Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/2LXJ64q0eF-DtKbe9ZHDACz_dt8.roa
File: 2LXJ64q0eF-DtKbe9ZHDACz_dt8.roa (raw, json)
Hash identifier: 9Z8LWQCq55fD9Bp+14c8FihIsbbepwXnPTuB6+u6DDY=
Subject key identifier: D8:B5:C9:EB:8A:B4:78:5F:83:B4:A6:DE:F5:91:C3:00:2C:FF:76:DF
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0189D972FD1EFC0AE7C1EF2955A25F81F61F
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/2LXJ64q0eF-DtKbe9ZHDACz_dt8.roa
Signing time: Wed 09 Aug 2023 08:38:58 +0000
ROA not before: Wed 09 Aug 2023 08:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208350
IP address blocks: 185.135.19.0/24 maxlen: 24
185.135.18.0/24 maxlen: 24
85.255.152.0/24 maxlen: 24
85.255.147.0/24 maxlen: 24
85.255.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:72:fd:1e:fc:0a:e7:c1:ef:29:55:a2:5f:81:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Aug 9 08:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8b5c9eb8ab4785f83b4a6def591c3002cff76df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:7c:c7:c2:6c:72:c0:ec:b6:30:c6:0a:cc:
22:3a:c3:56:4b:69:e2:d7:65:8f:3f:d3:9a:ec:b5:
6f:1e:8f:62:e3:b2:0b:90:e9:a3:0d:ac:86:8d:1a:
2a:74:34:cd:8f:c6:fa:d4:26:38:3e:af:36:ee:a1:
8f:88:81:df:79:51:b2:86:1f:42:e8:1d:c9:57:94:
5b:39:d5:66:ab:26:25:22:a7:2b:b7:f9:d8:77:79:
87:ec:82:53:96:8a:5e:d5:21:5c:c3:d6:79:39:91:
0d:45:aa:94:47:8d:b5:41:b6:59:27:2c:32:79:d3:
48:6f:7b:39:2d:00:e2:c1:c7:ac:49:0a:e8:03:4a:
34:3e:82:b3:4f:09:74:d5:7f:d0:e7:c0:1d:e3:88:
37:96:48:2d:11:06:3a:83:e3:91:f8:1b:e6:1e:61:
c8:cb:0a:68:3d:d1:7b:84:1c:60:1a:f4:13:ec:c7:
f6:8f:f7:4c:33:12:ff:f9:f9:b2:89:c8:2a:89:b2:
92:bb:f2:df:9e:15:d6:86:58:10:ea:37:8d:68:1a:
df:4f:97:28:e8:ba:a0:39:00:ec:af:fa:63:64:c3:
35:c7:4d:ca:75:b0:a8:31:29:83:ef:c1:71:74:0f:
4a:63:d9:56:49:87:c7:20:b1:48:98:73:23:44:4c:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:C9:EB:8A:B4:78:5F:83:B4:A6:DE:F5:91:C3:00:2C:FF:76:DF
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/2LXJ64q0eF-DtKbe9ZHDACz_dt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.146.0/23
85.255.152.0/24
185.135.18.0/23
Signature Algorithm: sha256WithRSAEncryption
48:e9:0a:0e:44:98:94:0e:26:d5:c0:88:9e:36:74:df:e3:ad:
7c:05:63:4d:24:2a:d2:18:f4:5d:47:9d:b9:75:d8:0e:14:34:
a6:e6:b8:9c:41:2b:5a:0e:b9:23:23:43:92:6f:54:36:ca:b9:
e5:32:e8:bc:53:5e:0c:8c:fe:b5:5a:12:37:c6:1b:ef:6f:93:
e6:4f:2a:67:bb:e7:23:98:5a:03:98:8c:cf:6c:d5:c5:36:8a:
91:cb:57:97:64:a1:b6:fe:34:29:0f:29:51:7a:2e:24:f4:f0:
ec:7b:85:79:db:17:5e:65:a5:db:cd:65:23:f1:e8:e3:79:06:
76:91:3e:9c:9c:47:fe:28:bb:9e:b9:9f:50:6a:ea:d2:0a:1b:
74:d6:68:7c:b3:b6:60:40:9f:91:4e:b1:6c:15:98:7f:3a:21:
d2:e4:af:ec:48:d4:44:4d:c6:bb:5c:93:bc:a1:15:b0:ac:b6:
fb:d3:73:26:af:35:fc:9b:76:cc:9b:67:72:2e:a8:52:2c:52:
66:9c:0e:2b:f5:e3:f1:46:d2:21:42:bb:e0:cd:23:29:32:2f:
06:82:0d:6b:dd:70:08:14:c4:84:ee:d9:5b:3e:03:bc:af:6c:
08:03:76:f6:81:9b:66:3b:fc:48:14:51:85:80:fe:80:b1:44:
09:cb:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:53 2025 by rpki-client