Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/3N8USuoBOJQ2jRoy_lhwc_QzwtU.roa
File: 3N8USuoBOJQ2jRoy_lhwc_QzwtU.roa (raw, json)
Hash identifier: zc3Brb6x/iHYKrgv4/3vH9lVGg9xE8+pEO6cM8D+QVM=
Subject key identifier: DC:DF:14:4A:EA:01:38:94:36:8D:1A:32:FE:58:70:73:F4:33:C2:D5
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0183F41FB2D85B156A4F2BB79444B0AF7F9B
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/3N8USuoBOJQ2jRoy_lhwc_QzwtU.roa
Signing time: Thu 20 Oct 2022 06:41:01 +0000
ROA not before: Thu 20 Oct 2022 06:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200810
IP address blocks: 185.77.176.0/22 maxlen: 24
185.246.248.0/22 maxlen: 24
185.245.188.0/22 maxlen: 24
89.36.80.0/21 maxlen: 24
2a05:6580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:1f:b2:d8:5b:15:6a:4f:2b:b7:94:44:b0:af:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Oct 20 06:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcdf144aea013894368d1a32fe587073f433c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:47:89:1c:10:f8:34:be:e5:6a:e2:64:2d:
d4:22:61:f5:72:a0:f0:45:ae:a9:cb:58:9b:10:c8:
b7:73:e8:37:54:6f:10:bf:d2:5f:50:c1:db:c5:3d:
69:d7:27:fd:2f:da:b5:21:25:50:24:19:60:ed:96:
38:b9:8f:84:d5:0a:4b:07:af:fd:41:12:6e:6e:53:
4d:68:c2:dd:38:2a:52:44:67:3d:5c:41:2f:a3:32:
b8:2a:06:54:9a:19:99:4d:25:83:fa:fb:a3:48:a9:
36:2f:d8:47:32:ff:fc:16:fe:4b:44:85:a5:72:91:
e8:4a:78:61:59:1b:4d:59:c8:0a:3e:2f:8f:67:c4:
12:37:1c:e3:67:ae:73:fb:94:80:7c:76:7c:05:58:
23:c1:a2:d4:77:e1:7b:9a:52:84:56:ee:94:e1:4c:
0f:1b:4b:ae:d6:15:70:9b:b1:39:07:33:63:72:3b:
af:33:13:9d:fa:a8:b5:06:03:4c:67:60:e8:45:92:
d3:b6:f4:01:b3:2e:a3:41:f8:3d:d6:f9:23:2e:e0:
33:ee:c1:16:7c:67:9e:ab:3a:6c:0d:72:01:ea:17:
bf:eb:28:19:a2:50:9d:2e:41:ec:81:37:a1:95:0e:
9b:04:f5:24:6e:9e:01:1b:de:49:9a:48:41:2d:e8:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:14:4A:EA:01:38:94:36:8D:1A:32:FE:58:70:73:F4:33:C2:D5
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/3N8USuoBOJQ2jRoy_lhwc_QzwtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.80.0/21
185.77.176.0/22
185.245.188.0/22
185.246.248.0/22
IPv6:
2a05:6580::/32
Signature Algorithm: sha256WithRSAEncryption
5c:24:30:fa:29:8c:0f:a4:be:fc:69:1a:dc:ca:cf:64:45:78:
be:7b:ce:86:00:0d:e9:2e:0f:0b:dc:a1:45:bf:4e:43:db:68:
35:9a:bb:62:ca:a7:07:90:27:2d:fe:2a:59:f1:61:6c:0c:e6:
cb:9e:1f:84:8f:b7:57:df:dc:66:3f:55:ca:53:14:fd:e4:0c:
f9:a3:c2:5e:b2:92:55:5f:b1:c0:5a:0c:6d:1e:dd:7d:08:7d:
95:fb:55:0e:b6:cd:28:82:ca:35:c6:a9:1e:2e:23:23:89:00:
08:31:d6:04:15:85:99:63:29:cd:58:e7:96:42:dc:f9:fc:8a:
e2:e4:cd:bf:71:ac:75:c3:29:98:52:d7:98:b6:92:35:5e:2b:
0a:af:80:5e:cf:e4:5e:d4:4b:d9:a8:2c:06:62:eb:fe:2e:1c:
ff:ef:5c:91:88:9d:b6:e0:e1:76:de:25:2e:db:ec:59:c7:19:
15:cc:2f:d0:b2:2d:d8:f9:c7:1c:07:4a:6e:00:9f:d7:fd:df:
9c:f6:1b:c9:d6:b3:ec:ba:4b:ba:ea:0e:ad:13:43:30:70:13:
32:ff:2a:db:4b:d9:5f:f7:ad:12:9d:34:92:1e:85:fb:55:cc:
1d:ec:6b:dd:8f:1e:28:03:69:14:25:eb:e5:37:13:ad:0d:b4:
9a:ca:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:52 2025 by rpki-client