Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/Y5AVR75uba0IA-5SX6VVumnhrGI.roa
File: Y5AVR75uba0IA-5SX6VVumnhrGI.roa (raw, json)
Hash identifier: teGo1CUxxPxT+qJyxOOrt37BhzfnyDJPGjeL1w3GePM=
Subject key identifier: 63:90:15:47:BE:6E:6D:AD:08:03:EE:52:5F:A5:55:BA:69:E1:AC:62
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 0B74A616
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/Y5AVR75uba0IA-5SX6VVumnhrGI.roa
Signing time: Sat 01 Jan 2022 11:03:48 +0000
ROA not before: Sat 01 Jan 2022 11:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206991
IP address blocks: 185.169.64.0/24 maxlen: 24
185.169.65.0/24 maxlen: 24
185.169.67.0/24 maxlen: 24
185.169.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192194070 (0xb74a616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Jan 1 11:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63901547be6e6dad0803ee525fa555ba69e1ac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:92:c7:a6:db:05:a2:34:f8:c7:a0:40:3f:
87:29:14:e9:89:8f:e2:72:09:46:ad:a5:6f:9d:4c:
18:c7:1e:59:28:9f:f6:a9:11:40:5a:d7:7a:de:22:
e0:bc:ad:57:a4:c5:81:1e:c1:5e:91:b7:41:87:7b:
25:94:bf:4b:10:b3:f4:bb:a7:f9:b1:64:4d:77:a8:
ee:1e:15:a3:ea:d1:ef:41:9d:b1:9f:4b:02:2b:5d:
e4:52:1c:58:97:c4:8b:f8:a0:42:76:e6:43:af:17:
dd:10:23:87:54:2a:1c:ea:89:45:99:61:bd:56:15:
78:fc:cf:78:79:1c:d7:68:09:75:51:95:8f:1f:f5:
f7:fe:38:90:d2:d7:73:55:98:03:f7:ca:c4:5b:f6:
7a:9b:a0:23:a5:1c:1a:71:d9:15:a4:6d:e7:75:d1:
8f:6f:e4:c8:40:cd:2a:06:03:73:dc:40:a5:d0:80:
1e:31:90:19:b3:82:5d:7a:10:7c:53:9c:75:29:dc:
06:6d:35:2f:d6:56:70:66:ae:b7:89:06:09:35:b5:
ec:5c:96:df:86:7f:d4:8d:eb:89:04:c5:fc:29:b0:
84:77:dc:3b:2b:ef:dd:b0:d4:47:1e:f2:15:e0:a1:
06:70:10:45:59:c4:5c:24:fd:36:f1:a2:d8:a7:31:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:15:47:BE:6E:6D:AD:08:03:EE:52:5F:A5:55:BA:69:E1:AC:62
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/Y5AVR75uba0IA-5SX6VVumnhrGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:a1:dc:a2:4d:ec:0b:50:07:91:89:f3:71:1e:d1:e8:94:91:
c9:b8:f7:6c:19:42:8f:76:98:53:37:9b:6e:0e:48:da:5e:0c:
37:1d:5d:e7:ae:5f:77:40:7a:92:70:d8:a6:91:f1:28:b7:3b:
c5:7e:06:07:16:c3:fe:0c:27:72:86:a8:d1:85:f7:5b:90:06:
06:20:05:8e:ac:2e:7e:62:ea:c9:3a:08:54:6b:3b:ea:5e:3b:
42:8c:81:c2:43:99:b3:9c:95:38:58:b2:36:6a:2e:a9:c3:bf:
e8:5d:c7:d1:d9:93:77:ff:2e:93:1d:6e:61:1d:a0:a6:45:ea:
61:1d:33:6d:bd:60:05:27:be:ce:a8:07:63:de:6a:eb:0b:d7:
8c:0e:fe:c4:6a:b8:29:9e:96:42:14:47:4b:ed:61:b0:82:4a:
56:5b:1a:39:aa:3b:39:6d:ad:a4:a0:5a:46:78:3d:c5:d8:67:
20:3a:02:60:88:3b:bf:97:ae:7a:11:6d:95:6e:5b:24:23:39:
8d:71:98:dd:28:c4:3c:c4:f5:dc:01:2a:60:fe:8c:a5:e7:47:
38:42:f2:fd:6a:dd:b6:05:7a:ff:3e:40:3c:de:8f:fc:e1:26:
db:e6:55:ac:3f:96:44:79:86:a1:73:45:79:28:15:3f:5d:4b:
c7:e0:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:33 2025 by rpki-client