Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/X8otchavR0YTR5KBI45LX5aUbys.roa
File: X8otchavR0YTR5KBI45LX5aUbys.roa (raw, json)
Hash identifier: uEYgAPzomri/aUV7DXItwMgQ9izHRwAAgypYndiE4Zo=
Subject key identifier: 5F:CA:2D:72:16:AF:47:46:13:47:92:81:23:8E:4B:5F:96:94:6F:2B
Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial: 0185728C783C8129A08D697795AB4BC6AA2E
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/X8otchavR0YTR5KBI45LX5aUbys.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 513
IP address blocks: 128.141.0.0/16 maxlen: 16
192.65.183.0/24 maxlen: 24
192.65.184.0/21 maxlen: 21
192.65.192.0/22 maxlen: 22
192.65.196.0/23 maxlen: 23
192.91.236.0/22 maxlen: 22
192.91.240.0/22 maxlen: 22
192.91.246.0/24 maxlen: 24
192.91.244.0/23 maxlen: 23
192.16.164.0/23 maxlen: 23
192.16.160.0/22 maxlen: 22
192.16.166.0/24 maxlen: 24
194.12.128.0/18 maxlen: 18
137.138.0.0/16 maxlen: 16
185.249.56.0/22 maxlen: 22
188.184.0.0/16 maxlen: 16
128.142.0.0/16 maxlen: 16
192.16.155.0/24 maxlen: 24
192.16.156.0/22 maxlen: 22
188.185.0.0/16 maxlen: 16
2001:1459::/32 maxlen: 32
2001:1458::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:78:3c:81:29:a0:8d:69:77:95:ab:4b:c6:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fca2d7216af474613479281238e4b5f96946f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:fb:e2:94:7d:36:13:7e:71:b4:8d:30:f9:
81:52:0b:cb:51:0a:91:0d:da:8a:4c:7a:ad:9f:c6:
b2:f7:e3:3c:17:2c:ec:49:87:1f:2e:ed:fe:84:f9:
74:55:bc:b7:4d:59:49:f9:c6:12:e8:84:00:ed:e3:
d1:16:1d:f6:6b:1d:8c:4a:96:3e:60:1c:ef:bf:4f:
d9:0b:31:2b:73:f4:47:aa:c9:7f:04:5b:26:0f:1f:
9a:8a:0f:17:64:ca:a9:c0:cd:b5:26:03:79:39:8d:
d2:9a:b0:b9:61:21:b1:1e:e9:0b:9b:cd:e2:5c:fe:
d2:c9:85:82:e2:a5:b8:b2:55:44:c3:3f:a4:4a:b1:
49:8a:70:fc:5a:55:98:35:2d:d4:87:45:13:11:03:
ba:9b:13:30:88:55:d8:8e:b0:94:5c:51:0b:a4:78:
32:ed:f3:5a:0c:0d:9e:47:89:81:4f:41:a8:42:bf:
28:4c:90:30:03:70:13:e0:f0:55:26:bd:7f:01:85:
cb:0a:ba:30:c6:6f:60:c2:cb:29:00:43:6b:19:84:
d4:8f:9a:b9:57:4e:25:fe:6b:5a:b6:c1:e7:d6:e9:
3f:da:4a:08:d6:42:5d:99:0a:36:90:46:50:62:22:
94:cc:ef:60:32:47:c7:cd:2b:df:84:66:99:8f:34:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:2D:72:16:AF:47:46:13:47:92:81:23:8E:4B:5F:96:94:6F:2B
X509v3 Authority Key Identifier:
keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/X8otchavR0YTR5KBI45LX5aUbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.141.0.0-128.142.255.255
137.138.0.0/16
185.249.56.0/22
188.184.0.0/15
192.16.155.0-192.16.166.255
192.65.183.0-192.65.197.255
192.91.236.0-192.91.246.255
194.12.128.0/18
IPv6:
2001:1458::/31
Signature Algorithm: sha256WithRSAEncryption
39:00:28:13:33:b2:c4:96:d4:11:a3:c3:ec:e3:70:a2:3a:5d:
e4:b0:f4:1a:80:95:50:25:de:39:ae:0f:37:e3:32:3d:bc:78:
70:70:c1:25:ab:c7:b8:1f:e1:ba:c4:aa:ae:d6:a6:63:4f:28:
0b:77:f0:6b:ae:dc:af:81:fc:23:0b:52:fb:11:68:7d:62:b5:
2a:63:81:6f:5f:89:c6:cc:33:bb:f4:57:49:4f:37:91:aa:4d:
30:4a:55:59:5b:3d:92:bc:24:09:7a:20:9c:32:5a:f5:e5:fa:
78:5c:44:5e:7e:37:7c:bd:ff:c5:dd:0f:65:90:5a:65:47:24:
fe:92:68:f7:c3:3a:d6:b3:29:7c:5a:67:97:c4:10:11:3b:98:
0e:32:c5:80:ed:7a:88:50:36:e6:95:78:a6:3b:b5:8d:7e:18:
65:22:04:ed:fa:c4:55:c1:9d:67:d5:c7:c1:99:6c:b1:f2:10:
1a:61:e2:e2:19:b6:dd:cb:dd:47:ec:e5:0f:d0:d5:88:5d:a7:
3e:ed:bc:3a:e2:a1:ee:e9:ca:58:c2:5a:87:6c:e5:d7:19:74:
2b:16:e8:93:4f:f2:33:df:ca:94:ae:20:32:94:32:e5:19:83:
c4:41:7a:d9:59:f3:94:9d:04:ab:cc:fb:b2:b5:d8:74:ac:44:
c4:25:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:49 2025 by rpki-client