Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/0cNZAkTNI91Yl1i1ZdA645o1OQ8.roa
File: 0cNZAkTNI91Yl1i1ZdA645o1OQ8.roa (raw, json)
Hash identifier: mJ/LOV3dg/vgJ+s+7Qu/NSS5y2wPpYbr8d+pleZXdws=
Subject key identifier: D1:C3:59:02:44:CD:23:DD:58:97:58:B5:65:D0:3A:E3:9A:35:39:0F
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01857130A0D8E1AB7F8424D176A46BE6C954
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/0cNZAkTNI91Yl1i1ZdA645o1OQ8.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199235
IP address blocks: 185.83.224.0/22 maxlen: 22
89.147.124.0/22 maxlen: 22
37.143.72.0/22 maxlen: 22
2a02:6f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a0:d8:e1:ab:7f:84:24:d1:76:a4:6b:e6:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1c3590244cd23dd589758b565d03ae39a35390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:1f:6b:fc:96:9c:74:43:88:35:25:d3:46:
48:76:d1:c6:69:38:f1:43:55:24:bb:dd:15:f2:6f:
ec:d4:77:ae:69:6d:8a:b8:1b:6e:13:d7:d9:2b:31:
d6:dc:34:e7:f4:37:7c:a1:91:b5:73:29:7a:a6:49:
74:50:32:b7:88:cc:18:43:33:a9:6a:f2:7d:52:b1:
c1:2e:34:8f:85:73:7c:25:7b:4e:dc:ab:bd:fb:9b:
d1:f4:01:cb:44:3b:98:39:e9:72:a1:a1:bf:8c:13:
ec:c6:32:22:00:7b:9c:d2:af:76:c2:72:db:42:0c:
88:2f:4a:70:cd:08:a0:21:09:fb:a4:94:c3:cf:7f:
fc:f7:4a:3a:db:79:0d:73:ab:85:dd:ae:33:bb:6a:
82:f7:1b:76:ba:ec:29:e9:e0:92:00:1f:af:7b:75:
86:66:eb:01:9f:0b:9c:dc:a7:36:9f:32:c0:69:8e:
51:07:5f:76:5e:27:5b:7c:de:42:87:12:7c:5b:cd:
a5:a9:71:51:40:14:54:cf:74:e8:89:f0:f1:74:cc:
51:eb:61:9e:e4:e7:00:bd:6b:73:a7:d7:5d:fd:ee:
aa:61:f8:9e:a6:db:c3:9c:03:d0:48:f0:fd:8c:41:
36:3b:22:4c:3f:6e:ad:26:62:b9:df:f4:f4:83:36:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C3:59:02:44:CD:23:DD:58:97:58:B5:65:D0:3A:E3:9A:35:39:0F
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/0cNZAkTNI91Yl1i1ZdA645o1OQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.72.0/22
89.147.124.0/22
185.83.224.0/22
IPv6:
2a02:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
93:85:de:f9:3a:eb:29:9d:58:7d:ec:e2:9f:e8:43:fb:a5:24:
e0:1c:9c:e4:ae:ab:bb:58:3f:65:6a:0c:be:c5:4e:0d:7c:a9:
cb:c4:ae:2c:41:8c:1a:0e:a8:fc:e3:b1:4f:32:8f:44:3e:5d:
0b:ca:6c:10:98:e9:a1:19:12:25:11:09:61:d9:a2:ba:39:70:
ed:77:1d:66:9d:f8:2b:76:7c:b4:53:f8:cf:bb:18:e9:dc:e8:
b2:cb:4c:fc:7b:87:fb:9c:ab:44:38:7e:96:2e:e0:45:bb:82:
2f:87:68:86:0e:b1:a9:a5:fe:fd:45:84:a8:f7:39:81:f2:4a:
47:92:16:2a:9a:71:72:c3:8b:10:ae:c2:83:83:8a:ae:5a:bf:
61:86:f1:69:d9:c2:c7:a3:3c:01:41:ff:d6:c3:58:6c:a9:27:
ff:e6:c6:c5:89:ea:41:83:09:03:64:90:b6:d8:db:8a:72:de:
48:9e:90:ba:6b:98:e9:3e:4c:5b:09:e8:f4:da:a1:33:cc:28:
1d:ca:40:41:76:11:77:e1:10:35:f9:59:1f:de:99:8c:f0:4b:
f0:1d:ca:d7:58:26:32:60:a4:03:97:03:d1:dd:d3:b2:d6:bd:
eb:f3:ce:df:dc:39:e2:14:28:6b:6b:6c:ae:2e:b8:78:79:83:
9c:00:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:50 2025 by rpki-client