Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/gn3VKppOsy5QV7FYyhbb6gQ8JaA.roa
File: gn3VKppOsy5QV7FYyhbb6gQ8JaA.roa (raw, json)
Hash identifier: eOIBkXT93uPNl2+hRZQGBqnGm/LjZiQkbVPbaDymyro=
Subject key identifier: 82:7D:D5:2A:9A:4E:B3:2E:50:57:B1:58:CA:16:DB:EA:04:3C:25:A0
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0188143C324805B57D86203B791A06A98299
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/gn3VKppOsy5QV7FYyhbb6gQ8JaA.roa
Signing time: Sat 13 May 2023 08:31:09 +0000
ROA not before: Sat 13 May 2023 08:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 185.229.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:3c:32:48:05:b5:7d:86:20:3b:79:1a:06:a9:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: May 13 08:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=827dd52a9a4eb32e5057b158ca16dbea043c25a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:24:2d:eb:a4:92:76:37:80:4c:aa:25:4e:
f1:c3:5c:03:bd:51:dc:07:d4:9a:38:fc:5b:bd:20:
2e:77:cc:fd:ee:5f:49:f3:e5:08:fd:37:e1:58:8c:
21:6b:0a:6d:36:13:4d:b5:89:e6:1a:a4:ab:aa:76:
c8:0a:29:25:a8:34:6a:41:8f:47:43:5f:ed:79:b6:
40:80:54:a9:92:e1:0b:0a:39:9b:74:99:4c:f6:25:
0d:dd:d2:e8:68:44:50:83:d3:4a:5c:b5:75:35:d1:
a1:a6:ec:52:d9:92:0d:ea:81:59:f1:2a:9f:e8:14:
b7:ac:7d:10:82:3d:37:e5:66:b1:f0:72:58:c9:54:
9a:c0:18:6a:16:97:5e:4c:ed:88:bd:c0:8d:61:15:
07:bd:67:d9:7c:bf:01:bb:d6:56:4c:a7:86:6c:20:
e1:c5:64:5d:0b:12:5f:de:4e:7b:57:a2:3f:1c:1a:
98:92:77:07:a2:bd:64:1a:79:67:d2:29:d2:69:4b:
1e:be:f1:4c:45:a6:c2:df:a4:26:ab:46:6c:1d:d2:
47:26:23:be:f7:b3:79:79:e1:33:87:17:f0:45:d4:
2c:e9:3e:15:e4:4d:00:d2:2e:01:1d:be:6c:10:e7:
08:d3:7b:b3:69:9e:e2:d8:88:83:74:d9:91:dd:66:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:D5:2A:9A:4E:B3:2E:50:57:B1:58:CA:16:DB:EA:04:3C:25:A0
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/gn3VKppOsy5QV7FYyhbb6gQ8JaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.204.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5f:8c:0b:5a:54:87:60:5d:16:20:d1:a1:28:82:e1:b5:7e:
89:b8:d8:60:91:d8:f1:29:8b:29:ba:51:9c:1f:2e:b9:b7:97:
5b:bd:09:1b:5d:a9:9a:b8:67:0e:2f:d4:8d:f1:c6:d9:39:e5:
52:a9:87:34:93:9d:eb:b6:a4:d2:e2:35:67:66:02:9b:2c:fe:
37:d6:e9:cd:52:b0:55:ae:8d:8c:e5:e1:1d:7b:36:32:84:7c:
91:e0:60:6a:d0:72:19:91:30:53:c3:f8:cc:35:ac:80:99:2f:
8d:4f:6c:2b:6a:d7:8d:f6:d0:a2:dd:2c:a1:8a:18:90:12:40:
09:a4:de:93:4f:be:ab:3b:e7:ff:d5:70:86:dc:ab:ab:e2:13:
7d:4e:c5:eb:28:7a:36:44:28:6e:e7:af:c6:81:f8:73:b5:ef:
74:89:bf:a2:d2:28:b1:3d:ee:71:14:c3:3a:a7:15:78:47:d8:
12:cf:9d:f5:10:a2:13:ed:a3:32:a6:84:8b:f8:98:53:a9:d4:
b0:6f:17:44:45:4b:26:34:b5:8b:a1:18:e2:5d:c5:a2:57:d1:
9a:ca:2a:72:4e:dd:46:b0:1b:eb:56:90:23:78:7a:2d:7a:45:
36:3c:5f:d0:2d:26:d6:36:ae:81:33:79:31:98:53:e4:c6:20:
75:95:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:46 2025 by rpki-client