Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/10voqgEz1Z8lYTo7-vTxt5wX-48.roa
File: 10voqgEz1Z8lYTo7-vTxt5wX-48.roa (raw, json)
Hash identifier: O/Tv0LzRZobAUyNrLfRW2YFIVjDEjhhkj9SpNGpt3mU=
Subject key identifier: D7:4B:E8:AA:01:33:D5:9F:25:61:3A:3B:FA:F4:F1:B7:9C:17:FB:8F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 07DCDF5C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/10voqgEz1Z8lYTo7-vTxt5wX-48.roa
Signing time: Sat 05 Mar 2022 15:37:33 +0000
ROA not before: Sat 05 Mar 2022 15:37:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131915612 (0x7dcdf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 5 15:37:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d74be8aa0133d59f25613a3bfaf4f1b79c17fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:47:83:8e:92:4c:2d:ea:67:80:95:e0:22:4f:
5d:ac:ca:cd:53:ec:e6:15:32:eb:41:e3:04:d1:9e:
ed:f9:18:5a:97:07:cc:70:bc:85:63:12:52:5d:4d:
ae:61:d1:b0:22:60:61:55:f7:94:e0:56:d3:6f:81:
65:03:20:54:17:c4:77:18:1e:cb:2b:10:5e:82:bd:
d2:94:16:5a:7b:9e:51:58:1c:f4:f7:53:33:29:1c:
c5:7f:81:35:69:0a:09:31:2f:01:d1:27:43:d4:7b:
22:1b:cd:22:1d:fe:03:9b:3e:b0:0a:04:92:5f:17:
df:82:b2:b3:20:ab:24:d3:06:44:18:e6:63:6a:c5:
12:59:c3:84:af:4d:7f:82:e9:b8:83:ee:1f:84:ab:
e8:e7:12:28:ef:47:b2:65:0b:2f:c5:a8:b8:92:1a:
c2:68:42:cf:a9:4a:80:81:ef:49:77:9b:3f:e4:f5:
93:26:a9:1e:38:28:df:ca:e9:7f:93:af:cc:66:85:
ee:bd:e7:3f:44:03:a4:9b:6e:a2:ef:0f:28:09:32:
c7:6b:a1:04:5a:fb:75:95:05:15:d1:f2:e9:db:bd:
1a:e5:5e:d1:88:3a:84:d2:ec:d7:57:62:12:1a:23:
b4:d6:6b:68:6c:53:50:0e:2c:5d:66:13:0a:65:f7:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:E8:AA:01:33:D5:9F:25:61:3A:3B:FA:F4:F1:B7:9C:17:FB:8F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/10voqgEz1Z8lYTo7-vTxt5wX-48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.0.0/24
45.131.2.0/24
45.136.6.0/23
45.141.150.0/24
45.147.46.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
61:bc:dc:88:4a:3a:e6:82:e7:44:c0:0b:6a:81:13:8e:89:e4:
5f:ba:9f:43:01:95:b5:5b:22:cc:75:c3:8e:93:75:ad:42:4b:
27:ea:69:a0:0e:c7:4d:1a:90:ab:b2:63:d3:f1:bb:2e:f5:53:
60:a6:32:68:a7:f6:58:54:b7:9e:df:dc:a7:88:7d:d4:4e:80:
8e:0b:97:64:39:9a:5e:2d:34:9f:97:4a:4a:44:d1:a4:c2:4d:
67:09:89:e1:0e:5c:06:2a:f1:1e:cb:df:81:1e:e4:83:60:a5:
92:30:a2:91:0b:2c:0b:14:e0:55:6a:73:f1:71:71:04:03:57:
f8:03:18:06:27:b1:0c:8d:e7:77:47:9a:47:8f:e3:bc:31:97:
22:92:3b:63:30:84:fb:66:48:f3:62:7f:a8:97:de:19:98:d6:
91:b1:e1:8c:44:2e:21:1a:d0:78:a4:1a:77:3d:12:9f:75:c7:
fa:8d:b2:fc:3b:45:04:d2:47:17:05:de:fb:4e:48:51:37:37:
8e:65:f5:10:6d:a8:56:53:b7:40:37:e8:f5:f0:61:34:20:40:
f9:a5:64:52:a9:a8:7e:30:bd:f0:05:fb:6e:38:06:4f:b8:f6:
50:f1:6a:2c:99:09:99:27:24:9a:11:aa:8c:34:e3:0b:19:f4:
34:9f:0d:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client