Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/g7W0XGjCcPgHl5G9Rt3j6lnveE8.roa
File: g7W0XGjCcPgHl5G9Rt3j6lnveE8.roa (raw, json)
Hash identifier: O1dhqiWGZ5d4TWQwJv6xKn0El0471abmVtijIg9hW38=
Subject key identifier: 83:B5:B4:5C:68:C2:70:F8:07:97:91:BD:46:DD:E3:EA:59:EF:78:4F
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 06487E25
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/g7W0XGjCcPgHl5G9Rt3j6lnveE8.roa
Signing time: Sat 01 Jan 2022 14:57:04 +0000
ROA not before: Sat 01 Jan 2022 14:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.233.127.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
109.74.31.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105414181 (0x6487e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 14:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83b5b45c68c270f8079791bd46dde3ea59ef784f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:67:e0:b9:c5:25:64:39:94:f9:da:28:bd:
cb:80:45:70:f1:25:00:d7:66:1b:e5:00:b9:07:11:
ce:1b:b9:07:1d:d8:c3:e4:f4:28:09:e7:0c:e3:1a:
32:f9:53:f9:72:aa:8d:f7:c0:16:22:1e:c6:83:cf:
69:f8:78:eb:08:e2:cb:39:95:12:ab:bd:49:fd:7a:
69:eb:55:46:06:28:08:db:6e:ea:4a:41:e7:f7:6e:
66:0d:64:d0:8a:0e:81:b4:f4:f5:ae:31:57:82:29:
53:16:a7:56:4c:0e:02:2e:69:ad:e7:8a:96:c6:35:
4c:fb:e8:87:ae:69:16:62:13:7e:cd:4c:b6:c3:58:
cc:43:24:69:19:63:59:e6:78:c8:26:1c:e4:23:2f:
bb:6c:a8:63:88:fb:e6:87:75:8b:59:5b:68:dd:5e:
28:19:3c:25:e0:36:e0:7e:02:c1:8a:4e:4d:dd:29:
0c:ed:b5:0b:83:4e:26:b4:22:47:e4:cb:bd:b2:47:
b5:e9:db:07:0a:d8:12:05:30:4e:95:2d:70:c1:4c:
1a:80:2a:24:53:28:d9:e7:b9:01:68:8c:e2:4e:49:
db:21:76:d0:7a:85:4a:fd:12:7d:b3:73:2b:10:16:
ea:3b:bd:23:16:eb:e5:81:ef:ab:1f:c8:2c:57:e7:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:B4:5C:68:C2:70:F8:07:97:91:BD:46:DD:E3:EA:59:EF:78:4F
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/g7W0XGjCcPgHl5G9Rt3j6lnveE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.156.0/24
109.74.28.0/22
185.233.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:00:89:1c:4d:b1:e9:39:32:32:5b:6f:44:ab:45:e0:17:a0:
d9:9f:ab:fc:e4:d4:66:4b:0b:9a:e6:d9:4b:79:cb:29:2e:c8:
9d:dd:c2:26:42:a9:5b:ff:5a:8c:28:ea:0b:60:41:cb:1a:d0:
77:58:07:00:2a:67:96:5b:1e:24:6b:80:26:bc:d7:fa:fe:b5:
26:07:05:35:b6:2f:08:f4:bd:07:58:15:6d:a6:a4:4f:60:dc:
3a:c2:17:dd:ab:93:6e:41:9d:27:50:32:a5:bf:0d:79:a8:f3:
ce:24:51:ca:fe:a4:51:47:52:f4:08:4b:5a:24:e3:9a:40:de:
0d:6a:72:61:15:80:f7:62:00:80:6f:d9:32:f1:d2:cc:8a:42:
8e:49:2b:d6:f7:04:85:46:d8:1f:f0:87:24:d2:98:ca:59:ee:
76:cc:e4:44:dc:b4:5f:49:e1:83:4a:37:da:7e:be:10:6c:c4:
2c:96:29:1d:2f:07:19:7b:93:ce:d8:0b:c8:60:3d:e9:6d:9f:
33:82:fb:71:89:d1:a2:8a:7f:e3:04:0d:b3:29:56:71:60:da:
3a:ce:40:fb:8e:64:cf:4d:08:a0:1a:a2:73:2c:79:46:be:38:
00:e7:60:bd:cd:c8:d6:ce:97:46:d7:43:01:49:73:29:f3:de:
59:58:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:56 2025 by rpki-client