Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/1pWaApzdJYb9BJEwptF-aMRvshI.roa
File: 1pWaApzdJYb9BJEwptF-aMRvshI.roa (raw, json)
Hash identifier: WAOhBlI+miWfIagcm6KtXgIhY2hFd0Or3OxrriVA7BA=
Subject key identifier: D6:95:9A:02:9C:DD:25:86:FD:04:91:30:A6:D1:7E:68:C4:6F:B2:12
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0182B321DCE799F83D09B54F1F7BE1BF075A
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/1pWaApzdJYb9BJEwptF-aMRvshI.roa
Signing time: Thu 18 Aug 2022 22:45:17 +0000
ROA not before: Thu 18 Aug 2022 22:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59466
IP address blocks: 185.96.164.0/22 maxlen: 22
85.187.180.0/22 maxlen: 22
85.187.190.0/24 maxlen: 24
85.187.187.0/24 maxlen: 24
85.187.188.0/23 maxlen: 23
45.84.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:21:dc:e7:99:f8:3d:09:b5:4f:1f:7b:e1:bf:07:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Aug 18 22:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6959a029cdd2586fd049130a6d17e68c46fb212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:43:5d:86:a2:b2:a2:29:84:6e:3a:92:fb:
5d:3e:39:dd:e5:fd:15:b1:78:fa:c2:6c:9d:22:ce:
cd:bc:a2:1e:6d:48:3e:ec:3f:43:72:6a:4f:f0:76:
51:87:96:bd:10:02:a3:01:3e:dd:df:39:e0:79:c5:
d4:29:0c:b1:12:71:9f:cb:cc:00:78:31:2b:f5:f9:
03:e0:64:c9:9d:dc:6d:0a:37:d7:83:7d:fa:82:45:
37:78:10:11:e9:fa:00:81:97:a8:7c:2b:dc:64:2e:
c3:1a:3d:84:da:c5:e4:80:46:be:22:dd:8c:e1:f6:
85:d4:c4:83:44:4b:5d:26:7d:00:d3:0a:99:f6:34:
e6:b8:ad:bf:19:54:48:f8:92:f7:75:c5:e3:47:4f:
22:5b:37:de:ea:8a:04:59:bd:44:36:b2:6c:69:93:
36:8d:dd:96:1a:ac:75:f4:e7:fa:c1:4e:94:10:e2:
20:56:dc:ab:d4:08:be:0a:dd:56:9f:ba:f4:19:c4:
fc:70:7e:46:22:4b:87:4d:4e:58:ba:f3:39:1c:63:
f9:25:7d:f9:84:db:a0:8f:b1:85:c2:d8:37:94:7d:
82:89:8c:10:aa:83:07:5d:45:57:f5:e6:96:da:89:
e6:81:e7:86:da:8e:f4:dd:a0:74:9b:dd:a8:0c:80:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:9A:02:9C:DD:25:86:FD:04:91:30:A6:D1:7E:68:C4:6F:B2:12
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/1pWaApzdJYb9BJEwptF-aMRvshI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.172.0/22
85.187.180.0/22
85.187.187.0-85.187.190.255
185.96.164.0/22
Signature Algorithm: sha256WithRSAEncryption
15:00:96:66:25:0d:e7:06:4e:05:08:25:63:bc:96:06:f0:43:
96:56:f5:6f:1f:ed:37:6c:2f:a2:1a:3b:6b:d9:ad:65:a3:0c:
83:11:5b:9d:8c:2a:62:91:db:d8:a6:cc:46:3c:c9:4d:ec:69:
9a:fa:72:15:25:47:c8:f9:26:d1:19:b5:21:81:c9:1f:41:8d:
5e:74:90:a5:09:ff:53:0c:be:a3:7e:fc:5d:28:f8:9b:53:58:
d8:57:1c:c0:c9:63:48:ba:08:a6:19:6e:b1:80:6d:c0:b7:a4:
59:87:94:28:65:58:82:ae:6b:3f:b7:1a:19:e0:a2:d3:23:4b:
f4:81:e2:2e:11:aa:47:39:38:c8:10:e8:16:28:f0:fa:86:2c:
38:4b:0c:c3:fd:67:61:80:64:fe:7f:46:99:87:b5:5a:4a:6c:
79:f1:24:cc:a7:8f:8d:fe:6b:9d:2a:b4:b2:03:15:56:ae:05:
e1:54:04:aa:87:34:6e:80:5a:15:fb:e9:18:43:9b:c0:19:92:
b2:25:f0:32:c9:2e:18:88:ed:16:bc:58:05:4b:f0:e4:af:4b:
1a:1a:75:b8:0f:a8:4b:a1:a4:84:7a:bf:98:b1:0e:64:02:08:
5f:b6:4c:9b:e7:3a:07:9c:4b:02:5a:32:6d:dd:7b:2c:94:44:
92:51:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:03 2025 by rpki-client