Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/044qDNCs_j0Y0yOIBqr1_tMeaf8.roa
File: 044qDNCs_j0Y0yOIBqr1_tMeaf8.roa (raw, json)
Hash identifier: gkyGkREpr/xhALYKhGgvxR1TMDTT0IQ4U09B5+8wakI=
Subject key identifier: D3:8E:2A:0C:D0:AC:FE:3D:18:D3:23:88:06:AA:F5:FE:D3:1E:69:FF
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018264AE0C370649FA068A6558C3CE3ACD42
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/044qDNCs_j0Y0yOIBqr1_tMeaf8.roa
Signing time: Wed 03 Aug 2022 17:08:24 +0000
ROA not before: Wed 03 Aug 2022 17:08:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 85.239.151.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:ae:0c:37:06:49:fa:06:8a:65:58:c3:ce:3a:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 3 17:08:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d38e2a0cd0acfe3d18d3238806aaf5fed31e69ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:99:57:ac:42:f3:cd:ff:a6:2e:09:b4:48:
1d:de:9c:ea:f7:8e:a4:d1:20:b7:bb:49:da:76:de:
73:c3:02:90:92:0e:c4:5e:3d:c5:7a:07:d8:81:e6:
30:89:51:36:6e:98:99:3d:e7:d0:79:34:21:08:07:
47:3f:5c:1a:37:d1:3d:79:87:97:ed:1a:62:3f:51:
a7:64:86:70:64:01:c3:f6:2e:78:bd:ee:c3:e7:32:
af:45:ba:49:9a:2b:d5:a1:2e:7f:5b:55:e4:22:ca:
32:0d:cf:7f:f7:73:ab:5b:44:28:5e:de:33:ca:2a:
38:bc:2c:ed:dd:7e:3e:b2:eb:ad:e4:f6:88:6c:a7:
20:f9:bc:bd:2e:ca:31:bf:73:8c:5c:13:80:32:be:
b8:3d:c5:1e:38:ed:31:d1:a6:c2:d0:1d:dd:03:cc:
2e:99:80:52:be:0b:8c:6a:4e:9e:d3:c7:7d:68:04:
61:ba:0f:f0:1a:3d:20:95:27:51:f9:08:62:cd:a3:
c9:b0:44:e6:f3:ef:a5:0b:04:a2:78:c8:c9:d2:b6:
09:04:60:d5:e1:a2:5a:3c:9b:06:d5:0c:1d:20:da:
e9:1b:9c:3d:88:64:17:b9:f5:5b:1f:e2:60:39:cb:
16:e6:af:1a:2b:d7:a6:24:27:8a:b4:11:a5:e2:08:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:2A:0C:D0:AC:FE:3D:18:D3:23:88:06:AA:F5:FE:D3:1E:69:FF
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/044qDNCs_j0Y0yOIBqr1_tMeaf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/22
185.95.156.0/22
Signature Algorithm: sha256WithRSAEncryption
81:8a:0e:4f:7e:27:4d:7f:2c:cb:07:7a:e0:08:1e:07:53:b2:
14:eb:97:be:60:27:77:5e:0c:e9:4f:b5:36:6c:c3:3f:e9:8c:
17:a7:d0:2e:50:1b:84:4b:93:ee:95:3d:f0:5c:c1:ae:d7:a5:
d8:0e:d0:f6:d1:b0:ff:ae:ac:ab:34:da:82:f4:e7:78:52:b2:
43:2e:c9:75:37:25:41:ce:d4:95:49:19:44:b5:94:e1:35:91:
d8:a7:b3:a0:7a:9b:6f:29:93:2b:e0:af:1f:c2:92:48:ca:ac:
96:9c:a0:fa:60:89:71:77:64:67:f9:61:e2:49:54:6d:b3:df:
cf:65:de:21:1e:82:b2:da:d1:22:26:e9:8f:ac:29:c7:06:78:
6d:df:cc:20:79:4d:44:ae:7b:95:37:4f:7f:b2:19:59:7a:d3:
71:ce:3a:8a:8f:77:fd:63:85:b0:4e:13:11:83:97:02:39:b0:
1e:79:9b:bb:15:2b:6c:10:29:3a:9e:42:bd:f0:b1:e5:e3:7e:
a8:bb:2c:46:c6:61:ee:36:57:bb:94:ab:40:0a:f2:0b:82:11:
6d:e7:58:54:b9:da:18:16:c9:d4:30:b5:7c:66:01:2e:78:91:
f4:3b:e7:19:6b:31:59:80:1c:bc:83:76:f5:2a:b5:48:db:1e:
45:00:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:21 2025 by rpki-client