Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/l2yr8Ijcm8cDav9JMbLPUXPE70U.roa
File: l2yr8Ijcm8cDav9JMbLPUXPE70U.roa (raw, json)
Hash identifier: /EljzL7LL0yph+DQN57N+KaOxxwzjHz614ks6XIg+S4=
Subject key identifier: 97:6C:AB:F0:88:DC:9B:C7:03:6A:FF:49:31:B2:CF:51:73:C4:EF:45
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 018C8BD6C86235A4B70710DE7BD599DE0749
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/l2yr8Ijcm8cDav9JMbLPUXPE70U.roa
Signing time: Thu 21 Dec 2023 10:05:58 +0000
ROA not before: Thu 21 Dec 2023 10:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41765
IP address blocks: 185.84.112.0/22 maxlen: 24
185.233.48.10/32 maxlen: 32
193.33.46.0/23 maxlen: 23
31.172.164.0/22 maxlen: 22
185.4.63.0/24 maxlen: 24
193.57.96.0/24 maxlen: 24
185.233.48.0/24 maxlen: 24
185.233.48.0/22 maxlen: 22
185.233.50.0/23 maxlen: 23
188.65.168.0/21 maxlen: 21
45.8.233.0/24 maxlen: 24
45.8.234.0/24 maxlen: 24
45.8.235.0/24 maxlen: 24
193.37.150.0/24 maxlen: 24
2a02:2288::/29 maxlen: 29
2a02:2288::/32 maxlen: 32
2a0c:d500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:d6:c8:62:35:a4:b7:07:10:de:7b:d5:99:de:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Dec 21 10:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=976cabf088dc9bc7036aff4931b2cf5173c4ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:46:f2:80:ab:e9:f0:b0:75:74:38:0f:02:
17:f5:1c:75:b3:78:2e:5e:6e:b7:34:94:bd:a7:55:
72:78:c6:5a:2f:89:c9:91:bd:e7:5c:fd:51:05:75:
15:d4:24:ce:1a:0e:bf:41:27:31:98:c0:8f:03:3c:
21:88:5c:c0:e6:4b:19:ce:c7:4b:79:fe:ea:84:8e:
e9:52:9c:55:40:d3:fb:c3:56:45:ed:8b:15:73:f3:
47:52:28:58:5b:c9:69:cc:bf:9e:96:5c:81:c1:01:
77:7b:0b:61:90:4d:d8:f8:66:6e:e8:df:6f:96:2e:
1e:75:16:d5:a0:9c:d4:30:85:d3:76:76:ac:6d:4d:
19:be:7e:66:8a:0f:16:ab:a6:b4:93:64:e1:5e:88:
03:a2:4d:9e:d6:76:11:d3:3e:06:f6:99:9c:f2:a1:
c5:cc:ad:4e:0e:eb:fd:c6:97:50:1f:02:66:d1:d4:
f2:65:06:02:2d:ef:cb:c1:6b:ba:d2:99:54:1b:0a:
98:1a:a2:f4:29:78:af:f8:4b:82:cd:ec:72:bb:24:
bd:61:7c:43:ca:2f:1c:ec:00:89:40:57:86:3e:41:
4e:df:eb:93:97:d9:3c:ab:28:1a:c3:64:93:09:fa:
99:81:54:61:3f:9c:33:12:37:e4:e2:61:97:7b:e9:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:AB:F0:88:DC:9B:C7:03:6A:FF:49:31:B2:CF:51:73:C4:EF:45
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/l2yr8Ijcm8cDav9JMbLPUXPE70U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.164.0/22
45.8.233.0-45.8.235.255
185.4.63.0/24
185.84.112.0/22
185.233.48.0/22
188.65.168.0/21
193.33.46.0/23
193.37.150.0/24
193.57.96.0/24
IPv6:
2a02:2288::/29
2a0c:d500::/29
Signature Algorithm: sha256WithRSAEncryption
52:9a:12:29:c0:21:61:bd:27:84:3f:03:d5:1b:14:56:b2:27:
5d:28:c1:5f:5a:87:66:d6:7b:7e:58:68:b5:b8:32:d0:ed:6b:
b0:fa:95:e3:97:65:99:4e:52:48:48:a7:98:28:d0:25:bc:c0:
78:d2:44:69:28:b1:9a:3b:7e:ab:c2:c0:19:38:f5:05:c4:d9:
91:5a:e6:8a:1a:79:89:46:9f:65:dd:0c:bf:85:ab:f9:a5:d6:
6f:87:3d:c6:10:d4:2b:cb:0f:b8:9a:89:1b:1f:78:d7:05:91:
e5:8f:04:6a:8b:df:73:c9:d2:e0:e6:ce:8a:88:10:6f:92:37:
80:5c:df:e0:36:db:14:70:a1:ff:b4:32:3f:cb:d5:a6:ad:e9:
fa:dc:58:02:ce:33:ef:da:75:ac:86:bf:54:e4:26:c6:0f:17:
cc:78:87:65:6f:a5:56:dd:2f:7f:04:53:4a:82:e8:79:30:0d:
25:17:83:b5:ed:88:6d:bc:9a:e9:a3:b3:74:59:3d:d9:15:da:
d8:7c:a5:e5:a2:c3:53:68:a8:3f:98:34:d5:d8:5e:03:3d:57:
e7:33:9b:56:eb:d2:eb:5d:a4:52:de:69:52:79:ca:a0:6f:38:
11:7e:57:d9:a4:26:bf:46:90:05:4d:1b:cc:ec:ad:a2:3e:db:
56:59:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:00 2025 by rpki-client