Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/IkhCFrsuI5y0XvRX0rp49obWGbQ.roa
File: IkhCFrsuI5y0XvRX0rp49obWGbQ.roa (raw, json)
Hash identifier: VW/hCbouI6S/Lt2L3ZnpNJGxDIIvHT76WOq4pYrJbbs=
Subject key identifier: 22:48:42:16:BB:2E:23:9C:B4:5E:F4:57:D2:BA:78:F6:86:D6:19:B4
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 01856DA656FE8C7555E6CCE621B0055E81B7
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/IkhCFrsuI5y0XvRX0rp49obWGbQ.roa
Signing time: Sun 01 Jan 2023 14:04:55 +0000
ROA not before: Sun 01 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12417
IP address blocks: 185.220.24.0/22 maxlen: 24
185.220.24.0/24 maxlen: 24
185.220.27.0/24 maxlen: 24
185.220.25.0/24 maxlen: 24
91.234.46.0/24 maxlen: 24
178.218.163.0/24 maxlen: 24
178.218.160.0/20 maxlen: 24
178.218.170.0/24 maxlen: 24
178.218.171.0/24 maxlen: 24
178.218.172.0/24 maxlen: 24
178.218.173.0/24 maxlen: 24
178.218.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:56:fe:8c:75:55:e6:cc:e6:21:b0:05:5e:81:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22484216bb2e239cb45ef457d2ba78f686d619b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:c9:55:4e:88:27:d4:97:c8:96:e3:bd:7e:
d6:99:e9:fe:60:fb:89:64:b9:63:88:10:73:c3:08:
13:bf:b6:05:7f:56:23:70:c5:b9:26:2d:70:3d:f5:
3b:68:69:45:f5:b7:47:ff:1c:67:bf:3e:27:95:80:
e2:02:36:f8:06:27:ba:fd:61:5d:8c:56:3a:da:51:
e5:69:79:30:f8:d6:22:7f:f1:b7:57:07:7b:a8:8d:
8b:2f:35:c0:ff:0e:8b:ca:56:d8:56:35:d8:e8:07:
2b:1a:fe:90:db:ba:b6:8c:04:b4:f9:0a:a7:94:54:
cb:12:d4:d3:80:13:3e:9c:f9:ba:74:31:db:3b:f8:
3b:99:43:f7:5d:96:77:77:a1:3d:64:e7:5d:38:3a:
77:06:b4:d1:58:3b:9c:95:68:8c:64:3a:fb:90:30:
0e:79:67:64:8d:9a:39:b6:54:75:c7:5f:52:e7:c0:
cd:76:80:00:da:06:9c:ff:28:9f:d5:45:55:6d:99:
85:d5:35:aa:0b:d7:cf:52:34:a9:64:b3:fe:b0:66:
9d:e0:e2:b9:93:88:74:a0:79:c0:49:c8:5c:a6:77:
78:df:46:8f:4a:3e:f2:93:ca:8b:62:8e:0e:04:16:
ef:da:8f:4d:88:30:72:81:be:ce:6f:f8:28:8f:0f:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:48:42:16:BB:2E:23:9C:B4:5E:F4:57:D2:BA:78:F6:86:D6:19:B4
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/IkhCFrsuI5y0XvRX0rp49obWGbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.46.0/24
178.218.160.0/20
185.220.24.0/22
Signature Algorithm: sha256WithRSAEncryption
26:6d:e2:53:17:72:7d:85:c5:03:da:3d:87:70:d4:80:3d:cb:
50:37:ee:80:6b:ab:b7:43:19:35:d4:10:08:20:74:ba:b3:3c:
b3:26:e7:6c:df:b7:06:b3:61:85:21:dc:f4:d1:86:5c:0e:a6:
d9:bd:a5:f9:bb:a9:f8:10:d3:5b:81:8b:f4:e2:5a:ec:ef:1e:
f4:01:b8:33:96:eb:93:9d:1b:7e:6c:6c:59:60:60:06:21:37:
9d:31:d6:db:b1:3a:41:ec:eb:a2:8d:1f:87:ef:ac:09:13:e2:
a3:6e:21:96:86:3a:a5:86:c0:ab:de:46:e8:9d:77:ad:1e:f6:
8b:e6:b0:a0:73:a3:40:fd:ca:ee:e5:db:26:3a:e4:a3:39:90:
e1:76:bf:5d:c2:e7:d4:ba:af:11:91:69:aa:85:39:60:f9:c3:
9d:ea:42:b5:1c:1b:b1:50:ba:40:b7:2f:b5:00:4c:e6:26:e2:
a1:09:f8:d8:df:dc:42:98:18:77:ae:2a:4e:32:2d:72:cb:94:
a8:31:0f:cf:1f:6d:c9:45:ee:53:4a:8e:20:64:ba:73:94:28:
c9:27:31:04:25:82:3e:58:1e:fe:00:d4:ad:ad:ca:1d:c5:3f:
3f:1d:c0:b1:dd:a4:53:99:84:ee:41:30:92:53:b2:32:b4:ae:
e6:5c:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:06 2025 by rpki-client