Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2pYBs5W09G6wqdKQk3iGx7LrgFE.roa
File: 2pYBs5W09G6wqdKQk3iGx7LrgFE.roa (raw, json)
Hash identifier: l4F+sac5/gK2FF1EY81Ts2sK75lqr8/VD4HUIJ7lTyA=
Subject key identifier: DA:96:01:B3:95:B4:F4:6E:B0:A9:D2:90:93:78:86:C7:B2:EB:80:51
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018A9582C66FB83CCC4E4DDE9DF5C54407E2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2pYBs5W09G6wqdKQk3iGx7LrgFE.roa
Signing time: Thu 14 Sep 2023 21:04:50 +0000
ROA not before: Thu 14 Sep 2023 21:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 45.147.47.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:82:c6:6f:b8:3c:cc:4e:4d:de:9d:f5:c5:44:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 14 21:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9601b395b4f46eb0a9d290937886c7b2eb8051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:5c:f7:3c:d5:3c:75:54:65:18:75:3e:06:
9f:4b:3e:3d:54:55:e4:0a:d3:f5:a2:b8:5e:05:94:
2b:2d:06:f7:1c:95:3a:0b:91:2a:8c:d6:5d:c9:8c:
b8:e6:2d:94:fc:73:32:a1:53:bd:5b:b3:df:62:6b:
0d:a9:b8:2c:8a:03:5b:fb:a1:8e:ac:48:7d:f7:ad:
70:2d:6d:35:d2:56:5e:e0:47:0e:6b:ba:3b:b5:70:
6c:91:3c:e8:5b:61:ce:f1:3e:51:ee:b7:cd:f3:19:
05:c0:e5:f7:78:76:c4:2a:ee:cd:d4:fb:01:e1:ad:
44:b4:8d:23:92:1f:09:43:81:cf:37:68:1e:26:20:
7e:68:f9:66:9a:ab:f6:1d:82:8b:5d:33:09:da:11:
a0:bc:c7:ee:fd:92:7a:55:ee:10:5d:f2:55:80:c7:
37:51:d2:07:0d:65:3d:88:00:d8:71:4e:69:2a:cd:
00:da:b1:42:d3:90:3b:46:56:60:4a:13:91:ec:1f:
3a:31:83:0c:58:cc:34:61:85:7b:7e:a2:17:91:dd:
58:3b:78:a9:f3:f2:3f:03:e1:b5:3e:b8:fa:cc:a2:
35:31:2a:88:67:a7:6b:a8:de:b6:b8:71:cf:9a:95:
52:4f:f5:c2:b4:3a:b9:24:01:68:2e:58:fc:49:15:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:96:01:B3:95:B4:F4:6E:B0:A9:D2:90:93:78:86:C7:B2:EB:80:51
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2pYBs5W09G6wqdKQk3iGx7LrgFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.148.0/24
45.147.47.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
74:a8:e6:5a:d2:f5:a5:24:3a:11:b8:72:af:e5:ff:40:1c:bc:
37:01:75:63:0a:99:38:62:6d:cd:42:e5:26:d8:76:c6:ad:e2:
91:b5:ad:26:f5:87:99:6c:96:8a:0c:1d:cd:d6:62:fa:e7:f1:
e5:90:30:ea:5b:c1:51:06:b7:aa:61:fe:95:81:2a:77:cb:db:
70:d2:ff:14:82:b8:f7:24:68:68:11:46:76:f6:fb:38:b8:cb:
e2:0a:a8:ea:ef:ae:20:94:99:b7:33:c8:0b:f0:72:d4:79:f2:
d0:7b:fb:a0:57:e5:c7:a0:3f:35:4f:62:57:c8:a2:e6:bf:db:
96:44:07:d4:0e:5e:4e:c5:b1:dd:ac:82:4d:09:a1:ba:f4:cd:
55:7b:5a:d9:e9:4d:b0:3e:91:c3:fb:6f:d5:ed:f3:01:97:c6:
87:47:c4:69:19:d6:ce:3d:b2:66:f1:06:21:62:8c:00:5f:99:
ad:32:78:b0:01:8e:e7:7e:ed:6b:2d:8c:fc:fe:ce:7d:45:6e:
4e:31:07:ef:f4:f1:7c:73:1d:06:40:bd:5c:96:3b:c0:41:1b:
89:b9:27:4b:e4:05:ff:a3:21:49:63:01:c2:3b:fe:31:5d:99:
41:5c:9f:34:85:63:3a:22:63:90:23:b2:88:5a:4c:d6:e3:e2:
ff:a1:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:52 2025 by rpki-client