Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Kq2N2GKJ7Jh0VbUWwwf1sZcPAfk.roa
File: Kq2N2GKJ7Jh0VbUWwwf1sZcPAfk.roa (raw, json)
Hash identifier: BBCZRCyqCzfJXswtsYAfUDc/VF95TEjnSVAiRBEXpjs=
Subject key identifier: 2A:AD:8D:D8:62:89:EC:98:74:55:B5:16:C3:07:F5:B1:97:0F:01:F9
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 01856F9DB601A6775033135C8790BDDDEFE4
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Kq2N2GKJ7Jh0VbUWwwf1sZcPAfk.roa
Signing time: Sun 01 Jan 2023 23:14:44 +0000
ROA not before: Sun 01 Jan 2023 23:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.177.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b6:01:a6:77:50:33:13:5c:87:90:bd:dd:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 23:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aad8dd86289ec987455b516c307f5b1970f01f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:70:bd:ed:5c:59:9b:ac:da:a8:e8:72:92:
67:02:9d:05:65:7a:9a:44:6a:e3:75:74:63:f4:ff:
74:92:e0:d6:92:ab:07:4d:2a:e9:d8:ad:0d:aa:b7:
ec:39:34:f3:fa:a2:4d:2d:1f:d5:4b:a3:97:43:39:
b5:9a:bc:98:f9:d9:87:8c:3f:ec:96:af:3f:1e:f6:
10:d7:0b:61:ff:8c:34:a3:5f:bf:4a:3e:88:3b:15:
bf:10:42:82:31:ee:88:15:3e:d3:45:f8:ca:c3:12:
b4:4f:c0:e0:29:8d:56:66:33:e1:c2:3c:11:7a:a3:
13:12:60:77:ce:da:24:8d:43:91:2b:95:b1:50:27:
b3:a3:24:0a:a4:0d:ca:21:6e:e3:73:03:bf:ed:b1:
51:ed:c9:2e:5c:6b:14:a5:07:ac:4a:79:72:a8:e8:
64:8f:a2:54:fa:8a:88:c0:82:9a:e6:19:83:78:b4:
cb:06:7f:6b:90:a3:cd:00:ba:24:7b:c7:4c:d0:6a:
9d:ca:b4:47:51:80:75:60:08:97:09:ab:1e:fb:d2:
8d:2a:72:ba:c0:fd:2f:ba:50:dd:75:64:39:2f:d3:
55:93:1d:61:fe:41:0e:b4:e6:68:36:2b:ac:ab:6d:
07:da:ce:cb:8b:e3:c3:8b:ab:2a:9d:a2:c5:06:c6:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AD:8D:D8:62:89:EC:98:74:55:B5:16:C3:07:F5:B1:97:0F:01:F9
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Kq2N2GKJ7Jh0VbUWwwf1sZcPAfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:35:73:7a:97:28:86:db:43:88:56:e8:99:58:92:84:9c:89:
d3:90:0d:73:2d:34:57:cf:4d:69:4f:68:2c:cc:a1:77:c2:ed:
78:36:59:f1:e1:a4:56:6e:0f:73:12:46:3c:aa:cb:e6:c0:db:
bd:d5:02:6f:fd:b8:49:bb:c9:8a:57:41:98:98:28:f0:d5:ea:
c6:5e:c3:84:86:f1:d6:31:54:9f:92:4d:cb:fb:79:42:ad:23:
e8:d8:7e:0d:35:28:20:f2:f7:68:42:f2:64:81:91:98:2b:cc:
68:14:b8:aa:0c:9d:49:cf:38:d7:ed:7a:25:81:1b:0e:db:3f:
c3:49:8d:46:ad:9d:60:0d:0f:e8:54:d3:f3:36:12:4d:e1:a2:
27:af:0a:87:74:b1:58:1c:59:8e:07:32:a2:fd:11:6c:ee:78:
b1:36:5f:f4:0c:e7:6a:08:c8:32:29:e4:a4:71:e0:92:88:a9:
a8:12:70:ff:a1:3e:2c:36:b6:70:a9:e7:5d:49:da:b7:18:81:
1e:fa:e5:1d:1c:fb:4b:79:99:57:0f:b3:b2:77:8d:1a:5f:23:
e1:a7:b4:d3:13:96:ad:68:ad:20:3c:2f:c0:d4:7d:9e:66:40:
33:f3:09:ad:f5:e0:53:cf:15:e0:df:5b:d3:35:09:65:92:27:
6d:a7:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:33 2025 by rpki-client