Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/3ePrJn8w3Gp_iI18F8eqIZi3dhM.roa
File: 3ePrJn8w3Gp_iI18F8eqIZi3dhM.roa (raw, json)
Hash identifier: Dpt07W9/nap2lNkNzIP+gFuEkrqHinp+xT0G9kK7J2M=
Subject key identifier: DD:E3:EB:26:7F:30:DC:6A:7F:88:8D:7C:17:C7:AA:21:98:B7:76:13
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 01DBD7
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/3ePrJn8w3Gp_iI18F8eqIZi3dhM.roa
Signing time: Mon 16 May 2022 10:13:46 +0000
ROA not before: Mon 16 May 2022 10:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57722
IP address blocks: 185.248.172.0/22 maxlen: 22
185.248.172.0/24 maxlen: 24
185.248.174.0/24 maxlen: 24
185.248.175.0/24 maxlen: 24
185.248.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121815 (0x1dbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: May 16 10:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde3eb267f30dc6a7f888d7c17c7aa2198b77613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:d4:45:cb:b9:5a:4b:96:8e:53:18:3b:80:
82:88:65:dc:3b:1e:dd:e7:02:fc:9e:7f:06:db:5b:
b0:72:ec:a1:82:0a:34:43:14:7a:11:ae:52:8a:b9:
99:7d:9b:13:a4:1b:a6:08:6b:0d:40:c1:38:93:e4:
2c:96:a8:11:50:42:25:53:f3:48:70:88:b5:5a:2b:
ca:ab:c1:60:5c:da:2e:0d:e0:69:94:48:d8:0f:9a:
eb:15:96:1b:e1:17:25:01:b8:08:10:65:d4:ec:51:
52:26:8e:cc:75:fd:bb:f3:8d:ec:43:5d:3a:c9:b6:
49:f4:2e:1b:05:eb:35:33:64:5e:51:39:9b:7b:77:
c7:01:a5:fe:7c:70:3c:02:8f:d3:85:cc:82:9f:40:
bc:43:85:ad:64:47:6c:44:72:2a:22:26:a9:bb:89:
2d:fd:e9:dc:03:69:6b:e1:4e:96:bf:f4:2d:3c:c1:
f4:9d:6b:c1:dc:6f:a4:f1:14:32:84:70:36:9c:24:
87:3f:37:e4:f5:40:5d:9e:f5:53:15:e4:74:2a:02:
17:3d:6d:03:28:8d:3e:c7:35:ea:b5:3c:93:9a:c7:
ff:07:0c:91:43:f6:ca:37:02:2d:ad:52:89:56:b4:
24:71:be:bd:0d:54:dc:7c:c2:c9:af:02:ec:88:5d:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:EB:26:7F:30:DC:6A:7F:88:8D:7C:17:C7:AA:21:98:B7:76:13
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/3ePrJn8w3Gp_iI18F8eqIZi3dhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.172.0/22
Signature Algorithm: sha256WithRSAEncryption
16:95:ff:2e:b9:cc:e2:0b:cf:4f:dd:41:4a:0b:7e:16:7a:74:
7f:fe:ac:8a:cb:03:55:8a:13:7f:37:25:ae:16:1a:09:71:c4:
92:91:d1:83:d8:16:ca:2e:69:0a:e4:7e:04:c3:e4:55:01:02:
11:ea:1d:0d:5e:71:da:e5:d6:7d:e2:c6:32:2b:85:97:27:b1:
14:f2:e3:03:de:c5:17:ba:e4:86:92:b7:36:76:86:98:42:9c:
aa:8a:81:db:a4:68:bc:c0:44:d3:6f:0e:58:9f:f4:bc:af:74:
21:a8:18:e5:b8:75:aa:1c:fe:3a:0a:74:95:21:5b:2a:aa:65:
ce:8e:9b:8f:f5:56:52:8b:5d:e7:11:dc:52:19:64:5e:c4:08:
6f:88:aa:be:96:a3:ed:f4:cd:25:b8:02:d5:df:73:b1:82:f2:
ce:6a:62:df:4c:0b:39:7a:c7:8a:01:51:a2:99:d0:be:28:91:
5d:95:0c:6d:0f:ce:77:c8:d7:98:5d:26:74:57:0b:23:2d:b8:
a4:b1:75:e6:74:4c:c0:bc:5c:d1:ec:0f:fc:9e:b5:e6:c0:31:
7a:27:dd:9f:9d:2e:d8:ed:e0:8f:db:fb:0e:83:c9:ed:1a:89:
65:b4:82:0e:02:3d:8e:09:8e:38:9f:0b:3b:1e:54:82:0b:eb:
e9:8f:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:21 2025 by rpki-client