Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/sWCrsPV-hFdDcWGpgQlBwV_59aY.roa
File: sWCrsPV-hFdDcWGpgQlBwV_59aY.roa (raw, json)
Hash identifier: +DWHFRZqD/WkLVWYxVJA5Ks7HKNsYmRYwgHDj3Ihx+4=
Subject key identifier: B1:60:AB:B0:F5:7E:84:57:43:71:61:A9:81:09:41:C1:5F:F9:F5:A6
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 01856D93D1D7A2CFBC8AA4F9F7C8947AD74A
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/sWCrsPV-hFdDcWGpgQlBwV_59aY.roa
Signing time: Sun 01 Jan 2023 13:44:41 +0000
ROA not before: Sun 01 Jan 2023 13:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.132.0/22 maxlen: 24
5.149.32.0/19 maxlen: 24
2a00:d360::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d1:d7:a2:cf:bc:8a:a4:f9:f7:c8:94:7a:d7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Jan 1 13:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b160abb0f57e8457437161a9810941c15ff9f5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:c7:60:33:65:8f:b9:86:66:32:af:c6:cf:
06:64:66:47:0f:75:15:c4:70:1e:46:a0:9f:12:ff:
c0:5e:dd:22:8e:67:b2:7a:95:a1:08:e6:d7:17:17:
cd:ab:b9:a1:82:6a:3c:15:0e:28:39:6c:6f:04:e4:
de:99:33:d4:61:72:46:54:4c:25:4b:33:4f:55:3a:
d5:da:4d:7f:ab:b6:a0:83:62:92:be:76:d0:b9:0a:
2e:f9:15:83:a1:63:dd:4c:ff:00:c6:d8:da:98:f0:
6c:24:df:80:a8:da:fa:21:08:59:e2:3f:5e:b6:44:
38:82:2e:e1:79:b7:05:69:be:6f:46:aa:4c:29:20:
88:21:ac:cf:a0:fa:28:b3:1d:6b:34:5d:c2:32:47:
1c:a3:68:39:7a:b5:ac:b7:2b:fc:61:fa:c5:71:49:
5b:6d:05:93:7e:ba:23:70:d4:7b:ae:e7:35:fa:65:
7b:21:b4:bc:a7:c6:8e:f8:ca:50:fe:f3:f9:64:9c:
03:fe:56:8f:0c:f4:14:63:da:4d:aa:b1:ef:9f:b1:
6e:9b:bd:7a:6a:7a:d9:b8:fe:a3:43:78:67:0d:02:
42:f8:46:4a:2e:46:9a:e6:f4:39:a7:20:fe:e0:ed:
f7:fc:30:61:90:34:bf:de:66:d1:51:49:d0:ca:89:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:AB:B0:F5:7E:84:57:43:71:61:A9:81:09:41:C1:5F:F9:F5:A6
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/sWCrsPV-hFdDcWGpgQlBwV_59aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.32.0/19
185.74.132.0/22
IPv6:
2a00:d360::/29
Signature Algorithm: sha256WithRSAEncryption
62:0d:5d:65:23:c0:b0:34:51:c5:cb:ca:c5:9b:d5:a1:71:08:
70:27:e2:c8:bb:68:8a:86:e4:30:17:b9:8d:35:49:32:da:56:
d5:8a:3d:e2:22:b3:73:70:ff:b4:ce:a6:11:50:3e:74:0e:7e:
0a:82:ba:d8:3e:32:dc:be:3d:e4:cd:25:b3:7d:32:6f:c5:80:
f0:c7:32:0d:b2:68:82:bb:5c:88:df:1c:ad:71:0b:2b:75:9d:
8a:c7:39:15:7c:eb:64:a4:9f:1e:8f:ae:6d:66:06:ee:75:56:
0f:82:07:0c:12:10:9a:df:1a:b9:4c:69:14:e2:38:24:a9:14:
6b:b3:4b:31:41:a2:97:c8:b4:aa:c3:93:f6:58:60:84:9b:f9:
f9:28:2b:77:ba:15:14:b2:0a:20:13:cb:7b:8d:c0:67:78:19:
b5:df:11:7e:5b:61:1c:68:6e:10:0f:86:32:b5:13:6f:18:fb:
87:70:51:6a:f0:0f:78:de:4d:8e:2c:06:ed:68:26:14:6a:fa:
e4:3f:31:9f:37:ec:7a:cc:f2:cd:a4:97:d8:f9:be:b6:4c:f9:
eb:f4:49:28:61:49:21:30:da:4e:b0:49:a3:6e:fe:53:d8:8a:
06:5a:b9:e0:c5:78:c0:83:2c:1f:84:28:e4:ee:11:c1:be:14:
b3:2e:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:49 2025 by rpki-client