Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/gyNkL0tVO8WH4arGGlG3VqR1nok.roa
File: gyNkL0tVO8WH4arGGlG3VqR1nok.roa (raw, json)
Hash identifier: mUEtfY0OmZYAIedpMxwA8EyF0iD8Lg/uMVrRuwyN94E=
Subject key identifier: 83:23:64:2F:4B:55:3B:C5:87:E1:AA:C6:1A:51:B7:56:A4:75:9E:89
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 018571154821B8BDE1563C0CC4E654E3E7E5
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/gyNkL0tVO8WH4arGGlG3VqR1nok.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208923
IP address blocks: 185.70.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:48:21:b8:bd:e1:56:3c:0c:c4:e6:54:e3:e7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8323642f4b553bc587e1aac61a51b756a4759e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:38:b0:4e:a0:c8:76:2c:c2:d8:5a:d6:4b:
c4:76:63:be:68:e4:c0:4f:a8:55:22:ed:65:ca:0b:
36:9e:59:ae:4b:dc:f2:2e:3f:dd:58:f6:96:65:d2:
19:3c:f0:91:5d:dd:88:67:62:de:eb:b0:a4:00:8e:
56:94:d7:27:7b:eb:b4:2a:d0:c9:e7:97:43:a9:23:
e9:1f:5c:4f:b5:92:a4:0b:16:f9:44:b9:19:89:94:
0e:c3:bb:09:c6:57:fd:f4:59:8d:6d:b8:e4:e1:20:
8c:a1:c3:8f:af:03:a3:28:0c:5b:c0:0f:41:6c:40:
b2:af:f9:5c:23:93:46:6f:f7:99:fa:e6:9e:8c:27:
52:5b:cd:16:4b:8b:8e:84:d9:5d:95:77:f8:c5:1f:
c0:77:29:52:f9:62:1b:00:b9:b7:35:fd:d6:ce:da:
eb:17:2c:f2:5b:20:47:d8:47:34:03:76:ff:4f:66:
41:d6:f6:89:26:4f:3e:f2:83:3b:de:1c:89:82:bd:
9b:49:68:e4:3e:fc:e8:05:e3:8f:f1:49:f4:fd:e0:
f3:c5:97:46:bd:51:d1:81:83:b3:aa:31:b8:86:d9:
a6:8a:5b:be:fa:8f:b5:cc:04:a8:73:93:93:9b:1f:
27:84:f9:1f:f6:c3:2c:a7:9a:94:95:7d:3c:89:48:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:64:2F:4B:55:3B:C5:87:E1:AA:C6:1A:51:B7:56:A4:75:9E:89
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/gyNkL0tVO8WH4arGGlG3VqR1nok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:a5:cb:d7:f0:83:b3:40:b8:c1:aa:fe:fb:a1:21:81:50:
2f:b3:f5:d4:6d:e4:0c:4e:48:f2:36:81:8b:7d:8e:c6:8c:f0:
11:c5:23:71:92:21:b3:04:d0:7c:c2:04:91:86:e2:b5:31:84:
f4:6c:6f:ae:05:2e:bc:ea:17:b5:81:04:af:57:ad:09:d7:d0:
ce:d1:fd:f9:32:b2:55:c4:cc:61:4b:8f:a4:02:cf:a0:6a:a3:
c2:3b:a9:57:33:0f:81:a0:f3:37:78:ed:55:9b:cd:91:ff:6d:
09:a5:e5:40:ba:93:33:65:1c:0e:db:7f:cc:80:73:3f:9e:53:
c4:b1:49:60:e4:f5:7b:a1:53:8e:eb:e5:52:70:6b:1b:f2:ee:
13:7f:54:d1:c6:63:48:51:a8:4a:ec:8b:92:c6:5c:d7:1e:7b:
66:73:e4:89:ff:6b:b9:6a:75:c1:33:29:44:8a:8d:b1:ec:99:
6e:17:4d:27:bb:71:64:0c:d7:6c:22:96:b3:ef:10:9f:48:d4:
56:61:54:0b:e6:67:e5:e9:cc:a3:a5:10:e9:e2:af:2e:56:c6:
65:3d:d3:f6:13:82:5b:fb:42:2e:7e:e2:c2:1f:5d:37:d0:4e:
39:55:27:1e:c1:dc:53:ba:ca:5d:16:65:a6:19:4d:ed:d1:67:
3e:4c:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:21 2025 by rpki-client