Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/81q7wswCoDz__mWFWyLy48r79Oo.roa
File: 81q7wswCoDz__mWFWyLy48r79Oo.roa (raw, json)
Hash identifier: aCHv/kwaHK5xj0VFWBdvmDYT3J4kV58u4Dvm9HqLd3w=
Subject key identifier: F3:5A:BB:C2:CC:02:A0:3C:FF:FE:65:85:5B:22:F2:E3:CA:FB:F4:EA
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 02CB7F12
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/81q7wswCoDz__mWFWyLy48r79Oo.roa
Signing time: Sat 01 Jan 2022 13:02:32 +0000
ROA not before: Sat 01 Jan 2022 13:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42147
IP address blocks: 193.148.130.0/24 maxlen: 24
193.148.129.0/24 maxlen: 24
193.148.138.0/24 maxlen: 24
193.148.139.0/24 maxlen: 24
193.148.144.0/24 maxlen: 24
193.148.145.0/24 maxlen: 24
193.148.140.0/24 maxlen: 24
193.148.141.0/24 maxlen: 24
193.148.142.0/24 maxlen: 24
193.148.143.0/24 maxlen: 24
193.148.147.0/24 maxlen: 24
193.148.150.0/24 maxlen: 24
193.148.158.0/24 maxlen: 24
193.148.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46890770 (0x2cb7f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 13:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35abbc2cc02a03cfffe65855b22f2e3cafbf4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:12:5d:2b:8a:ef:82:1d:3a:ef:7e:ea:eb:
93:34:5a:e1:a2:bc:d4:fd:78:c3:30:da:3b:fe:d0:
4f:43:89:43:31:4b:b5:d1:aa:26:6e:c2:36:02:7a:
65:9e:ee:be:30:67:a0:e7:fd:ab:f8:77:5c:5b:88:
4c:aa:b6:65:5e:c1:ee:b4:1b:5f:42:56:65:51:0b:
03:2c:0d:45:a7:8d:74:08:c3:54:b5:fb:f3:fc:16:
31:18:e3:70:eb:11:db:c7:26:b4:7c:6b:d4:a4:a4:
ef:e6:2f:61:3b:3a:13:28:6c:9f:a6:47:ec:ca:83:
60:b2:59:51:03:0a:b4:a8:8b:dc:91:73:21:16:61:
78:c4:e3:83:97:22:f6:cc:64:cb:89:9b:ec:20:26:
fe:a8:25:cf:9a:97:76:1c:84:3b:c7:5c:60:07:38:
02:52:77:77:02:ec:1c:a8:cc:75:36:b9:66:de:81:
ca:13:67:fd:92:07:a4:c3:5c:ae:4d:2a:02:19:4b:
09:bf:78:04:7f:88:7d:5e:3b:f2:5f:5e:00:55:8c:
93:43:a4:d9:13:58:76:18:f3:14:8f:dd:28:f4:e3:
24:97:49:d6:b4:79:ca:a8:71:14:80:93:c6:9a:ce:
89:47:be:3f:33:e6:af:94:b0:fa:00:b4:83:b2:8e:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:BB:C2:CC:02:A0:3C:FF:FE:65:85:5B:22:F2:E3:CA:FB:F4:EA
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/81q7wswCoDz__mWFWyLy48r79Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.129.0-193.148.130.255
193.148.138.0-193.148.145.255
193.148.147.0/24
193.148.150.0/24
193.148.158.0/23
Signature Algorithm: sha256WithRSAEncryption
03:2a:34:b0:14:b1:3b:ab:87:81:4e:a7:83:8e:3b:6b:99:3a:
34:f4:36:b6:90:dc:ec:83:05:d5:c3:06:ff:b9:3a:6c:f5:ee:
1e:ee:49:81:12:c2:5f:ed:48:38:9e:55:04:f1:bf:0a:0b:d1:
e3:30:9a:40:d7:4e:41:d9:b1:03:66:0d:e1:95:f7:ce:61:b2:
46:d8:79:8f:32:12:59:2b:69:25:86:4f:80:0a:6b:04:77:64:
e5:5e:ae:c8:f7:f3:f3:b0:e6:37:4b:9f:a2:35:0b:a4:3f:e3:
22:8a:a3:f0:c0:0e:1c:0e:02:4c:68:1f:49:9e:47:48:5c:f7:
f6:1d:42:a0:05:b8:28:ef:4f:63:eb:6e:6b:e6:a5:a2:04:22:
07:54:96:b8:39:cf:ec:54:7d:e3:17:44:78:58:5d:26:e6:80:
70:72:a1:59:e6:58:dc:32:05:da:ad:9e:f8:d3:37:79:1e:ed:
e4:2e:e5:d3:40:35:e9:40:07:6e:03:1d:0c:f3:16:21:3d:47:
60:41:31:0b:64:f1:ec:80:a5:b1:1b:58:de:ad:24:2d:0a:28:
93:a7:1c:30:bc:2b:e4:63:a3:4e:ab:bb:95:2e:98:b2:e4:a2:
a1:dc:0c:42:41:25:60:ed:0b:90:4c:2c:bc:9a:d3:7f:81:4e:
f8:c3:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:02 2025 by rpki-client