Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/O2v7k8Ig7PnXb2vSC_QK7GKr7wE.roa
File: O2v7k8Ig7PnXb2vSC_QK7GKr7wE.roa (raw, json)
Hash identifier: 7BrQPEiThUQ4UZ5sdpLNu8J+hv1scOgueSi/tWLG6Nc=
Subject key identifier: 3B:6B:FB:93:C2:20:EC:F9:D7:6F:6B:D2:0B:F4:0A:EC:62:AB:EF:01
Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial: 0188975F0FCD597A3FD06B7E985B3243B945
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/O2v7k8Ig7PnXb2vSC_QK7GKr7wE.roa
Signing time: Wed 07 Jun 2023 19:39:29 +0000
ROA not before: Wed 07 Jun 2023 19:39:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200485
IP address blocks: 185.104.156.0/24 maxlen: 24
185.104.159.0/24 maxlen: 24
185.104.156.0/22 maxlen: 22
185.104.158.0/24 maxlen: 24
185.104.157.0/24 maxlen: 24
2a06:4200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:5f:0f:cd:59:7a:3f:d0:6b:7e:98:5b:32:43:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Validity
Not Before: Jun 7 19:39:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6bfb93c220ecf9d76f6bd20bf40aec62abef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:28:53:82:ab:68:dd:6f:f0:bd:fd:73:81:
4f:52:dc:e9:e3:17:70:d4:fc:26:6b:52:52:9d:4f:
67:0d:5e:7d:8b:93:2d:98:44:cf:2d:89:e5:bd:09:
26:8a:08:a2:4e:4c:a7:6b:31:c3:c0:20:da:fd:82:
65:db:07:1d:ba:c6:55:fc:31:42:27:e5:9c:cb:38:
50:ef:d2:c3:24:c0:40:62:74:98:5f:87:7e:34:37:
5a:2a:bb:9c:5e:20:e6:09:26:b3:25:f3:6f:2e:c2:
5a:02:6b:89:35:76:a9:3a:7a:dd:14:5b:38:53:e3:
b9:9f:85:35:b3:5d:4f:0b:ad:3c:aa:30:1b:c2:9e:
ef:99:46:7f:ab:b8:20:fa:97:b7:ad:b1:b5:6e:2b:
18:99:36:09:6c:c8:39:cd:08:ba:d7:c8:9b:12:e8:
5a:a5:5e:38:53:5c:0d:dc:0f:e0:d2:d0:e4:5e:66:
35:f9:11:cc:e2:7f:34:4a:ac:70:4e:cd:aa:79:ae:
08:72:a8:ce:7c:e8:33:b5:1c:9e:05:21:8c:ca:10:
c6:21:55:0b:7f:89:de:03:bd:6e:34:6e:b4:fc:20:
35:1e:23:7d:4e:39:db:73:38:0e:b9:b8:ee:ae:11:
e6:34:b2:1e:ac:62:d7:10:9f:18:39:8b:e7:ed:18:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:FB:93:C2:20:EC:F9:D7:6F:6B:D2:0B:F4:0A:EC:62:AB:EF:01
X509v3 Authority Key Identifier:
keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/O2v7k8Ig7PnXb2vSC_QK7GKr7wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.156.0/22
IPv6:
2a06:4200::/29
Signature Algorithm: sha256WithRSAEncryption
00:46:ee:99:0e:23:f5:91:a2:73:38:92:5c:ae:79:4c:a0:8e:
92:b4:3c:00:4b:f5:17:67:fe:c8:a7:cc:b7:9c:4f:02:1c:4d:
2b:b8:76:59:58:9b:4d:11:1d:37:fb:ac:30:b0:f8:e0:ef:ea:
99:95:d7:51:04:be:60:a3:d4:ea:74:7e:d7:8b:c2:cc:1c:34:
d1:22:49:ef:33:3a:32:26:af:2f:40:62:c5:88:6d:c1:42:ee:
d3:f0:3a:20:62:2f:bb:c9:94:d8:d9:56:a3:a0:2a:f4:67:16:
d5:e3:7e:88:1d:57:c6:86:87:e4:e8:ac:6a:a5:64:ee:7a:87:
90:6e:cc:66:b8:6a:5f:f8:42:5b:88:49:b1:9f:a1:fe:79:e7:
21:5d:77:00:09:1c:a2:29:a8:f7:90:ef:64:ae:f4:27:88:2a:
a4:d3:c8:e1:33:da:c4:43:82:a8:fb:03:55:38:7a:ad:12:26:
33:92:5b:30:76:76:33:06:37:e3:0e:2f:75:32:4e:5b:59:fc:
8b:16:74:2b:74:7a:5a:1e:2c:18:e3:89:5e:52:57:53:87:b7:
91:08:03:8b:74:a2:1c:f9:1f:21:d7:af:3b:b1:d2:7e:c2:e9:
96:f2:9e:ba:e5:5e:5c:f1:2c:c3:13:e3:d0:f3:4b:7b:84:1c:
79:c6:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:50 2025 by rpki-client