Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/rPivxeMoNoYK0qUI-QIlgYJhjfg.roa
File: rPivxeMoNoYK0qUI-QIlgYJhjfg.roa (raw, json)
Hash identifier: bozAWupoHbRiaY6/afe37Q+s2FLfRW3eW0J9jAEcTT4=
Subject key identifier: AC:F8:AF:C5:E3:28:36:86:0A:D2:A5:08:F9:02:25:81:82:61:8D:F8
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 018AD6FAFB473BEAD70415A6BE01CCE93A14
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/rPivxeMoNoYK0qUI-QIlgYJhjfg.roa
Signing time: Wed 27 Sep 2023 14:11:27 +0000
ROA not before: Wed 27 Sep 2023 14:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.21.0/24 maxlen: 24
85.198.32.0/20 maxlen: 24
86.106.24.0/24 maxlen: 24
91.123.0.0/20 maxlen: 24
190.106.160.0/19 maxlen: 24
206.195.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:fa:fb:47:3b:ea:d7:04:15:a6:be:01:cc:e9:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Sep 27 14:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acf8afc5e32836860ad2a508f902258182618df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:2b:1d:75:85:f4:b8:dc:32:83:fb:72:dd:
2b:0c:9d:59:9e:5f:34:ac:b9:f5:bd:ff:49:40:21:
3e:c6:1e:6f:24:b5:c0:14:4a:c6:ff:45:cf:41:6e:
9c:87:8f:ce:43:6c:10:6a:5e:5b:86:5c:48:b7:30:
3a:b3:5e:21:b1:11:fe:2b:19:60:45:2b:b4:57:38:
93:f8:8a:77:90:2a:e2:af:6d:27:5b:a5:74:dd:81:
d9:b7:e4:7f:f6:b7:a3:a3:b2:23:ee:e9:5c:d0:4c:
33:e6:d7:51:14:f0:22:e4:97:88:bd:e3:68:f0:63:
df:d0:2c:81:b3:e5:fd:16:ba:61:13:88:ce:ac:b6:
54:38:1f:66:7e:ad:05:ff:8d:86:4c:2f:92:e4:45:
e1:f0:f9:4b:dd:58:3a:f6:aa:39:11:ca:bd:16:84:
74:01:e6:00:d5:7f:9b:b0:15:1c:e7:cb:6e:41:0c:
aa:26:e5:05:cb:ed:b4:dc:88:fa:ec:83:ef:56:ac:
ce:1a:d6:3f:21:3b:0c:c2:ba:3f:cf:69:84:01:ba:
00:28:4e:6c:f4:db:bd:45:78:f6:3d:47:bd:ef:46:
8a:82:81:40:c8:a3:cf:ba:8b:35:75:51:4b:2a:3f:
bc:c8:4a:a6:94:67:3b:2f:cd:ab:56:03:a5:3b:8a:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:AF:C5:E3:28:36:86:0A:D2:A5:08:F9:02:25:81:82:61:8D:F8
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/rPivxeMoNoYK0qUI-QIlgYJhjfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.21.0/24
85.198.32.0/20
86.106.24.0/24
91.123.0.0/20
190.106.160.0/19
206.195.128.0/20
Signature Algorithm: sha256WithRSAEncryption
27:c0:6c:db:e3:dd:d7:30:13:b5:03:ee:29:6d:85:ca:1c:cb:
cc:e4:15:26:8a:81:22:54:f5:e4:ab:0d:d0:d3:be:6c:b4:0e:
20:88:d9:df:66:3f:a3:ad:a8:2c:e4:3e:d2:25:80:21:c5:d9:
d3:a1:91:85:d1:67:7a:02:57:ff:ad:bb:66:58:c6:c0:e2:ee:
6b:ca:b6:cd:8f:99:52:fd:a1:df:2f:09:bd:83:99:fe:ee:2e:
82:2b:88:c0:66:96:6b:09:e6:9e:d7:1b:4b:c6:d4:75:f6:d3:
32:a1:4d:05:eb:c1:9c:13:da:29:92:02:10:e4:4e:97:a8:15:
cd:14:4b:f2:63:22:a8:11:c7:bd:57:b4:13:16:6b:cf:14:78:
d4:fd:ee:fb:9c:03:a3:ec:58:e7:02:0a:90:4b:5d:96:ba:ca:
74:e5:1f:70:8f:a7:66:99:62:c8:cd:ed:fe:fc:e1:3b:55:20:
89:90:c1:1f:19:8a:32:96:74:c0:0a:9b:22:8c:77:56:5f:8e:
36:a5:fa:63:13:77:41:56:4b:ac:bd:b2:de:cb:a3:f7:12:64:
b5:e6:78:66:b3:fa:52:e4:af:7a:ce:98:30:dd:52:c9:01:6c:
32:2a:d2:f5:01:5c:5e:fb:0a:9f:ac:80:8a:d9:38:e0:f4:55:
0d:25:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:14 2025 by rpki-client