Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/srBEHSx1LjYogVOS_Dfeq1h6QpU.roa
File: srBEHSx1LjYogVOS_Dfeq1h6QpU.roa (raw, json)
Hash identifier: koH/Q/ivrJWXLXUOivXbvGebG5aZ0mkemdI+PUfNaJI=
Subject key identifier: B2:B0:44:1D:2C:75:2E:36:28:81:53:92:FC:37:DE:AB:58:7A:42:95
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01828236C05E328B03A5374E1C39349F7D7C
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/srBEHSx1LjYogVOS_Dfeq1h6QpU.roa
Signing time: Tue 09 Aug 2022 10:46:42 +0000
ROA not before: Tue 09 Aug 2022 10:46:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203436
IP address blocks: 185.224.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:36:c0:5e:32:8b:03:a5:37:4e:1c:39:34:9f:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Aug 9 10:46:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b0441d2c752e3628815392fc37deab587a4295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:fc:4a:82:58:19:9b:73:ff:3a:ac:e4:5c:
5c:23:bb:45:b2:51:b0:bf:f7:d9:a4:38:6d:df:f0:
ac:d6:40:09:a1:4a:17:bd:61:a8:0a:31:e7:49:75:
4f:6b:4c:8a:a6:8a:2c:6f:3b:b5:0f:47:1e:94:89:
29:21:f0:9c:86:d2:b9:d3:cc:f8:56:ac:05:3c:8b:
ce:f9:10:c0:7a:43:f8:fa:6e:c4:7b:5e:73:fc:67:
99:07:18:07:d0:87:f1:be:e8:f9:33:0f:ea:ac:12:
19:8f:25:2e:e1:40:59:06:33:e8:af:a1:33:e9:c2:
39:18:df:0c:3b:4e:70:b5:10:98:c8:ad:96:5e:a0:
86:4c:1f:a2:84:e9:f4:bb:86:57:11:37:a8:cf:d4:
84:6d:6e:ab:02:41:50:59:c2:9a:c3:5e:8b:a6:28:
a4:89:bd:e8:40:4f:00:13:25:b9:7c:44:20:5c:82:
1d:5e:7e:fe:83:e8:be:a7:2b:2a:93:82:6a:0d:8e:
81:87:99:43:67:75:bc:0d:47:6e:78:af:0f:d3:0c:
35:cd:37:b8:a3:62:57:62:5a:4d:84:a2:0e:2b:b1:
a4:ee:e0:b0:aa:a5:88:8f:72:e7:43:1f:26:58:32:
49:8c:43:36:c4:4b:72:f2:d5:e5:aa:46:f8:4b:36:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:44:1D:2C:75:2E:36:28:81:53:92:FC:37:DE:AB:58:7A:42:95
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/srBEHSx1LjYogVOS_Dfeq1h6QpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.217.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ba:42:44:66:b3:5b:a9:50:75:e0:7b:70:dc:3e:7a:f1:2f:
50:1a:95:c1:0d:ac:1c:20:86:e3:47:7e:33:1d:54:2b:90:be:
6b:eb:74:e1:ad:2c:61:16:06:69:fa:46:79:f0:39:86:81:52:
56:40:db:8a:da:10:56:64:e6:9f:5e:d8:28:64:6d:dc:ed:f9:
8e:63:49:98:f9:c3:d7:be:a2:e5:00:8e:0c:00:91:dc:45:1e:
80:56:36:e3:6e:25:31:5a:32:f0:12:6d:26:63:22:d2:d9:76:
01:2c:e2:d9:d1:df:20:3f:b1:1f:2b:66:10:5b:66:27:06:a0:
6d:22:29:cf:58:fa:a7:46:c4:4e:c0:de:75:6b:1b:c7:36:0d:
dc:05:02:e2:a4:6d:10:2e:18:4e:96:f8:7b:cb:cf:4a:b4:2e:
ad:4d:3a:97:af:d2:96:76:2a:25:bb:33:3a:f7:3e:0f:f4:87:
30:1c:18:2c:01:7e:b6:53:5b:fe:60:c9:00:10:f4:54:8a:9b:
ed:24:3c:73:c3:12:6e:ff:5e:28:1a:a7:39:26:ec:b3:5c:5d:
5e:75:4f:b2:f6:42:2e:e3:ed:c4:4f:5d:0d:8c:c4:00:0a:d4:
16:05:46:24:ef:f5:6a:95:6b:d0:78:b4:ca:3a:ac:d4:a0:8b:
97:ff:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:57 2025 by rpki-client