Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/AnQwcNZJur1j3SwxDbe0kMGpyXg.roa
File: AnQwcNZJur1j3SwxDbe0kMGpyXg.roa (raw, json)
Hash identifier: 8yvVgxR4/5BdMhoruS1j7A5ld8cpaziLSLZ0FUD90fk=
Subject key identifier: 02:74:30:70:D6:49:BA:BD:63:DD:2C:31:0D:B7:B4:90:C1:A9:C9:78
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 161E0201
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/AnQwcNZJur1j3SwxDbe0kMGpyXg.roa
Signing time: Sat 01 Jan 2022 10:01:08 +0000
ROA not before: Sat 01 Jan 2022 10:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15951
IP address blocks: 185.94.177.0/24 maxlen: 24
185.94.176.0/24 maxlen: 24
185.94.178.0/24 maxlen: 24
193.41.164.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371065345 (0x161e0201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Jan 1 10:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02743070d649babd63dd2c310db7b490c1a9c978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:b6:e0:9c:f5:e1:ce:e4:eb:3d:74:7c:a8:
20:3b:51:0f:b6:c2:08:84:9d:6b:98:1d:f7:8f:dd:
ab:11:94:1f:c7:dd:1a:b2:eb:9c:b8:fa:ca:8f:0a:
e2:be:79:59:f0:26:55:fb:c8:26:e1:be:8e:a1:45:
40:5b:c9:46:54:d7:f9:4d:bb:de:c4:5b:45:c2:be:
33:91:e3:a6:6b:65:98:9c:55:8b:51:f4:aa:a0:49:
da:fd:fd:2f:c9:d0:2e:8f:23:3c:29:f3:a5:51:9b:
69:53:fd:1f:21:2f:fd:1c:9d:59:e2:c1:27:dc:0f:
5e:18:51:cc:8b:02:85:3b:97:5b:6e:86:03:32:f4:
79:64:b9:05:f5:1a:bd:b9:52:98:00:de:0b:f4:4d:
d7:ae:68:d1:95:e2:49:40:e9:02:d6:13:04:f4:ae:
f3:7b:d0:89:68:f9:a2:39:4e:03:f0:55:95:4f:c8:
8f:13:43:d2:a8:b4:60:ba:76:cc:c4:bd:24:8c:58:
9f:f9:5d:46:83:60:4c:6e:76:d3:2b:ea:49:e3:0d:
d6:81:8a:30:59:d7:bb:75:7f:3a:a7:83:bf:73:13:
1a:73:83:4d:72:2d:d2:25:85:e8:29:4a:da:6d:24:
ff:5b:af:e6:ec:1b:58:62:2f:45:e2:41:8b:a3:7c:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:30:70:D6:49:BA:BD:63:DD:2C:31:0D:B7:B4:90:C1:A9:C9:78
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/AnQwcNZJur1j3SwxDbe0kMGpyXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.176.0-185.94.178.255
193.41.164.0/23
Signature Algorithm: sha256WithRSAEncryption
89:b6:71:2a:7a:4e:a4:e7:e0:a8:cb:e9:b3:7a:fa:3b:a7:c8:
7f:01:17:0f:cf:38:c2:b3:cc:f5:3e:af:38:d8:9b:4c:e5:9d:
45:f9:22:af:71:7b:f2:65:40:e3:5f:35:33:19:e4:47:c2:e8:
e9:77:32:f9:7a:bc:6d:9f:5e:3a:3b:b6:95:be:2a:22:af:93:
fb:e5:19:50:79:84:d2:d1:4c:c2:fc:f9:16:07:8a:af:a0:35:
c4:07:c7:ac:51:d9:b1:02:e7:a7:e5:cb:25:fd:79:2d:55:cc:
f6:aa:26:9f:86:88:a2:aa:84:be:0c:22:af:f4:db:da:db:3e:
d4:fa:0d:5a:06:82:5f:43:8e:c1:a1:7e:aa:87:21:ea:21:a3:
2b:34:69:af:9d:ae:43:de:e6:e5:74:6b:e2:43:24:76:f9:b7:
0f:a6:f4:b2:08:0f:22:b1:01:84:6f:e3:b2:98:a1:d4:77:89:
35:6e:c7:92:45:c0:cf:29:54:4c:25:70:a7:d0:52:e8:db:1c:
cb:d4:39:b6:ea:c7:cb:9e:54:82:ea:13:d8:53:95:80:3e:6b:
7f:07:92:ad:5c:38:2a:95:f6:a1:81:b2:82:45:36:37:2e:c4:
42:00:c3:59:6c:0f:17:03:d5:34:94:2a:ba:2d:1c:bf:51:6d:
30:94:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:37 2025 by rpki-client