Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zImilfwJ2is4I-MGOIYxhY0PVQo.roa
File: zImilfwJ2is4I-MGOIYxhY0PVQo.roa (raw, json)
Hash identifier: go3VMLbeby7k583L1BzsIXhCshzCi6WAerGOAx6NgBs=
Subject key identifier: CC:89:A2:95:FC:09:DA:2B:38:23:E3:06:38:86:31:85:8D:0F:55:0A
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 09A27978
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zImilfwJ2is4I-MGOIYxhY0PVQo.roa
Signing time: Sat 01 Jan 2022 09:01:23 +0000
ROA not before: Sat 01 Jan 2022 09:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61347
IP address blocks: 185.9.221.0/24 maxlen: 24
185.9.222.0/24 maxlen: 24
185.9.223.0/24 maxlen: 24
185.9.220.0/24 maxlen: 24
2a02:df40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161642872 (0x9a27978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jan 1 09:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc89a295fc09da2b3823e306388631858d0f550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:af:db:7e:d4:88:eb:7d:d4:b9:f6:5c:ff:
a1:05:ff:24:1f:af:33:db:6d:68:38:d9:f1:fc:1f:
7c:5c:a5:0c:1f:3d:dc:90:39:88:1b:5b:d3:22:46:
78:de:0f:08:40:a0:ba:bb:2a:c1:76:c4:5e:86:31:
00:be:28:e0:20:04:d2:ba:30:9f:b6:8c:a4:19:2c:
a1:61:af:ba:78:0c:b7:c8:6e:29:54:cd:3d:4d:9e:
8f:89:67:8c:64:59:e0:8c:72:34:27:e7:aa:4e:40:
ae:14:4c:a5:3d:9a:7e:c4:79:d9:4b:30:55:1f:4d:
6b:e9:3c:51:66:d2:76:24:a3:d9:90:af:69:58:38:
3f:73:2e:12:4d:d4:81:93:ba:db:b2:9d:c2:0d:ce:
37:e8:fc:dc:16:2b:0c:03:ef:2e:7a:af:8b:60:29:
0e:1e:2e:12:75:82:88:75:15:77:c5:0f:37:1d:b0:
c0:29:b8:74:dc:e1:cf:fd:15:de:b8:82:07:eb:93:
3e:a3:79:5e:49:ce:06:7e:5d:cf:b7:01:ae:dd:99:
98:74:24:ee:3d:f1:ff:ba:45:fe:a2:d3:b1:32:4d:
e2:11:51:00:00:cb:25:22:6d:41:6d:de:97:e4:41:
c1:f0:1d:a5:4f:26:37:08:cb:0b:e5:39:67:72:e9:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:A2:95:FC:09:DA:2B:38:23:E3:06:38:86:31:85:8D:0F:55:0A
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/zImilfwJ2is4I-MGOIYxhY0PVQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.220.0/22
IPv6:
2a02:df40::/48
Signature Algorithm: sha256WithRSAEncryption
cc:61:55:bb:ee:5b:50:22:ba:b1:6e:66:38:08:0b:a8:49:ac:
03:af:85:1c:49:14:5f:a7:60:e5:08:63:93:71:fb:91:aa:fe:
59:e3:e7:1b:4e:08:f6:0b:c5:15:09:c1:71:79:6f:3f:1e:08:
01:65:ce:b8:57:22:7e:08:ee:ac:5a:9a:6b:47:d4:cb:c9:90:
3a:d4:e7:56:5d:7f:d6:2b:88:6f:4e:5b:f4:b7:90:27:09:f1:
05:49:98:75:1b:a5:31:94:ad:c3:3b:4c:4a:df:fd:d1:a3:c1:
9f:fd:6a:86:18:94:81:45:27:6c:22:5c:08:10:3d:7c:fb:ae:
fb:28:03:c3:b1:45:f3:ef:19:45:b8:f9:7e:f5:74:5c:76:67:
a4:97:cd:ae:d0:a0:c6:45:1f:5f:d7:43:d2:99:0e:ed:41:ba:
48:fe:02:69:05:cf:10:1e:d6:45:d9:34:db:72:be:43:cd:c2:
9a:1c:c1:b6:8d:dd:7a:d9:da:cc:85:e5:66:d9:13:14:a5:e9:
7f:89:7f:da:46:8e:c9:cc:0e:d9:b5:af:d2:7b:b4:9c:b9:fb:
2b:6a:07:4e:cb:12:a3:3c:40:34:d6:0f:c4:03:69:8a:52:cf:
a9:8a:d9:a7:e3:db:bd:d0:63:57:81:65:9a:ce:05:f0:f0:df:
a0:d5:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:22:25 2025 by rpki-client