Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/wzP_Prz8J51tEydmRSSzxnjnm9c.roa
File: wzP_Prz8J51tEydmRSSzxnjnm9c.roa (raw, json)
Hash identifier: XCIW4r1fM1xoGPTlFITAOESK822IB7teF9cBGzKg3t0=
Subject key identifier: C3:33:FF:3E:BC:FC:27:9D:6D:13:27:66:45:24:B3:C6:78:E7:9B:D7
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 0183186CBF5CF6D7465A938D43352BEEC959
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/wzP_Prz8J51tEydmRSSzxnjnm9c.roa
Signing time: Wed 07 Sep 2022 14:48:43 +0000
ROA not before: Wed 07 Sep 2022 14:48:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206945
IP address blocks: 185.203.164.0/22 maxlen: 24
185.171.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:6c:bf:5c:f6:d7:46:5a:93:8d:43:35:2b:ee:c9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Sep 7 14:48:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c333ff3ebcfc279d6d1327664524b3c678e79bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:38:57:ef:29:4c:e1:ce:1f:77:48:a5:e1:
6b:03:32:18:4a:02:3d:41:05:28:20:d7:7e:89:80:
4d:42:f3:be:09:b2:08:5e:60:7e:b6:33:8f:14:e4:
cf:16:9f:46:99:7f:46:3a:3f:bf:f7:26:11:3b:a7:
05:65:71:02:2b:01:39:60:a4:5b:0d:04:7a:a9:86:
ee:82:5e:7c:1c:60:f0:b0:10:dc:5a:48:a9:a3:95:
27:46:d2:f0:39:86:7c:bc:ff:2a:76:c0:13:18:ee:
f5:b6:02:44:f8:2c:0e:de:24:24:b7:35:90:a8:4c:
b5:c1:1b:f1:d5:a3:e2:b4:db:78:95:56:f2:c2:3f:
ef:8c:23:11:56:b9:05:e5:2d:3f:45:93:e8:b9:41:
3b:4a:a4:c9:1b:ad:31:e0:da:a0:35:25:1f:ab:e9:
f0:67:67:0d:74:e8:17:1c:d4:85:21:3b:50:a2:4e:
16:f0:58:cd:e0:7c:64:9d:11:5b:6a:ff:c8:52:b2:
be:4d:26:b5:c7:33:4f:5a:e8:cf:a1:dc:32:c9:54:
33:0d:c6:6e:eb:cc:20:15:5b:38:ef:3d:47:ef:92:
0d:95:c2:f1:dd:2f:d9:d0:cd:c9:0b:d3:65:a1:9d:
01:59:1c:2b:5e:30:df:5c:6b:b8:c5:17:b7:71:85:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:FF:3E:BC:FC:27:9D:6D:13:27:66:45:24:B3:C6:78:E7:9B:D7
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/wzP_Prz8J51tEydmRSSzxnjnm9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.8.0/22
185.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
39:70:67:fb:18:e4:3d:05:d7:06:39:e3:e5:58:1b:28:f5:0d:
d1:96:8d:94:e1:4d:70:ca:b1:e7:30:34:3c:79:23:a0:f7:d7:
e4:75:7e:d2:13:94:79:6c:d0:19:4a:bd:17:fd:3f:e9:fd:c5:
8f:bc:e8:24:25:90:85:d3:bb:e4:dd:86:df:b0:4f:b2:21:39:
81:2b:2b:25:db:10:25:3e:2b:8c:6a:a2:ac:f1:31:59:e5:64:
c5:09:c9:b4:b3:16:6f:bb:11:af:46:49:7e:bc:1e:3a:c3:da:
88:b0:c7:d5:88:78:4e:2a:37:95:ef:19:93:0e:89:9f:04:8b:
fd:cf:af:b3:32:d0:ad:c8:dc:cd:55:bc:b9:56:4a:86:1c:f6:
bd:f3:63:6b:ed:64:75:93:c6:17:5c:72:1d:43:03:c8:eb:c8:
30:6b:4e:b1:79:21:32:f6:25:3f:1a:23:bd:a0:02:47:72:5b:
92:e1:58:18:ba:b8:68:56:01:69:e3:a0:44:c2:97:b4:a7:64:
7f:83:ea:06:6f:9b:3c:b9:05:25:19:a7:ca:a8:54:1a:b2:a2:
ed:d4:f1:e8:9e:b5:e9:70:7c:03:64:06:ae:90:26:13:cb:50:
30:74:a0:09:34:86:a4:2c:e1:8b:da:2b:8a:a2:f7:39:53:90:
f1:3d:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:38 2025 by rpki-client