Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/yE3UJbDrkIyLt-oPpejU22Aem_w.roa
File: yE3UJbDrkIyLt-oPpejU22Aem_w.roa (raw, json)
Hash identifier: 018sC5fKegJFlpxenh8Ac6r4p9k9QK4bCZoSo1jyKMU=
Subject key identifier: C8:4D:D4:25:B0:EB:90:8C:8B:B7:EA:0F:A5:E8:D4:DB:60:1E:9B:FC
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 01856D5D03739DC87689EA0FDAB0CCC745CA
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/yE3UJbDrkIyLt-oPpejU22Aem_w.roa
Signing time: Sun 01 Jan 2023 12:44:50 +0000
ROA not before: Sun 01 Jan 2023 12:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201602
IP address blocks: 185.241.144.0/24 maxlen: 24
185.241.145.0/24 maxlen: 24
185.241.146.0/24 maxlen: 24
185.241.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:03:73:9d:c8:76:89:ea:0f:da:b0:cc:c7:45:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jan 1 12:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c84dd425b0eb908c8bb7ea0fa5e8d4db601e9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:9f:6e:30:d6:1a:e5:69:b5:ed:01:d9:09:
7c:55:09:2e:9d:f3:aa:af:74:1a:b3:bc:1c:4b:d5:
b2:ef:ad:73:c6:91:a2:a9:9e:8d:fb:49:b7:19:6b:
88:c7:99:fb:98:9d:70:4f:7d:e9:b6:5f:b6:4e:65:
29:b1:f4:f8:71:4e:8d:54:56:88:3f:cb:a6:0d:8f:
52:8a:c0:d0:aa:ab:ab:23:a4:de:28:f9:1f:f4:94:
06:a0:be:9c:ef:6b:65:6e:89:0a:9d:c7:73:e0:c8:
b0:3b:33:98:3e:b7:ef:55:9f:3f:06:b4:3d:bd:08:
8c:e4:55:b8:87:7f:f7:34:7f:09:f6:d0:56:e7:69:
94:59:4b:a8:73:2d:25:0a:49:3f:62:4b:d7:9a:2c:
fb:d4:da:f3:6a:e6:b7:1c:f6:da:89:e6:4a:9f:6f:
62:86:d6:2e:07:b1:81:a0:97:a9:e1:cf:de:5a:7d:
0b:30:89:68:d6:20:82:81:ca:18:1e:f9:d5:88:31:
7e:dd:87:95:e2:6f:8e:e9:4c:66:eb:08:bc:ed:6a:
e7:b8:3c:02:15:f9:fb:cb:31:8c:a2:08:1f:bf:75:
23:cd:a6:10:b7:1a:57:40:c2:50:f7:89:cc:d0:08:
62:ae:23:71:22:fb:b8:5c:b5:11:32:28:b4:17:c5:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:D4:25:B0:EB:90:8C:8B:B7:EA:0F:A5:E8:D4:DB:60:1E:9B:FC
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/yE3UJbDrkIyLt-oPpejU22Aem_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:68:c0:dc:9e:69:a9:d5:c3:c5:89:0f:21:58:32:a8:63:d5:
b6:52:f1:87:8b:d2:5d:a2:f8:48:72:09:82:f3:53:ef:9b:f3:
c3:01:e3:41:72:41:18:c2:55:e2:c4:41:67:7d:d3:e9:5a:4d:
84:91:51:79:33:2e:b7:13:fe:bf:37:11:e1:fb:ed:23:18:a1:
49:b1:b4:c6:db:b7:74:ec:f5:27:29:f3:c7:9b:9b:b1:09:e6:
65:d3:19:c5:2d:0b:62:3a:2d:40:ec:55:46:48:1d:dd:a4:3c:
c5:54:23:97:93:e9:f9:d4:4d:1a:ad:d0:e9:a7:57:39:95:40:
8d:34:e3:c4:be:98:2c:96:1d:b7:69:f6:9d:b5:c6:f8:1e:a9:
fb:91:ca:77:51:cf:7f:07:5d:b4:3d:05:c3:a5:03:ad:b8:5a:
98:dc:58:fe:f8:38:24:ea:8d:46:22:3b:84:e7:19:67:18:50:
84:61:10:12:f6:e7:6e:32:e6:14:5f:07:ec:cb:47:c4:7b:fa:
41:62:f6:1f:fa:19:dd:64:3c:6f:c4:92:9b:78:06:25:04:ed:
c5:d6:f9:09:ed:f9:9c:52:04:a3:30:9c:05:42:50:a3:fe:bb:
7c:2d:ee:24:da:08:76:6b:7f:73:1c:8a:72:27:28:6c:fd:41:
a2:b4:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:21 2025 by rpki-client