Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/Cg5BwyVkIl9NbxwoqVKrDO6_syk.roa
File: Cg5BwyVkIl9NbxwoqVKrDO6_syk.roa (raw, json)
Hash identifier: AIMZlpSpOdDztt47JI/WHf06I4wKRTO0rV0WQJ1+F3s=
Subject key identifier: 0A:0E:41:C3:25:64:22:5F:4D:6F:1C:28:A9:52:AB:0C:EE:BF:B3:29
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01856F8BA1782078CC6A579DC39E58368BDD
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/Cg5BwyVkIl9NbxwoqVKrDO6_syk.roa
Signing time: Sun 01 Jan 2023 22:54:59 +0000
ROA not before: Sun 01 Jan 2023 22:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205739
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a1:78:20:78:cc:6a:57:9d:c3:9e:58:36:8b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 22:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0e41c32564225f4d6f1c28a952ab0ceebfb329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:5d:5a:03:2a:ab:ad:f3:71:86:e9:5e:94:
58:19:0f:fa:3f:18:2a:bb:96:75:bc:e5:a4:cd:ab:
8e:1b:a9:69:3c:fa:7b:cf:dd:1a:89:31:5f:a0:34:
97:b4:45:f3:0c:aa:b2:6c:66:9a:4e:6d:4f:f4:10:
e3:c3:ba:bd:43:bc:c6:e5:84:54:db:9d:38:34:a1:
7e:67:bb:c2:f4:b9:b7:2f:0d:8a:2e:0a:e7:99:f4:
fe:90:4a:99:d6:9c:bf:a6:a6:fe:a6:e6:e9:ff:aa:
2f:a5:9d:d6:70:6d:dd:cb:27:3b:52:35:46:15:1d:
3a:ce:43:34:1f:37:bc:40:6e:e5:34:3d:ab:1d:65:
a5:24:3d:ff:59:f5:62:90:16:d9:35:5f:49:b2:f0:
b2:1a:29:e7:df:00:3e:e3:cc:bf:71:3a:cb:df:ec:
a4:e9:56:44:09:ff:3f:74:15:e0:96:88:e7:dd:d5:
f9:a0:db:02:78:de:12:74:95:d3:8b:4e:e3:25:d1:
8d:7a:39:6d:c4:0b:37:82:f0:1f:23:3a:f1:ee:38:
32:a6:ae:f1:28:de:35:c3:d0:41:ca:94:b7:59:cd:
de:ec:f9:d2:39:9b:96:e5:b6:07:1c:49:08:ac:32:
58:a0:75:61:4c:96:90:9c:5c:e8:77:ad:f5:f8:aa:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:41:C3:25:64:22:5F:4D:6F:1C:28:A9:52:AB:0C:EE:BF:B3:29
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/Cg5BwyVkIl9NbxwoqVKrDO6_syk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:f5:48:51:4c:b7:a7:f3:17:44:55:82:ef:94:8e:92:21:de:
36:97:a5:3c:ee:f1:29:0b:c2:be:4d:52:54:c1:26:a6:12:58:
52:13:4b:41:47:b3:62:c5:ca:9e:63:a1:25:2d:2f:43:e6:26:
89:ea:c5:8e:97:9b:f0:be:d9:79:15:73:da:eb:47:8f:02:62:
26:85:1a:cb:f1:8d:5d:1e:52:c3:85:e5:68:e9:57:e0:5e:9f:
a3:42:89:80:3f:75:56:92:39:35:18:75:7d:9b:df:08:38:51:
3c:a7:33:34:f9:8e:53:1e:a8:c9:a5:26:13:a9:55:77:85:2e:
a4:3f:18:e4:9e:8d:45:96:70:6a:0f:4d:ad:c8:e0:6f:37:0f:
8c:b3:c6:38:4f:f6:85:01:60:ad:12:84:fb:8c:0b:cb:35:38:
7b:aa:f6:1c:93:72:a1:aa:67:90:30:a2:3c:99:af:b7:5f:c0:
5b:64:d6:6a:b4:26:66:f7:71:c2:ec:eb:b8:b3:03:f9:63:af:
0e:a6:6c:d5:20:98:e1:7c:39:53:fa:c2:48:37:e6:6e:88:23:
09:12:2e:80:bf:74:fb:00:df:d0:e6:db:dd:7b:8b:28:81:31:
7d:9a:0b:44:1b:fe:32:63:63:0c:b9:35:20:1c:78:7e:1a:4f:
f0:70:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:39 2025 by rpki-client