Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/liHslbRrhFXxomI4FB9MV22AIKA.roa
File: liHslbRrhFXxomI4FB9MV22AIKA.roa (raw, json)
Hash identifier: dEbKMi1y7LYT80pnlqucwSd9l/rmj7sOikS0PFXVlYk=
Subject key identifier: 96:21:EC:95:B4:6B:84:55:F1:A2:62:38:14:1F:4C:57:6D:80:20:A0
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 06AF7290
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/liHslbRrhFXxomI4FB9MV22AIKA.roa
Signing time: Sat 01 Jan 2022 07:01:02 +0000
ROA not before: Sat 01 Jan 2022 07:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62179
IP address blocks: 185.44.73.0/24 maxlen: 24
185.44.74.0/24 maxlen: 24
185.44.72.0/24 maxlen: 24
185.44.75.0/24 maxlen: 24
185.44.72.0/22 maxlen: 22
2a01:7220::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112161424 (0x6af7290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Jan 1 07:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9621ec95b46b8455f1a26238141f4c576d8020a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:2e:aa:d1:1d:3b:62:95:0b:26:c8:0d:e3:
75:9e:ac:d4:73:99:d5:d9:6e:88:0a:1c:ec:6c:38:
07:6c:cd:b2:d1:5d:41:f1:a7:11:f8:91:38:66:95:
98:36:04:e8:74:ed:00:a5:d2:e2:26:e3:6f:12:e2:
43:c2:37:06:ae:53:d2:51:cb:c6:fa:a9:97:ca:b1:
88:05:15:cb:8d:fd:43:8d:b0:80:79:e6:51:b8:54:
2d:e6:20:d4:a6:1a:3d:30:69:b4:fb:3b:fb:12:08:
00:27:e2:4a:47:76:45:87:b3:9c:a1:10:97:9f:77:
fb:59:3b:7b:b4:02:6f:94:9c:26:87:90:70:64:ef:
ff:f5:24:bf:fa:d0:04:72:96:aa:ff:12:4c:47:4d:
8b:25:9c:52:2a:ab:53:2e:4d:16:41:e3:be:93:3c:
de:c0:c7:fc:a3:bd:34:5f:55:5b:27:10:62:9b:ae:
f0:0e:f0:ac:64:ad:4d:d0:62:c6:0f:d0:ff:31:c2:
9b:67:72:de:52:80:67:12:87:18:36:ef:73:eb:71:
87:8f:4e:cc:96:0c:9b:ef:eb:8e:87:1a:61:40:a3:
8b:ea:ff:07:ec:fa:c9:00:fe:5e:88:e1:0b:00:15:
89:24:14:56:83:71:0e:78:6c:21:19:41:9a:91:da:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:EC:95:B4:6B:84:55:F1:A2:62:38:14:1F:4C:57:6D:80:20:A0
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/liHslbRrhFXxomI4FB9MV22AIKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.72.0/22
IPv6:
2a01:7220::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d1:56:7f:1f:08:3b:8a:db:7d:95:ac:61:d8:36:2f:20:f8:
b3:b1:45:2c:2a:e7:a5:57:00:53:00:27:41:72:c7:e5:6b:ff:
54:d4:eb:0e:6c:dc:8b:e0:58:fb:d2:bd:35:ab:8e:84:5a:93:
4a:c8:14:a5:8c:f3:69:70:de:6e:2b:bc:df:c7:02:93:42:bf:
89:30:8f:53:7c:99:84:1e:de:92:10:79:f1:92:bd:d2:f3:72:
ed:ec:25:a3:8d:e4:64:2b:19:80:69:a1:8c:bf:a3:31:38:46:
af:29:77:4b:9c:c5:80:26:a2:5b:d4:07:4d:77:18:e2:2e:55:
1b:a7:38:87:cb:1c:73:7c:61:fe:82:a1:c0:53:ae:c1:df:81:
f0:d9:e5:c4:aa:05:03:3c:06:8e:11:2b:88:95:bd:de:c5:a3:
45:81:08:58:94:fc:3d:da:89:90:2e:2c:27:fd:fd:67:65:44:
a2:87:12:cc:e0:ec:e7:0f:d2:f2:11:09:c9:59:1a:99:7b:24:
6f:a7:c9:ec:d5:c4:9f:c0:eb:64:a3:4f:07:f7:e7:aa:bd:d9:
30:c0:13:c2:db:5d:84:0d:6e:27:c6:28:af:83:cd:07:98:86:
59:27:b1:a5:24:2f:78:8c:a4:a3:4c:07:cd:da:58:c7:93:28:
4b:08:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:56 2025 by rpki-client