3B:39:29:16:EA:0E:39:D0:7F:F5:BF:A7:CB:88:FB:33:44:1C
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 0187343CD3F52A5663452E4EF5556B14BA24
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/ppU7OSkW6g450H_1v6fLiPszRBw.roa
Signing time: Thu 30 Mar 2023 20:36:54 +0000
ROA not before: Thu 30 Mar 2023 20:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44700
IP address blocks: 185.6.68.0/22 maxlen: 24
88.151.64.0/21 maxlen: 24
185.59.12.0/22 maxlen: 24
95.129.208.0/21 maxlen: 24
93.89.0.0/22 maxlen: 24
2a02:21e0::/32 maxlen: 48
2a02:17f8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:3c:d3:f5:2a:56:63:45:2e:4e:f5:55:6b:14:ba:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 30 20:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6953b392916ea0e39d07ff5bfa7cb88fb33441c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:35:d2:05:14:36:5e:f0:ba:c5:49:6d:7d:
c5:a2:e9:18:ee:86:15:9c:0f:77:56:a4:c7:6a:92:
17:7b:c2:4b:db:e2:7b:9a:a0:55:ec:84:31:c8:1f:
bf:1d:91:4f:3f:2a:26:26:da:a5:0c:51:c4:3c:a3:
1f:89:12:e2:41:73:20:2f:26:c7:47:27:3c:81:64:
4c:07:59:98:0e:b9:35:5a:a3:d0:4f:f9:df:6c:bb:
f2:a9:72:a3:19:5f:05:e8:2e:3b:4b:84:d5:3c:a9:
3a:9e:0e:d8:97:59:2e:8f:bd:9c:7f:7f:15:eb:6c:
51:49:1c:8c:a9:fd:17:3f:0e:f4:10:52:ab:80:9e:
9a:4b:64:ca:a6:92:d1:8e:14:d6:5a:46:a5:5c:7a:
08:24:f1:1f:be:37:41:e0:b6:ce:b2:ef:67:47:be:
99:dc:2f:24:da:51:9b:06:7c:26:5d:51:7b:6b:3e:
b9:43:45:b1:70:92:10:e7:ed:70:72:0a:45:15:a4:
55:45:38:88:31:4e:85:61:65:fc:81:49:46:24:3a:
41:35:52:03:15:d2:2c:4f:b2:d0:cb:01:3e:c1:c9:
f6:de:94:22:71:09:0b:b3:0e:88:7a:5d:65:7f:d7:
90:fc:9b:a5:be:02:54:3b:70:30:60:4f:c8:9d:d4:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:3B:39:29:16:EA:0E:39:D0:7F:F5:BF:A7:CB:88:FB:33:44:1C
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/ppU7OSkW6g450H_1v6fLiPszRBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.64.0/21
93.89.0.0/22
95.129.208.0/21
185.6.68.0/22
185.59.12.0/22
IPv6:
2a02:17f8::/32
2a02:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:26:4f:46:62:ee:79:3b:28:f5:c2:c8:bf:33:14:98:a4:61:
22:64:23:b2:4b:44:e4:e1:d3:30:63:1e:2e:68:1e:45:a2:ad:
16:8a:d8:03:19:bb:88:93:48:a1:ab:97:1e:d9:86:bb:8b:91:
cd:61:95:61:8e:83:9a:91:0c:17:c7:5a:e2:7a:4c:9a:d0:6b:
c0:cb:cc:ba:4a:cc:41:62:a7:ce:56:bc:b1:78:73:4b:71:1f:
30:92:28:c8:de:cd:0d:fe:e0:2f:c5:07:8b:dd:d8:d3:fe:cc:
3c:0f:fb:85:34:70:1e:7e:75:e8:1a:40:35:1d:b6:98:92:93:
3c:4c:06:7d:e0:13:86:2c:29:59:06:4a:48:4c:59:e2:70:c8:
c7:17:20:e5:84:a6:31:d0:d9:66:b4:97:27:86:4a:11:96:4a:
65:20:8e:b3:36:70:49:be:03:3b:da:5d:80:67:c4:ac:c0:b8:
4b:04:d7:a2:a0:f8:fa:27:35:0e:7a:0c:c6:ba:65:09:0b:a6:
a9:4d:a2:2f:1c:53:ea:fb:35:4b:9a:42:1a:a9:8b:12:7b:6a:
d0:f2:28:b3:e3:b8:30:b2:9a:51:c0:7d:7c:4c:2e:f6:75:32:
c8:1e:ea:12:90:87:8a:5e:79:63:e3:b4:68:2d:3d:c3:fb:69:
5b:03:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:57 2025 by rpki-client