Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1QaIWFazxfNNtXxg8c9VkrrWTUo.roa
File: 1QaIWFazxfNNtXxg8c9VkrrWTUo.roa (raw, json)
Hash identifier: DdxWF/oqIdHuy3pgoWLbTF+2u0XpA7lRiJK6LmrEo7c=
Subject key identifier: D5:06:88:58:56:B3:C5:F3:4D:B5:7C:60:F1:CF:55:92:BA:D6:4D:4A
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018C1563F54560C17E5F553FE2B32D9DEFE3
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1QaIWFazxfNNtXxg8c9VkrrWTUo.roa
Signing time: Tue 28 Nov 2023 10:05:21 +0000
ROA not before: Tue 28 Nov 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 194.53.70.0/24 maxlen: 32
193.228.58.0/23 maxlen: 32
92.118.208.0/22 maxlen: 32
194.88.143.0/24 maxlen: 32
45.66.176.0/22 maxlen: 32
45.154.192.0/22 maxlen: 32
193.254.27.0/24 maxlen: 32
193.254.28.0/24 maxlen: 32
139.28.120.0/22 maxlen: 32
45.82.96.0/22 maxlen: 32
185.36.254.0/24 maxlen: 32
185.223.248.0/22 maxlen: 32
82.115.213.0/24 maxlen: 32
185.188.63.0/24 maxlen: 32
63.141.36.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
194.124.240.0/24 maxlen: 32
194.124.239.0/24 maxlen: 32
194.124.247.0/24 maxlen: 32
194.124.248.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
45.84.228.0/22 maxlen: 32
45.10.236.0/22 maxlen: 32
194.0.133.0/24 maxlen: 32
194.0.136.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:63:f5:45:60:c1:7e:5f:55:3f:e2:b3:2d:9d:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Nov 28 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d506885856b3c5f34db57c60f1cf5592bad64d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:c6:cd:93:e6:49:cb:02:5a:f9:aa:2c:ed:
0c:0f:56:e1:f7:97:4d:6a:f3:63:9e:3f:1f:39:93:
ab:35:6f:a5:d8:29:9a:a9:31:86:6d:ff:22:bd:1c:
6a:16:0f:9d:44:b9:f0:fd:78:8d:74:a7:2e:51:8a:
cf:1c:4d:1a:81:6e:42:6b:bd:3b:32:43:09:12:cc:
02:ca:14:a3:9d:73:83:da:b3:4b:20:bc:4a:b5:96:
39:e9:c4:dd:a4:e0:fb:b8:fc:1b:88:20:32:2c:a4:
49:36:cf:67:f6:49:85:4a:38:71:5d:a0:e7:fc:14:
fa:00:49:48:7c:ef:6d:bc:d6:bd:51:05:39:46:e2:
11:91:2e:4c:7a:62:39:16:b1:0d:7f:b8:4e:3b:ca:
66:fe:0b:e8:d7:d1:01:fe:05:4c:11:58:79:0f:3c:
bd:07:fb:a4:44:7e:7b:59:91:a2:df:14:d7:9f:97:
48:16:24:f8:2d:01:ee:f2:45:6f:ba:f9:d4:1c:7e:
c2:d2:31:f8:91:84:20:e2:fa:fd:de:93:db:28:40:
21:5f:5a:d6:4c:fc:1c:a8:1b:db:7f:a0:46:e8:d2:
ec:60:de:87:4a:98:77:e9:80:2c:c1:13:8c:4d:63:
13:ed:e2:98:af:7c:7b:cf:3b:15:78:a8:0c:d0:c3:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:88:58:56:B3:C5:F3:4D:B5:7C:60:F1:CF:55:92:BA:D6:4D:4A
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1QaIWFazxfNNtXxg8c9VkrrWTUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.236.0/22
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
45.154.192.0/22
45.156.224.0/22
63.141.36.0/23
82.115.213.0/24
92.118.208.0/22
139.28.120.0/22
185.36.254.0/24
185.188.63.0/24
185.223.248.0/22
188.119.154.0/24
193.228.58.0/23
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
194.53.70.0/24
194.88.143.0/24
194.124.239.0-194.124.240.255
194.124.247.0-194.124.248.255
Signature Algorithm: sha256WithRSAEncryption
87:3f:a1:e7:d3:a1:f4:aa:aa:fe:b6:71:7c:8d:dd:0a:d9:ac:
28:b3:5f:bd:f5:1a:94:d7:8d:e0:d4:70:35:7a:e7:27:f4:ea:
10:2a:dd:5b:2f:02:89:b4:15:5d:de:5c:94:84:7f:a5:13:9e:
95:e3:68:61:d4:0b:fb:92:0e:b4:1f:a1:db:b4:ec:d4:03:4a:
57:98:30:e2:7d:a1:ac:be:07:cb:73:e6:9c:a3:c9:1a:cc:f5:
55:3f:0a:34:41:c4:07:2f:b7:dc:8f:94:34:89:ac:c3:5b:37:
f1:8e:be:56:79:22:b0:f6:db:17:56:9b:e1:6a:86:8f:1c:4a:
60:5c:3d:76:3a:74:e3:6f:6c:0e:f3:56:d1:91:97:90:59:67:
6e:88:c3:6f:f1:28:11:07:b4:2f:18:64:77:0e:9b:c5:eb:8a:
5c:ce:d8:0c:3b:0b:e4:88:c5:33:13:58:eb:a3:0e:c6:9c:8f:
73:35:73:34:45:d5:65:14:2e:92:2d:72:84:e9:de:c1:78:f9:
89:0b:3f:9f:f7:07:7c:ce:4d:ac:25:c3:86:61:c4:b0:fa:fa:
7b:70:be:da:77:eb:0c:cd:f2:cf:15:18:d5:99:15:a8:fa:5d:
be:e4:54:8a:f5:f1:95:40:4e:99:d0:40:f2:07:ba:01:4c:13:
1b:97:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:17 2025 by rpki-client