Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/2o6X00LU8JWqm66KYVhVl-OlZzU.roa
File: 2o6X00LU8JWqm66KYVhVl-OlZzU.roa (raw, json)
Hash identifier: y0sfEseutnlXF8pfc4yhAmDAyFxFSvgvOnTAToLRVS4=
Subject key identifier: DA:8E:97:D3:42:D4:F0:95:AA:9B:AE:8A:61:58:55:97:E3:A5:67:35
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 018571832C12D630F97BCAC11E018B92F10A
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/2o6X00LU8JWqm66KYVhVl-OlZzU.roa
Signing time: Mon 02 Jan 2023 08:04:59 +0000
ROA not before: Mon 02 Jan 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 164.133.91.0/24 maxlen: 24
164.133.98.0/24 maxlen: 24
164.133.99.0/24 maxlen: 24
164.133.4.0/24 maxlen: 24
164.133.10.0/24 maxlen: 24
164.133.11.0/24 maxlen: 24
164.133.150.0/24 maxlen: 24
164.133.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:2c:12:d6:30:f9:7b:ca:c1:1e:01:8b:92:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Jan 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da8e97d342d4f095aa9bae8a61585597e3a56735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:47:4b:28:5a:85:16:21:ca:15:2f:3d:92:
7f:49:81:54:0f:47:77:56:33:d0:b4:c5:95:68:a9:
00:c4:90:f4:e0:23:2c:fc:6e:a3:5c:34:a8:15:51:
a9:52:34:cc:15:5e:9c:58:ee:83:a7:dd:61:b5:52:
3b:f1:8b:ef:43:bb:41:5d:eb:01:50:e6:25:be:57:
56:fa:bd:18:cf:7c:c5:73:eb:12:fe:46:a3:8f:ae:
dc:a4:50:3f:5b:bb:3d:43:5e:83:29:99:12:15:8c:
dd:58:7c:39:99:57:d6:04:96:15:f7:77:69:57:1b:
71:a7:5b:15:7d:15:21:2e:ae:c4:a2:f8:8d:c5:d3:
ea:f3:c2:37:81:41:f3:ee:df:52:36:b5:bb:46:dc:
45:b3:81:73:03:37:60:58:27:b7:e9:7d:fe:1b:13:
0e:d8:f1:a5:10:d7:0d:53:0f:4b:e5:63:a4:a1:4e:
38:0d:d0:68:c5:ab:4e:65:88:19:53:f1:97:0a:a6:
0a:3f:eb:e7:46:c5:a8:b7:f9:4b:d8:de:61:14:99:
10:6e:9f:5d:20:ac:12:f0:ae:1c:90:73:d5:48:5b:
8b:c2:d0:a2:a5:82:3e:51:e2:75:c2:fe:1d:f8:a4:
4d:66:96:9c:f6:9d:78:93:08:44:42:19:ff:4b:7f:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:97:D3:42:D4:F0:95:AA:9B:AE:8A:61:58:55:97:E3:A5:67:35
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/2o6X00LU8JWqm66KYVhVl-OlZzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.4.0/24
164.133.10.0/23
164.133.91.0/24
164.133.98.0/23
164.133.150.0/24
164.133.154.0/24
Signature Algorithm: sha256WithRSAEncryption
21:56:6b:5c:48:04:cc:60:15:4b:94:71:dc:09:0d:20:64:70:
10:38:bd:40:41:46:3c:5f:61:c0:87:a3:e1:c3:c2:cc:7f:43:
d9:27:92:70:7b:d6:99:2c:bf:1d:0f:01:fe:a2:e7:da:d2:70:
2f:18:2f:d9:76:88:54:fc:82:83:c8:b1:2e:c7:e3:68:72:30:
89:e2:73:9d:43:f6:16:4d:38:c9:7a:6a:1a:e4:da:4e:7c:e2:
57:2d:7f:4b:4e:01:dc:74:af:6b:4a:d7:96:9b:78:fe:a3:ed:
14:23:46:86:17:d0:d3:b5:f9:b2:2c:12:a8:10:13:f0:d7:8d:
63:e9:bc:16:9f:56:82:b3:ab:64:63:42:b3:06:52:03:4f:92:
9f:38:f0:ad:95:e5:c5:7c:3f:76:fb:81:da:fd:8f:d0:14:8d:
d5:0e:e3:6b:46:b0:0a:60:fa:45:9c:59:c4:81:08:b6:3d:35:
b9:97:0a:20:74:86:c9:73:83:71:20:79:83:83:92:97:d7:bc:
a4:32:34:86:7e:7e:a6:cc:67:02:11:36:ba:cc:70:1d:e2:46:
8f:20:c9:f5:21:53:4d:b6:9a:12:21:c9:3d:ad:e8:23:b2:94:
17:f6:b6:52:cf:d4:5b:0f:03:7a:95:9a:5a:51:11:0c:dd:96:
56:43:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:52 2025 by rpki-client