Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/XXpSpKjNBcHA_hDGbBs64Gy4aTs.roa
File: XXpSpKjNBcHA_hDGbBs64Gy4aTs.roa (raw, json)
Hash identifier: LyrB69Q7qu6eEEKGlLftOhZ7yjuGXXoTtbQPC6JLE/k=
Subject key identifier: 5D:7A:52:A4:A8:CD:05:C1:C0:FE:10:C6:6C:1B:3A:E0:6C:B8:69:3B
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 04CC6D1D
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/XXpSpKjNBcHA_hDGbBs64Gy4aTs.roa
Signing time: Sat 01 Jan 2022 01:59:47 +0000
ROA not before: Sat 01 Jan 2022 01:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 185.231.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80506141 (0x4cc6d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 01:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d7a52a4a8cd05c1c0fe10c66c1b3ae06cb8693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:5c:fb:83:12:f5:82:e0:14:85:95:61:d9:
45:d1:12:aa:f9:2f:5b:e2:25:a7:dd:be:07:38:a2:
68:0c:db:73:52:71:4a:86:a3:2d:85:c6:1c:71:5a:
1a:a2:04:3e:53:a4:18:0f:a8:20:aa:6b:56:05:10:
44:f8:11:b9:a4:97:f6:42:ef:48:f5:1f:de:3f:b8:
a1:26:9e:9b:a6:f1:0f:00:7b:dc:9b:91:87:ca:6c:
0a:73:62:6c:86:2a:79:fb:91:97:18:14:f2:29:14:
61:29:23:83:91:89:ae:f9:cc:89:cc:92:ab:de:71:
c0:ca:0e:7a:98:3f:39:83:48:2c:08:49:48:29:f7:
9c:13:c2:20:77:a0:55:20:41:11:11:86:f3:74:44:
22:5c:dc:74:db:ff:2e:36:af:5b:f6:54:f4:16:21:
d7:8c:ba:c4:40:86:bd:5f:68:98:3c:97:29:70:7e:
62:a4:b0:46:70:09:8e:96:7f:17:5f:a8:5e:5a:2f:
e2:4f:5b:f3:07:bc:72:1f:f6:ee:e6:c3:29:1e:61:
b3:b2:ef:92:8e:c9:3e:39:0f:f3:50:e0:9c:34:88:
5f:7f:fb:3b:f8:f6:91:f7:46:4f:db:3b:95:bd:69:
9d:27:e0:c0:ce:3c:e1:da:f8:dc:ae:c0:02:47:26:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:52:A4:A8:CD:05:C1:C0:FE:10:C6:6C:1B:3A:E0:6C:B8:69:3B
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/XXpSpKjNBcHA_hDGbBs64Gy4aTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.33.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c7:f1:eb:45:b6:ef:3a:a2:c9:09:24:be:35:79:ed:e1:6b:
48:21:90:c8:f6:2c:fd:cb:ad:4f:60:7a:bc:97:d3:35:c2:cc:
d2:ab:22:60:b3:68:20:12:97:d5:67:a8:eb:8e:84:87:21:ff:
14:e0:f1:25:f0:03:60:f7:b0:a8:fd:a0:d9:dd:30:bf:fb:64:
da:40:e9:e4:09:cd:2e:81:9a:fe:81:e8:75:50:33:b9:59:46:
51:3e:0d:ff:64:61:19:b7:05:20:2d:e9:30:f4:3a:ed:ed:8a:
47:2a:74:58:54:c4:b6:bc:05:16:ac:38:5b:d3:e3:22:35:bf:
35:0b:e2:b1:c6:c8:1d:e0:98:a0:aa:25:0f:83:20:b1:3a:23:
97:d3:9c:cb:9e:26:56:c5:9c:47:81:3a:42:60:4e:1b:74:22:
14:f9:9e:11:66:23:c4:db:af:aa:b9:d0:2b:21:8a:b1:58:db:
e5:f9:df:4e:a1:5a:04:7c:d1:8e:ea:a1:1d:7e:b2:b5:2d:9f:
a7:2c:7d:bd:eb:c2:b5:f5:f2:56:76:5c:80:93:d8:3a:0e:e5:
f5:d0:2d:a1:23:fc:47:0f:57:82:03:68:b7:82:48:21:2f:44:
46:7c:6e:e4:bd:05:09:af:e4:9e:f8:a7:2d:0f:50:2c:23:42:
34:f3:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:13:51 2025 by rpki-client