Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/B5TXCknLInJNLVL1rhCcmVDcBGI.roa
File: B5TXCknLInJNLVL1rhCcmVDcBGI.roa (raw, json)
Hash identifier: Jm1dSJtei9fkI6SQ07YGqkMseWo5eosjRFMAxZp5Yjg=
Subject key identifier: 07:94:D7:0A:49:CB:22:72:4D:2D:52:F5:AE:10:9C:99:50:DC:04:62
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0185B9D739ADAC3A9E58A0C60A18499F6681
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/B5TXCknLInJNLVL1rhCcmVDcBGI.roa
Signing time: Mon 16 Jan 2023 09:09:28 +0000
ROA not before: Mon 16 Jan 2023 09:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203905
IP address blocks: 185.33.169.0/24 maxlen: 24
185.33.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:d7:39:ad:ac:3a:9e:58:a0:c6:0a:18:49:9f:66:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jan 16 09:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0794d70a49cb22724d2d52f5ae109c9950dc0462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:63:0e:ce:d3:ea:e6:98:be:fb:6e:22:34:
0b:03:1c:69:da:34:e0:67:6d:6d:cf:51:14:78:e9:
a3:97:39:58:c0:5f:86:b6:d1:b6:de:41:4f:44:c8:
75:33:bd:bb:31:38:89:ae:da:99:3e:06:fe:f6:6e:
a6:9a:ec:b8:ca:9d:68:dc:1d:13:37:0e:e3:26:89:
1a:07:1a:1d:42:9b:af:46:b9:d3:85:85:7d:26:16:
fc:dc:61:df:08:c6:61:6f:16:c7:7d:6a:bf:85:ca:
c5:06:90:82:c6:1f:9b:dd:45:72:15:8e:e5:fe:bf:
10:51:b3:44:14:bb:28:f6:a3:f7:de:41:53:1e:61:
cf:9c:cc:3d:cf:bb:cd:7b:2a:3c:77:54:03:5d:e7:
06:83:70:d1:f8:d3:08:5f:8f:ea:ac:ea:c0:2e:93:
ec:d0:34:74:80:a7:f8:de:f5:a1:66:5a:95:11:fc:
e6:95:b7:d0:96:97:6a:86:2f:16:94:ee:97:18:8d:
a6:a0:a8:c7:8d:2c:5c:b5:e8:19:0a:bb:86:7f:fb:
ab:ed:b8:04:67:c3:1a:94:dc:bf:7d:95:95:60:6b:
fa:59:ae:04:f4:86:0d:8b:50:13:7f:11:be:e9:46:
dc:17:91:99:56:0e:81:46:aa:67:72:4c:b5:0f:f0:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:D7:0A:49:CB:22:72:4D:2D:52:F5:AE:10:9C:99:50:DC:04:62
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/B5TXCknLInJNLVL1rhCcmVDcBGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.169.0-185.33.170.255
Signature Algorithm: sha256WithRSAEncryption
36:2e:a7:48:5e:84:3e:2e:a5:ef:40:2c:3b:0a:7b:bf:ae:c1:
d5:b0:dd:9c:a5:8d:3d:c2:f3:70:a1:bd:05:d4:37:67:d6:c8:
a6:b2:14:78:01:3b:a4:c0:a7:34:bf:cb:26:84:dd:b1:4d:64:
c1:68:17:89:c4:eb:85:2e:d7:f9:6f:f2:7d:ff:b0:ad:33:c9:
d7:37:cf:c4:70:bb:b3:a1:0b:95:34:6a:69:91:d7:76:67:d9:
61:c3:fe:54:f9:19:81:b6:97:5a:14:4a:e9:78:da:bf:e4:96:
b4:69:6a:f8:82:50:f7:e0:4e:44:0b:9e:73:b2:cd:8a:52:db:
67:7b:e1:13:4e:6b:6a:2d:11:5d:1f:bd:ea:93:7f:a3:2b:8f:
ee:2d:29:3c:b5:e8:c6:7a:31:be:4c:3e:5a:8b:f3:06:6c:a6:
14:05:fe:6a:22:e1:ba:c0:79:d5:76:bd:f2:e6:90:ce:d2:15:
7c:d6:6b:8e:a7:d6:2d:1f:21:b4:00:a3:c2:47:26:32:24:72:
c1:16:33:59:55:bf:26:9a:4e:8e:a6:ea:4d:e7:0a:fb:7e:47:
8d:6c:04:aa:ba:9e:5c:82:d7:63:dd:57:d0:38:dd:40:1e:1c:
37:ca:c6:2b:ed:f7:6b:e7:9b:d1:c9:cb:d8:4c:1a:c5:84:c4:
54:d0:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:46 2025 by rpki-client