Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wRjzHBAFwmz3Uf0L003l2x4K3to.roa
File: wRjzHBAFwmz3Uf0L003l2x4K3to.roa (raw, json)
Hash identifier: odx09SjdBuJZqydtEv4wrtJLrKhq9EpU+fVi+SZm6fI=
Subject key identifier: C1:18:F3:1C:10:05:C2:6C:F7:51:FD:0B:D3:4D:E5:DB:1E:0A:DE:DA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CB2BFB90D86D9F001E78FE2571429812E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wRjzHBAFwmz3Uf0L003l2x4K3to.roa
Signing time: Thu 28 Dec 2023 23:25:58 +0000
ROA not before: Thu 28 Dec 2023 23:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:bf:b9:0d:86:d9:f0:01:e7:8f:e2:57:14:29:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 28 23:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c118f31c1005c26cf751fd0bd34de5db1e0adeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:4d:91:d6:ec:9e:19:1a:f5:39:60:5e:de:
34:44:c7:ea:cf:a0:aa:f7:b2:c5:e6:85:85:b9:1b:
da:a8:f6:23:87:73:ba:60:22:f8:93:3f:3d:36:a2:
df:f4:13:18:10:e6:bd:2d:f8:d1:3d:d6:2b:05:53:
6e:ee:a5:21:c3:c2:0e:79:7c:06:fd:2a:53:64:bf:
ce:a8:73:25:57:fc:50:73:50:2b:d0:af:da:cf:55:
06:66:7f:25:3a:81:f2:92:78:b9:a5:2b:66:6c:05:
0f:4f:1c:a5:e5:44:e3:58:30:db:8c:6f:87:fd:8b:
89:f8:76:e1:34:55:51:81:19:57:93:64:e6:05:1b:
0d:13:b9:50:54:ed:31:f4:11:26:0e:9d:66:34:9e:
b9:10:c5:c6:66:a0:e7:16:d7:72:b0:ad:10:2b:64:
41:76:67:8f:b7:e2:90:78:89:c0:50:f4:7e:84:27:
7a:ce:62:a7:0c:61:ea:14:b9:05:47:bb:22:5c:2d:
09:bd:9d:27:62:20:34:b6:e2:7f:28:c7:53:ca:f0:
0b:93:a8:5e:10:c6:86:81:d2:7e:e5:95:dd:9d:19:
97:3e:8f:fd:a7:83:1c:48:10:0b:8d:b4:4b:8b:1c:
24:2d:ca:3d:3b:a4:a4:c1:b6:31:e1:bd:f7:79:46:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:F3:1C:10:05:C2:6C:F7:51:FD:0B:D3:4D:E5:DB:1E:0A:DE:DA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wRjzHBAFwmz3Uf0L003l2x4K3to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/23
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
5b:4e:e2:3e:c9:23:d9:d1:ea:26:a2:d8:ed:86:d9:73:d9:56:
13:a7:d5:3f:f7:de:7e:2f:73:61:0c:84:bf:e8:b5:36:00:35:
0e:6f:90:22:ba:83:df:99:76:3c:1a:f4:6a:ce:fd:17:42:5e:
d2:cd:3f:0b:79:b6:98:cb:a5:4d:7e:86:79:f0:36:5c:3f:fa:
e7:8b:a7:32:5b:ae:5e:b8:34:e2:b4:20:76:78:a4:c0:b4:e2:
91:08:02:52:a8:62:f3:1a:a1:c3:34:42:fa:97:8c:79:d6:60:
82:b2:58:5b:6d:b6:71:f2:bb:b2:6e:43:f8:ab:de:a6:bb:93:
c7:27:b2:ff:a5:03:e4:47:67:ad:58:1c:ca:77:e5:9c:40:68:
73:85:ad:c6:2b:ec:bc:af:81:24:ef:73:17:8b:5f:4d:bd:36:
1f:fd:ba:3e:24:4e:2c:f6:28:ec:eb:2f:d9:4e:1c:09:97:0b:
07:4e:ad:c0:39:67:dc:09:57:f2:57:2f:07:a3:20:da:6d:78:
aa:cd:98:e8:7e:07:26:a4:52:ff:c5:53:54:43:0c:c9:70:98:
fe:ef:11:1f:0c:77:44:d1:08:80:de:d0:b7:51:c3:be:46:04:
6d:87:ee:56:ea:5d:b2:18:11:56:44:71:18:95:9b:90:32:aa:
3c:b9:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:15 2025 by rpki-client