Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1d3pQKjflUDAPXUZRagsTCTqIlE.roa
File: 1d3pQKjflUDAPXUZRagsTCTqIlE.roa (raw, json)
Hash identifier: Jg3V9Di0htCBrGY0D7DO5YlN2562xg01HWUgXYjOFrE=
Subject key identifier: D5:DD:E9:40:A8:DF:95:40:C0:3D:75:19:45:A8:2C:4C:24:EA:22:51
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188205F8052203CDC53DFAB859FF0DAB3C4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1d3pQKjflUDAPXUZRagsTCTqIlE.roa
Signing time: Mon 15 May 2023 17:05:09 +0000
ROA not before: Mon 15 May 2023 17:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.230.53.0/24 maxlen: 24
45.147.226.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.131.135.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:5f:80:52:20:3c:dc:53:df:ab:85:9f:f0:da:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 15 17:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5dde940a8df9540c03d751945a82c4c24ea2251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:59:ad:c3:1d:de:f0:e1:93:8b:fd:db:6c:
46:07:81:cd:de:53:95:f2:a9:22:3f:93:28:dd:b6:
d4:24:b2:69:70:ce:14:3b:01:65:ea:86:e2:97:20:
0a:a5:cb:29:e5:ac:84:a9:c1:3a:15:3a:b3:80:98:
c8:d8:15:b4:1c:aa:1f:45:cf:73:9c:50:dd:47:84:
86:05:68:47:48:6c:8e:1f:a2:18:08:40:66:f4:36:
fa:ff:f3:89:6e:2b:66:cf:5d:55:16:92:75:dd:f0:
b3:34:2b:f8:7c:13:b8:48:f0:da:01:da:17:3e:40:
2e:b1:56:88:12:bc:08:17:1b:2c:ea:ec:d6:9c:03:
a7:cd:6e:92:ce:3b:d3:4b:81:03:88:22:41:6a:c9:
76:e7:fd:45:80:f8:8b:99:8b:54:ac:c4:d6:f5:f6:
00:96:54:f3:63:de:ae:39:c4:1b:3b:a7:fb:4f:16:
6a:2b:23:ab:7b:76:9a:48:63:d8:38:88:69:f5:4d:
5a:b7:70:b2:0b:f4:bc:e6:e2:49:be:67:90:f5:db:
df:e4:5c:8c:18:77:0d:b5:0f:08:42:8f:c5:69:8c:
4e:f3:0d:91:44:44:94:48:c0:48:f3:35:4b:14:41:
c1:1d:a8:43:40:f5:81:17:c4:8e:cb:0c:d8:25:62:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:E9:40:A8:DF:95:40:C0:3D:75:19:45:A8:2C:4C:24:EA:22:51
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1d3pQKjflUDAPXUZRagsTCTqIlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.131.134.0/23
45.147.224.0/24
45.147.226.0/24
185.225.0.0/23
185.230.53.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
59:83:bc:77:aa:49:b3:74:66:a8:74:87:f2:2e:f2:ea:cb:10:
87:43:7d:6a:67:bc:4c:39:1c:0e:38:87:1d:cb:8a:06:61:59:
50:4a:ed:d5:c8:65:9f:be:3f:12:a7:f1:f2:31:ec:c2:46:b0:
c4:f3:de:95:47:ff:38:99:d3:75:03:81:b7:04:c1:07:1d:87:
26:91:49:72:ad:1c:31:5c:e4:a6:a6:6d:ed:6c:ba:be:93:12:
2f:0e:49:25:35:32:56:a2:9b:aa:aa:41:57:14:75:11:bd:d6:
c1:e1:da:0b:19:9d:37:ca:72:4c:07:fa:ae:9b:92:58:c0:45:
ad:c9:ef:cb:de:99:ca:6d:2e:87:48:24:27:f2:70:63:92:29:
50:c3:c9:f1:01:e9:79:ae:1c:85:a7:77:f9:e4:b5:46:e7:bf:
b3:e5:4b:18:ef:28:0a:d8:43:2e:eb:ff:91:eb:0c:87:c9:a2:
8d:ef:11:de:f4:9b:16:1e:bb:bc:be:0b:02:a9:d5:6f:9d:f8:
ed:f2:24:07:ad:16:66:c1:b1:d9:b5:65:1f:86:c3:9c:c1:82:
ac:43:97:bd:c6:1c:6f:ef:a6:91:07:8d:fe:e7:d6:85:37:e9:
9b:34:3d:9f:fa:35:a3:62:14:78:4b:0e:bb:9c:e6:f4:b8:fd:
db:61:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:27 2025 by rpki-client