Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/PGZ_8qahx493mEQ1pEcrhYXPzKY.roa
File: PGZ_8qahx493mEQ1pEcrhYXPzKY.roa (raw, json)
Hash identifier: bp58fks7qpDtt7ZL5bbsOHVK7lKrYcu7NjOjIK8nKLY=
Subject key identifier: 3C:66:7F:F2:A6:A1:C7:8F:77:98:44:35:A4:47:2B:85:85:CF:CC:A6
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 010E555D
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/PGZ_8qahx493mEQ1pEcrhYXPzKY.roa
Signing time: Thu 07 Apr 2022 08:05:01 +0000
ROA not before: Thu 07 Apr 2022 08:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 185.15.100.0/22 maxlen: 22
5.8.184.0/21 maxlen: 21
5.8.188.0/24 maxlen: 24
5.8.189.0/24 maxlen: 24
37.1.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17716573 (0x10e555d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Apr 7 08:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c667ff2a6a1c78f77984435a4472b8585cfcca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:a1:d8:14:08:eb:b7:cd:d2:0b:12:23:70:
19:cb:93:d4:bf:85:64:35:8e:05:d9:54:ff:57:0b:
56:8d:e7:f2:6a:48:9f:2d:ad:13:63:cc:37:9a:2c:
8d:c4:5d:c7:f7:a2:17:15:40:8c:4b:65:75:ec:25:
21:c4:5e:51:0b:90:3e:8a:8c:74:9b:5e:d3:cb:d1:
71:59:28:4d:7e:ee:ea:71:df:8a:35:4d:39:0d:dc:
43:a4:a2:c0:30:9e:c8:59:2b:87:ad:4c:3d:ca:32:
a3:96:7d:07:bc:10:cb:75:cf:91:02:a0:23:81:e8:
70:7e:ca:4c:73:b1:c0:63:0d:08:90:4b:b7:f1:c7:
19:ef:50:6e:20:ef:d5:16:ba:3e:4e:2c:56:02:41:
98:f3:d9:ff:37:ed:77:17:f4:3c:e1:94:9f:0f:44:
46:44:3f:f1:9d:1d:f4:05:41:f2:73:0b:04:86:8c:
a7:ed:5c:40:2a:97:55:8f:a0:e2:b1:06:e3:c0:bf:
0e:78:9a:73:41:cf:3b:bc:19:d2:b5:1a:0d:3e:0e:
ab:12:29:7a:95:25:0a:03:f0:e8:df:c4:af:97:c1:
a4:48:b6:ad:c9:ee:c4:2b:1f:6e:de:b4:45:93:c2:
a9:6b:02:50:6b:7d:71:60:0d:8b:be:e5:11:52:5b:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:7F:F2:A6:A1:C7:8F:77:98:44:35:A4:47:2B:85:85:CF:CC:A6
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/PGZ_8qahx493mEQ1pEcrhYXPzKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/21
37.1.176.0/21
185.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
06:73:e0:94:10:8f:37:71:e9:ff:b1:64:4c:f6:f2:14:51:01:
58:1d:29:6e:a0:74:a3:d1:17:a5:73:4c:2f:7d:15:5f:9e:14:
5d:b9:dc:ab:27:3d:99:eb:14:f7:80:f7:5f:ba:92:cd:a9:8f:
f5:c1:eb:49:b3:ec:f4:05:76:12:0d:b1:ca:cf:56:52:8c:ee:
16:fd:86:7c:34:1b:5e:af:05:76:90:14:bf:d5:1d:58:9d:d3:
99:a0:6b:b4:c9:40:47:cb:77:bc:11:71:65:cf:bf:07:52:d1:
2c:b0:33:f0:b8:d4:e5:83:0f:c7:8b:45:5a:13:47:86:a9:8b:
e3:dc:7b:6d:65:bd:a2:8e:a4:c7:a3:e0:f6:c8:b2:cd:dc:f8:
69:11:44:3d:99:12:2d:eb:34:cf:78:a2:4c:57:c6:e5:70:77:
b5:ac:31:1f:ea:71:b9:46:b7:dd:1e:90:f3:99:ff:aa:7f:42:
26:3f:1f:19:d4:70:18:b8:5a:9d:fe:7b:d3:37:50:54:a4:d3:
74:cf:ac:4f:b7:3c:18:29:b9:d8:35:05:fa:7e:da:bd:21:b3:
55:59:95:9a:e9:1c:63:b0:c6:9c:3a:24:8b:3c:f0:cf:b9:b3:
a6:d3:24:1a:85:0e:ef:f3:88:6a:e0:f4:d1:30:75:be:68:f3:
1d:68:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:28 2025 by rpki-client