Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0ARmw1VGGqRUAPx52hOq0kqCAKs.roa
File: 0ARmw1VGGqRUAPx52hOq0kqCAKs.roa (raw, json)
Hash identifier: atKQ1OhKMz2/Qxg/HSywAV1Q1iiCu3YfMZopw3JvNgE=
Subject key identifier: D0:04:66:C3:55:46:1A:A4:54:00:FC:79:DA:13:AA:D2:4A:82:00:AB
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 2295AB
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0ARmw1VGGqRUAPx52hOq0kqCAKs.roa
Signing time: Thu 07 Apr 2022 15:37:42 +0000
ROA not before: Thu 07 Apr 2022 15:37:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 109.70.32.0/24 maxlen: 24
109.70.32.0/22 maxlen: 22
109.70.32.0/21 maxlen: 21
109.70.36.0/22 maxlen: 22
45.6.48.0/22 maxlen: 23
87.238.88.0/21 maxlen: 22
89.37.224.0/23 maxlen: 23
89.37.224.0/24 maxlen: 24
89.37.225.0/24 maxlen: 24
194.116.184.0/24 maxlen: 24
194.116.184.0/23 maxlen: 23
194.116.185.0/24 maxlen: 24
79.139.120.0/22 maxlen: 22
79.139.124.0/22 maxlen: 22
79.139.120.0/21 maxlen: 21
185.2.68.0/22 maxlen: 22
185.2.68.0/24 maxlen: 24
185.2.69.0/24 maxlen: 24
185.2.70.0/23 maxlen: 23
185.78.24.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266539 (0x2295ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Apr 7 15:37:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d00466c355461aa45400fc79da13aad24a8200ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:f9:44:b6:33:d8:fe:93:37:16:98:19:ee:
31:ce:1c:9a:04:e9:77:6f:56:b4:26:e8:76:db:90:
ec:b3:dd:1e:17:7a:7b:59:4b:6d:f0:92:8a:af:67:
6c:59:bd:9c:15:d9:93:5b:aa:3f:5b:f5:23:77:5e:
f4:7b:bc:a5:9e:38:17:3b:60:97:54:21:96:44:79:
28:fd:5a:9e:04:d1:58:bb:60:06:9b:df:c8:e0:28:
3a:66:64:93:f0:f6:60:52:4f:c0:18:33:3a:25:42:
04:f6:d4:90:4f:4e:4d:dc:79:18:33:91:71:7e:74:
e6:fd:7d:96:4a:87:fd:1f:16:12:09:de:99:b2:50:
24:ba:ff:a8:14:a9:37:b9:3a:a5:47:e3:4d:56:95:
19:94:34:f1:ba:21:70:6e:03:86:b3:ed:6b:91:db:
7a:a7:65:84:af:e7:35:25:c1:a1:1f:e4:ac:d9:26:
32:d4:69:57:3e:df:39:ff:3c:14:b1:6b:63:bb:01:
cf:f1:0e:13:63:52:de:6a:45:ae:bf:1f:96:c6:52:
cb:c2:21:4d:c9:87:93:6a:39:d6:64:fc:e9:f0:92:
1b:9c:55:77:9c:bb:52:20:fb:56:56:29:61:5b:5b:
4d:c3:32:e1:75:75:15:53:c7:76:b0:de:a5:60:5f:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:66:C3:55:46:1A:A4:54:00:FC:79:DA:13:AA:D2:4A:82:00:AB
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/0ARmw1VGGqRUAPx52hOq0kqCAKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
79.139.120.0/21
87.238.88.0/21
89.37.224.0/23
109.70.32.0/21
185.2.68.0/22
185.78.24.0/22
194.116.184.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e2:47:42:e2:a5:90:9a:2f:96:7a:41:1b:18:bd:f0:48:3e:
71:1e:16:50:99:6e:a0:dc:cf:ee:6e:b9:be:6b:2c:3a:2b:44:
94:89:78:1b:72:36:a0:8c:cb:38:85:a4:40:b4:9c:1a:bf:37:
88:7b:fe:a8:f3:24:99:51:e6:5b:fa:e3:82:de:69:51:84:31:
b0:36:61:4f:5a:c0:23:3d:f0:61:86:e3:16:55:12:45:8b:41:
44:59:e9:d3:d1:82:63:c0:91:1e:25:17:aa:f1:8e:b9:d1:ad:
5f:42:c0:dd:d9:f2:aa:36:96:fa:28:73:5a:3d:af:4c:7d:e3:
08:5c:ee:93:25:16:85:6a:a2:97:58:76:77:a4:bf:cc:a6:5c:
a1:15:4a:6b:09:75:32:54:25:6a:2c:a9:ca:15:08:ba:e0:e1:
e2:26:49:a4:86:33:30:10:66:4c:65:d0:f0:82:36:83:b1:95:
63:69:98:97:02:f5:eb:2a:6c:77:c9:fc:97:31:b9:25:f5:de:
83:16:13:92:a3:65:ab:23:55:c9:b9:87:a4:f2:03:80:88:a9:
a4:6c:f4:6e:11:81:f4:36:65:0a:21:81:47:24:6a:2d:1f:75:
8e:37:e8:df:4a:2d:08:d0:92:c0:c6:2c:32:f1:45:ff:60:66:
35:2d:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:06 2025 by rpki-client