Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2P5MOtJOBy0y0mI_h6dSiOcobC4.roa
File: 2P5MOtJOBy0y0mI_h6dSiOcobC4.roa (raw, json)
Hash identifier: wxj7yD3wQwP0D8Wy7R5zmthB/sxeOADqtWUL3XDY5eA=
Subject key identifier: D8:FE:4C:3A:D2:4E:07:2D:32:D2:62:3F:87:A7:52:88:E7:28:6C:2E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01845BE28C282D6C1542D0CEFFF3F179F63D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2P5MOtJOBy0y0mI_h6dSiOcobC4.roa
Signing time: Wed 09 Nov 2022 10:14:44 +0000
ROA not before: Wed 09 Nov 2022 10:14:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.203.160.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:e2:8c:28:2d:6c:15:42:d0:ce:ff:f3:f1:79:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 9 10:14:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8fe4c3ad24e072d32d2623f87a75288e7286c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:93:17:68:32:9e:f2:cb:95:95:dd:78:4b:
8d:f5:0d:6c:f4:b9:fd:b3:69:9c:cc:f3:6a:4c:ed:
4e:64:16:e8:4e:f4:92:fd:d6:96:37:42:01:4d:e2:
d8:04:e2:1a:61:56:d3:fd:0a:54:40:4d:13:9f:a9:
11:27:6a:6e:a1:cf:6e:c4:c5:c9:df:6d:f2:67:b2:
7f:74:7b:fb:4b:f8:0c:2d:98:af:c0:ab:a0:79:14:
be:1f:f3:88:26:41:6b:b2:33:66:94:29:5e:ab:82:
1a:4f:22:17:71:1b:9c:cd:03:16:a0:3d:36:8a:d7:
16:9a:c5:fa:aa:3d:d7:90:57:15:ae:00:f2:60:49:
f8:a1:ec:21:68:93:70:27:8f:e6:b3:d5:f7:e7:63:
f6:a6:cb:43:7e:be:b4:ba:20:5f:52:ce:89:80:5a:
32:e3:06:61:62:fe:8d:c2:ac:7f:96:80:ec:5e:f0:
09:69:f7:2b:db:df:16:c4:06:94:77:b0:ea:30:26:
ef:1f:65:31:9d:29:25:73:af:9a:d1:cf:13:24:83:
f6:2e:ab:6b:ce:27:4f:28:46:7f:3f:33:3f:1f:a9:
0e:ca:f1:6f:b6:8e:3c:6f:fa:ed:91:b8:69:47:88:
a7:7f:68:19:c8:41:7c:a4:2a:1a:a6:39:f6:88:e1:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:4C:3A:D2:4E:07:2D:32:D2:62:3F:87:A7:52:88:E7:28:6C:2E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/2P5MOtJOBy0y0mI_h6dSiOcobC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/22
109.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:c1:32:0a:e3:50:79:d0:ea:8b:3d:bc:e8:3a:4c:27:32:a0:
33:e1:47:5a:a8:d2:ea:45:1e:e2:6f:a4:2f:fa:e8:13:33:82:
d1:36:af:b9:15:e7:8b:91:3a:e9:f8:67:8d:a4:af:0f:09:ee:
86:ef:7e:f0:97:00:c0:72:11:6d:f4:5b:4e:4b:4e:fa:55:d5:
f9:6f:8a:e4:c7:80:af:ca:19:38:28:a5:fd:34:96:aa:84:89:
a5:80:49:b7:2f:9c:33:70:08:fa:75:41:13:cd:df:f9:77:b0:
13:ea:d0:3e:73:7b:37:45:cc:6e:c5:bf:45:b1:07:f9:8c:77:
f7:4d:9c:0a:78:45:5d:b6:6a:07:16:b0:88:75:ab:ed:ae:f5:
94:41:f4:10:00:82:80:a8:d3:4f:e2:96:26:3f:b8:a5:4f:99:
7d:83:ec:70:31:d9:d9:69:77:7c:3a:77:08:a9:9d:39:ba:5a:
06:e0:15:bd:5b:a9:52:83:c5:22:e1:88:0a:d7:72:a9:57:4a:
5f:11:fa:8d:fd:10:c8:0b:18:31:64:19:c1:61:27:4d:4b:88:
6c:92:72:25:6d:1e:18:e1:02:74:0e:42:14:e6:16:02:00:5c:
dd:a7:74:cd:f3:36:ff:31:50:dd:99:f7:46:53:a8:4f:c9:3b:
87:99:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:33 2025 by rpki-client