Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/2Otk50vkna1OdQOrlKcC_jJ5Brg.roa
File: 2Otk50vkna1OdQOrlKcC_jJ5Brg.roa (raw, json)
Hash identifier: 8q6eulAFOpZZsuZoQ3VFZMAGO1Y9oH5soNAuoVJG+zI=
Subject key identifier: D8:EB:64:E7:4B:E4:9D:AD:4E:75:03:AB:94:A7:02:FE:32:79:06:B8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 05C57857
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/2Otk50vkna1OdQOrlKcC_jJ5Brg.roa
Signing time: Sat 01 Jan 2022 15:07:07 +0000
ROA not before: Sat 01 Jan 2022 15:07:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41765
IP address blocks: 185.233.48.0/24 maxlen: 24
185.233.50.0/23 maxlen: 23
185.233.48.0/22 maxlen: 22
193.33.46.0/23 maxlen: 23
188.65.168.0/21 maxlen: 21
193.37.150.0/24 maxlen: 24
2a02:2288::/29 maxlen: 29
2a02:2288::/32 maxlen: 32
2a0c:d500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96827479 (0x5c57857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jan 1 15:07:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8eb64e74be49dad4e7503ab94a702fe327906b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:a7:55:73:21:e0:6e:23:18:a0:86:19:10:
02:55:20:de:11:0c:11:82:77:17:24:58:f7:70:a2:
3a:02:36:30:79:65:bd:6a:b9:fe:c6:c2:9f:81:0f:
1b:df:96:2d:73:86:fe:99:5a:77:e1:d0:c4:d5:8c:
d7:65:25:d0:54:38:4e:fc:50:c6:d8:65:95:19:6d:
44:5a:65:fd:37:30:3c:2e:a7:15:67:6d:89:27:55:
0e:98:f8:96:5c:4b:ef:7e:af:27:a7:a6:f2:a0:e2:
ae:60:ba:48:f2:8a:29:87:a7:26:bc:a9:3c:15:48:
a6:27:e8:29:96:13:0c:49:d8:2d:c9:3c:dd:e8:16:
db:96:61:d9:b0:74:23:94:c2:80:d9:ff:42:02:59:
af:f4:b7:42:41:28:80:6b:cc:29:12:60:a5:9e:52:
c4:a4:c0:7a:8b:56:dc:4e:9f:fa:d2:a4:8e:61:45:
c0:11:d1:ed:2e:04:42:7b:d8:00:e4:86:9a:12:e8:
4f:61:9e:e5:e1:80:37:90:48:32:3f:f0:38:8d:d7:
51:f5:58:87:9e:d1:6c:ad:75:a6:c0:8d:66:ce:bf:
37:0a:a7:31:09:e5:b4:cc:8f:34:6b:fa:e8:68:97:
ba:f8:1a:c9:4b:e1:b3:94:93:21:b7:16:1f:b0:fc:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:64:E7:4B:E4:9D:AD:4E:75:03:AB:94:A7:02:FE:32:79:06:B8
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/2Otk50vkna1OdQOrlKcC_jJ5Brg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.48.0/22
188.65.168.0/21
193.33.46.0/23
193.37.150.0/24
IPv6:
2a02:2288::/29
2a0c:d500::/29
Signature Algorithm: sha256WithRSAEncryption
8b:8a:38:bf:08:e0:18:32:f2:b0:8a:e6:ef:c0:21:da:2b:de:
39:52:9e:1a:9b:e8:c2:22:82:9d:42:37:db:08:75:0c:dd:5c:
72:ef:f7:fa:2e:68:74:dd:cd:67:67:37:e8:2e:ac:69:94:49:
0a:f5:72:14:35:84:e5:16:91:4e:d2:22:09:2b:7e:4d:48:53:
da:94:e0:f4:1e:e1:9b:35:8e:fb:7f:72:72:d3:9c:bc:cc:26:
b8:d9:c0:e0:83:cb:3b:71:23:6c:a6:22:1b:57:a5:5d:34:9f:
ea:f7:b9:42:ee:07:6b:cd:a7:5f:a8:70:1d:02:21:a2:de:f0:
f6:87:8a:a4:36:c2:86:14:b1:2a:06:77:ae:48:00:f8:c0:d6:
04:35:16:6c:93:60:ee:c7:b8:ec:40:c9:6f:50:2f:2a:5e:fc:
9e:6c:eb:74:cf:c9:6e:93:dc:d3:03:98:00:bf:5f:e2:6f:ac:
20:c2:f7:a9:ed:4c:47:fd:58:89:ab:7c:56:71:03:40:c6:f4:
a2:51:ff:75:62:32:b1:41:6f:fc:81:ab:49:53:33:eb:74:41:
89:55:2d:fb:3f:58:76:5a:26:65:3a:a7:8e:47:16:51:13:70:
92:8c:92:36:5e:df:45:e5:cb:3a:5e:74:6e:2f:00:49:95:7e:
12:8b:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:52 2025 by rpki-client