Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y45v7Tyar0mP6pf7OAv61JCBKhQ.roa
File: Y45v7Tyar0mP6pf7OAv61JCBKhQ.roa (raw, json)
Hash identifier: l3vBnOnFDyWRAQyGKP5AFsVbJF/f5jaVkuY009kEPDg=
Subject key identifier: 63:8E:6F:ED:3C:9A:AF:49:8F:EA:97:FB:38:0B:FA:D4:90:81:2A:14
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01823B4439FF6A17F065618B971EF49E235F
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y45v7Tyar0mP6pf7OAv61JCBKhQ.roa
Signing time: Tue 26 Jul 2022 16:08:23 +0000
ROA not before: Tue 26 Jul 2022 16:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.63.33.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:44:39:ff:6a:17:f0:65:61:8b:97:1e:f4:9e:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jul 26 16:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=638e6fed3c9aaf498fea97fb380bfad490812a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:39:e1:95:f7:d2:7e:1c:aa:6e:1a:ed:96:
db:45:1d:18:d8:00:ff:f3:62:ef:89:d4:cf:fd:32:
02:4e:9d:9d:9c:30:e3:d4:ee:b3:35:0f:40:a1:33:
d8:4b:91:72:0b:0e:67:e7:88:0d:b1:b5:58:fe:13:
49:7b:bf:fb:f0:59:e6:87:09:04:99:39:6d:0c:1d:
26:fb:a3:7d:3e:ee:99:8c:86:f4:1f:c4:33:05:95:
c3:f2:45:e3:2a:9c:5d:cf:e1:e5:34:a2:ca:97:59:
03:56:b7:66:1d:0b:5e:e9:b3:17:81:4c:89:cd:08:
a1:d2:ea:92:1f:67:35:f3:a5:87:04:68:fc:e2:18:
0d:7b:36:d0:52:ca:4e:10:15:ff:4c:4a:ef:9a:e8:
7e:1d:03:5a:c2:49:f5:9c:b7:01:3d:89:db:14:77:
7e:d1:ce:67:18:d5:44:91:7a:06:7f:18:aa:39:a3:
ce:5b:dd:7b:0a:4d:1f:8f:ba:bd:c9:6e:cf:4d:71:
aa:e9:9c:1c:19:5a:bc:3b:6c:8d:db:33:4c:65:a8:
3c:a3:8a:a1:ad:48:28:8d:5a:97:db:fc:ce:e8:c1:
89:e2:3f:f8:98:95:a7:be:ff:a8:0e:dc:63:15:e8:
97:3a:26:e9:1c:9a:94:0c:17:ea:4a:3b:2c:07:23:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:6F:ED:3C:9A:AF:49:8F:EA:97:FB:38:0B:FA:D4:90:81:2A:14
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/Y45v7Tyar0mP6pf7OAv61JCBKhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
185.63.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7d:61:f7:ba:d2:7b:db:da:f3:32:5a:c8:bf:81:ea:ad:5f:
b9:23:1a:be:75:44:a5:3a:af:03:0d:a1:20:5c:15:7f:1f:79:
6f:71:ab:21:95:86:65:6e:0b:fc:10:f6:65:b3:45:62:0f:ef:
3c:3e:f6:e6:c3:a3:e2:da:09:36:2f:b3:93:36:31:63:bb:5b:
c5:2f:61:38:9a:e5:9f:8d:31:c7:d1:b1:c7:59:85:3b:da:1d:
8d:00:3b:b6:9d:42:2f:9c:e9:5e:88:cf:78:0e:0c:5c:10:50:
df:01:22:59:6b:64:b7:03:5a:3a:e7:43:92:f0:8b:97:03:19:
8c:b4:5c:28:74:76:6f:0b:54:e8:76:cc:c5:f1:67:70:00:c4:
c1:18:e0:ec:40:89:17:1c:5d:50:ac:24:cc:73:e5:79:11:63:
2c:86:a1:b1:10:a0:1b:b1:ca:14:f1:57:0b:e8:d5:f0:f1:9d:
b5:0a:d0:75:10:90:00:6c:df:f0:09:92:f7:a6:81:eb:65:e3:
5b:83:90:7e:9e:f2:0a:68:9b:56:38:03:ba:c5:5d:f1:dd:62:
e3:15:b0:35:70:13:82:7e:48:02:de:f7:8d:4c:b0:cb:0c:14:
b0:48:1f:da:6a:09:71:13:ae:d1:3f:b1:e0:a3:6e:0e:af:52:
2e:d3:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:46 2025 by rpki-client