Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/Ccp07H-k6LQTT3hpO1zsKJk-RKY.roa
File: Ccp07H-k6LQTT3hpO1zsKJk-RKY.roa (raw, json)
Hash identifier: IehwmgWVuHxTi3ykO/MlHWfWm3GsejpUAxPZA+m0xZc=
Subject key identifier: 09:CA:74:EC:7F:A4:E8:B4:13:4F:78:69:3B:5C:EC:28:99:3E:44:A6
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 963E2C
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/Ccp07H-k6LQTT3hpO1zsKJk-RKY.roa
Signing time: Sat 01 Jan 2022 00:52:38 +0000
ROA not before: Sat 01 Jan 2022 00:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42043
IP address blocks: 193.186.32.0/24 maxlen: 24
185.88.152.0/24 maxlen: 24
185.88.154.0/24 maxlen: 24
185.88.155.0/24 maxlen: 24
185.88.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9846316 (0x963e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Jan 1 00:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09ca74ec7fa4e8b4134f78693b5cec28993e44a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:b1:91:d1:c1:c8:11:4d:48:09:83:3b:ae:
03:f4:96:a3:bf:e7:d0:8d:ad:39:10:a1:a0:dc:f4:
ea:4a:dd:e1:ad:fe:f9:c3:6c:e9:85:0d:9d:3d:ad:
56:cd:89:06:6c:ff:50:ea:90:48:e9:09:c0:f7:4e:
81:34:86:7d:2c:40:1c:1e:dd:6f:68:63:fd:27:da:
c8:5c:4f:03:c9:f8:74:d1:65:be:24:63:43:50:90:
5d:34:2e:ec:28:69:68:1b:22:c7:62:a8:3a:46:5d:
ac:a0:c1:26:66:b6:cb:18:1f:66:c0:6e:39:f9:6c:
d7:d9:f5:a6:fc:f6:c1:78:46:d7:c7:92:db:c2:f5:
d6:ca:0a:08:81:74:ab:6e:5c:75:f5:34:ec:4c:4f:
24:19:68:14:97:da:20:5f:a3:a9:f9:fd:f6:da:04:
ac:a1:23:50:d5:cc:e9:39:a5:12:44:2c:d5:1a:07:
5c:e7:f4:2a:37:92:4e:1e:89:5a:e7:d3:2a:70:62:
bf:c0:0c:48:b0:53:61:04:6f:96:69:2d:3f:d3:72:
55:fc:9a:1d:82:3d:72:df:dc:15:dd:fb:b3:d1:7f:
df:af:47:f0:2c:54:85:7b:99:82:ab:f2:2c:a4:7d:
1f:47:5a:80:44:55:1b:38:dd:e3:94:6d:38:33:79:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CA:74:EC:7F:A4:E8:B4:13:4F:78:69:3B:5C:EC:28:99:3E:44:A6
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/Ccp07H-k6LQTT3hpO1zsKJk-RKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.152.0/22
193.186.32.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2f:f2:3b:0a:e3:5f:e0:64:61:71:b6:54:f8:ae:5c:35:24:
d6:94:b8:66:46:c2:d7:ad:92:89:e3:9c:78:00:46:d2:7c:48:
e0:7a:f3:c2:6b:b1:e2:d1:0d:3e:c8:39:b2:0f:54:68:a4:e2:
e0:b7:56:2e:b5:cc:b6:c3:cc:a2:5c:17:6b:55:51:4e:be:70:
d1:99:26:73:3d:fd:9a:b2:11:54:c2:06:da:0d:0e:c4:33:6f:
e0:03:5e:23:79:8d:d5:e1:13:17:f6:bb:90:d1:2c:f2:93:b1:
9a:c6:8f:12:b1:b2:8d:8d:2e:32:15:12:26:d7:22:17:2b:4d:
53:5f:ed:57:12:df:4a:ea:37:44:d4:40:b9:db:0d:67:09:1d:
15:bd:f5:01:ee:8e:d8:7a:f5:f6:5f:06:23:14:71:f9:5e:6a:
a5:19:d3:8e:7f:8f:17:3d:16:bc:fa:fa:38:f1:f0:7a:12:e5:
bb:a2:90:90:ce:4e:78:6d:8b:84:bc:1d:0a:6e:9b:d2:1e:9d:
bf:09:b6:79:d5:2a:01:be:70:73:98:ae:1e:24:db:58:fb:df:
17:ee:fd:ab:58:98:ff:25:13:22:05:19:a4:59:df:b5:9a:15:
ad:07:01:9c:4e:31:fc:f0:dd:0c:e2:f8:78:2c:d6:12:5a:0a:
5d:d1:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:40:13 2025 by rpki-client