Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/53WRDie6suozOXbJ92OuYbV3khs.roa
File: 53WRDie6suozOXbJ92OuYbV3khs.roa (raw, json)
Hash identifier: OCLNpwWh6vKqYfvPPDHpkI+wtHvYce1l1nn/MB/L7AE=
Subject key identifier: E7:75:91:0E:27:BA:B2:EA:33:39:76:C9:F7:63:AE:61:B5:77:92:1B
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 0D4B1EB5
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/53WRDie6suozOXbJ92OuYbV3khs.roa
Signing time: Sat 01 Jan 2022 04:00:56 +0000
ROA not before: Sat 01 Jan 2022 04:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136184
IP address blocks: 185.228.92.0/24 maxlen: 24
185.228.95.0/24 maxlen: 24
185.228.94.0/24 maxlen: 24
185.228.93.0/24 maxlen: 24
185.228.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223026869 (0xd4b1eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jan 1 04:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e775910e27bab2ea333976c9f763ae61b577921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:53:59:a9:b1:fb:0f:e9:29:8d:07:32:25:
82:ad:20:74:df:b9:94:f1:e0:6b:64:a8:e2:b6:bc:
a1:b6:14:9d:3b:51:67:05:48:ee:38:37:3f:cd:0b:
8e:04:82:09:76:92:c2:fa:75:ab:c1:f2:69:d5:46:
71:ca:71:3f:3d:8d:29:94:9a:8e:20:23:5c:e6:b0:
3b:f3:99:f0:a0:b9:69:5c:b9:d2:63:e1:ee:cd:cf:
c0:2e:65:41:29:cc:75:9a:74:5d:bb:b9:72:43:83:
21:83:e5:fc:8e:83:7c:75:09:87:df:e3:9e:1a:11:
30:73:5f:bc:88:38:13:bc:6a:13:0b:84:63:98:45:
ad:17:64:f6:46:91:3e:ff:90:ae:ac:6f:9f:ae:8b:
c3:66:99:66:48:35:58:e6:b5:e3:26:10:5e:4b:fe:
bc:34:04:5c:2b:a5:aa:3c:0b:a9:fc:b0:75:34:76:
24:d2:69:af:46:c6:45:0f:58:c6:d2:2f:77:75:40:
c6:e3:23:e6:08:a8:17:4b:d8:60:ab:be:de:41:89:
8c:58:5b:89:b1:46:41:2a:20:77:dd:6c:d2:99:8d:
e8:9e:3f:ee:cc:29:39:04:35:2c:79:d2:36:6c:ca:
b0:de:c7:18:9f:53:cf:35:3a:f8:18:de:95:fb:83:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:91:0E:27:BA:B2:EA:33:39:76:C9:F7:63:AE:61:B5:77:92:1B
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/53WRDie6suozOXbJ92OuYbV3khs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:17:9c:59:e8:23:5e:ff:21:8f:db:5b:ff:34:23:f7:f6:8e:
a3:4a:4f:74:c4:1c:cc:8e:04:20:22:2b:a3:95:d9:d1:c9:e5:
19:c4:81:87:16:66:52:51:34:70:ef:9a:fc:88:b8:46:a5:6f:
30:18:4a:5a:8b:8c:ad:e2:24:e9:90:36:68:38:c3:81:90:5e:
97:0c:a7:c1:1d:b1:75:67:14:a8:52:18:1f:b4:82:a8:6c:2c:
0b:05:d3:37:5d:11:a7:20:90:46:53:ca:db:75:dd:f4:e7:e7:
af:65:fe:e5:a4:11:c5:2d:17:77:2c:8d:4f:3b:9c:0b:56:3c:
33:f7:27:c0:27:95:9c:61:04:b6:48:f1:cb:45:b0:9f:a9:de:
b2:25:12:cc:2e:ff:e8:13:41:d0:14:4d:bb:bb:78:e9:0d:18:
c2:e8:be:b6:27:3c:1c:7a:5f:e4:98:57:c2:cc:54:51:48:ea:
a8:2e:15:12:4c:42:ed:9e:98:64:51:b9:36:d1:19:7c:18:78:
57:a8:58:85:53:72:ed:0b:6a:fe:ec:89:18:08:bb:f1:5e:65:
d5:1f:83:e2:8b:93:e4:1d:81:0d:53:d3:7f:01:dd:d1:99:1c:
eb:4c:81:1c:57:ed:c7:49:9a:d0:89:ae:72:fc:d8:86:89:00:
ce:cc:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:31:05 2025 by rpki-client