Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/OE3MwA1H1IDTu_3N13ogGrw1EC4.roa
File: OE3MwA1H1IDTu_3N13ogGrw1EC4.roa (raw, json)
Hash identifier: 3IqV6SGoibp0Vb6ZlymEUD1AYGCCbo9c5DU4LQf9prA=
Subject key identifier: 38:4D:CC:C0:0D:47:D4:80:D3:BB:FD:CD:D7:7A:20:1A:BC:35:10:2E
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 018725C8ECD0C5665FB22E140A89F58756CE
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/OE3MwA1H1IDTu_3N13ogGrw1EC4.roa
Signing time: Tue 28 Mar 2023 01:15:37 +0000
ROA not before: Tue 28 Mar 2023 01:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202105
IP address blocks: 185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:c8:ec:d0:c5:66:5f:b2:2e:14:0a:89:f5:87:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 28 01:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=384dccc00d47d480d3bbfdcdd77a201abc35102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:05:2f:f9:10:df:bd:67:fa:a7:c3:22:7e:
eb:f3:df:b5:ac:a6:11:c3:c4:ac:81:25:7b:28:4e:
c7:73:ff:fd:8c:3c:ea:e1:f6:13:9f:f0:f3:70:37:
b2:8f:aa:95:c4:03:a7:d2:ee:76:a2:56:e8:e4:68:
c9:ee:4a:a4:f5:dd:bf:6f:1c:ee:ed:7f:f7:95:9e:
59:83:04:d7:5a:39:52:70:65:92:09:15:6c:53:7e:
14:50:c2:6c:19:4e:11:6d:1c:87:7e:e3:8a:6d:aa:
ac:76:d5:3e:09:01:69:50:4d:08:52:01:3e:ea:fc:
1d:25:de:de:f5:69:af:4f:ec:38:f1:dc:bc:35:0b:
62:e1:da:e6:cd:ae:1b:31:0f:06:9b:64:1e:bf:3e:
d5:28:b4:4f:0b:14:c6:15:6a:78:8a:b2:7e:e9:2d:
0d:f4:1a:56:f8:8f:73:74:aa:6b:6e:db:84:83:dd:
3f:cb:d6:0e:9f:06:84:03:97:69:06:19:1b:fb:26:
1d:87:c1:46:13:f6:6f:4e:5d:58:96:d3:79:aa:b0:
1a:93:5f:4c:e7:21:c9:59:61:d6:5e:8f:a7:79:3e:
40:67:3b:db:4e:f1:81:05:bd:a4:cf:7e:63:ef:50:
2c:56:3f:e9:ae:85:8a:c6:f5:e2:02:db:4f:5e:7e:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:CC:C0:0D:47:D4:80:D3:BB:FD:CD:D7:7A:20:1A:BC:35:10:2E
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/OE3MwA1H1IDTu_3N13ogGrw1EC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.204.0/22
185.82.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e6:33:ce:55:af:c6:d1:ed:54:d1:83:25:80:07:e4:26:de:
0d:35:35:d7:d6:30:0a:76:61:14:d4:da:73:8d:38:7c:54:8f:
18:df:c0:e4:1c:5e:a4:6c:fa:85:c1:3d:82:e4:7a:0d:98:55:
86:bf:4a:6d:09:7c:05:9d:cb:11:d5:0c:2d:7c:de:c1:8d:e8:
1b:c7:e8:2c:68:36:22:e9:d0:bb:69:d7:2d:5e:80:30:83:40:
78:01:62:02:87:0e:4a:7a:ff:5c:13:1d:ab:6d:16:b2:84:d5:
39:51:08:76:8d:34:7d:44:ce:0f:b0:7d:fb:2a:71:97:0c:3a:
9c:78:ea:3c:9a:a5:3c:5f:a5:92:6f:76:8a:50:e2:80:01:83:
60:28:ee:9e:1a:7d:8a:71:15:40:a5:d2:9a:55:e1:56:a7:91:
3d:08:da:87:7d:a6:f7:13:06:b6:83:a9:f1:ca:62:e0:de:06:
d6:93:fc:d4:e9:14:57:78:ac:ec:5d:77:c3:c1:4a:b3:4f:64:
e0:13:7a:3a:bf:b3:d5:ea:f8:cc:46:d2:17:02:a5:e5:8f:89:
76:a3:78:23:3a:ac:12:1d:cf:bd:24:0a:9c:55:80:a8:de:8f:
85:74:d3:2c:7e:0f:46:80:93:9c:c9:e4:fd:95:62:76:ec:73:
a3:dc:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:38 2025 by rpki-client