Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/aTDALJRnjhcGqB0Lk1rgHEGj_HA.roa
File: aTDALJRnjhcGqB0Lk1rgHEGj_HA.roa (raw, json)
Hash identifier: grYVbPkPYM4HBgrDyiOgFkfxM9PF4tm1UGGwKHbgsTc=
Subject key identifier: 69:30:C0:2C:94:67:8E:17:06:A8:1D:0B:93:5A:E0:1C:41:A3:FC:70
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 0186451B642998749E43A53336C2CD13BD3E
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/aTDALJRnjhcGqB0Lk1rgHEGj_HA.roa
Signing time: Sun 12 Feb 2023 10:11:08 +0000
ROA not before: Sun 12 Feb 2023 10:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57568
IP address blocks: 185.235.40.0/22 maxlen: 24
194.5.192.0/23 maxlen: 24
194.5.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:1b:64:29:98:74:9e:43:a5:33:36:c2:cd:13:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Feb 12 10:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6930c02c94678e1706a81d0b935ae01c41a3fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:ed:71:1c:ba:d1:0a:bc:ea:6b:41:3f:e9:
4e:96:0e:49:1e:cf:e9:42:e4:14:13:95:8e:4f:06:
03:a0:b0:a6:66:03:1e:63:51:17:3b:f6:9f:2e:e4:
74:ec:90:06:11:f3:67:86:d3:5c:56:66:7e:ff:f6:
3e:f8:88:0b:c5:40:d8:3c:f3:93:67:8e:aa:1a:20:
c9:0a:63:45:31:dc:cc:37:af:1d:33:d2:67:7d:08:
a5:05:34:98:4b:74:41:fd:5b:5f:a2:7f:ff:c1:74:
ad:b8:c3:a5:c5:89:37:e8:22:a8:c7:a4:69:ee:71:
97:f6:60:38:85:e5:4c:3a:05:54:dc:10:e6:82:c0:
0c:9b:d2:01:85:58:8e:8e:8d:98:20:bd:7b:10:56:
62:2e:7a:dd:f8:23:c4:f6:83:89:78:5a:e7:40:05:
f0:e9:83:8f:3a:d1:0a:98:88:48:09:ec:c9:71:c0:
89:3d:04:96:55:81:9c:92:c2:b3:3d:44:db:d2:9c:
73:35:32:47:75:a9:4c:44:c6:f0:fa:33:f2:da:de:
7e:f8:64:ce:58:9f:72:4b:ba:1b:e7:d2:e0:e9:31:
67:52:a2:2d:57:bf:9b:71:ab:54:a7:21:68:53:b4:
5a:20:f9:aa:a8:35:61:68:14:72:fc:f2:9e:10:0a:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:C0:2C:94:67:8E:17:06:A8:1D:0B:93:5A:E0:1C:41:A3:FC:70
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/aTDALJRnjhcGqB0Lk1rgHEGj_HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.40.0/22
194.5.192.0/23
194.5.206.0/23
Signature Algorithm: sha256WithRSAEncryption
39:30:05:4c:2c:51:42:e5:5c:15:9d:92:22:f0:9f:4f:d8:8f:
c5:3f:ba:25:8b:b6:7b:33:ad:79:06:f5:05:c6:0d:c0:19:a6:
96:1b:c1:20:84:0e:fd:0a:8d:6a:09:54:26:5b:d3:ea:30:3a:
3d:34:e8:32:a1:5f:92:a9:cb:41:9b:b9:0a:54:ca:27:15:24:
8a:0f:45:01:67:7a:b8:84:d5:b0:92:7b:45:4f:85:9a:09:2a:
5b:45:0b:1d:01:c2:d7:14:d0:25:1e:d2:90:05:7e:47:3a:22:
61:4f:c3:29:31:72:06:b1:3b:64:54:11:0a:6c:67:31:33:c3:
57:53:28:8d:d5:94:ab:77:89:bd:f6:17:db:69:16:8c:23:7a:
34:68:4c:f4:67:05:d1:4d:4a:9e:c7:d0:a5:ed:17:99:49:d9:
05:9d:b5:b9:c5:64:e5:66:e1:43:89:a8:d5:d1:b7:f5:0b:4c:
af:8f:97:a7:36:b8:a7:08:b7:40:ec:0f:3d:5a:68:9e:a6:b5:
4b:0f:58:0a:8f:e3:0f:b2:a6:22:24:e7:c0:02:88:e0:0a:19:
a2:5f:91:d1:fe:a7:ca:a8:59:88:69:32:02:f0:22:64:4b:bc:
f3:f2:46:77:d1:98:57:b8:f0:3c:05:b9:f6:03:27:72:55:e0:
fe:0b:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:11 2025 by rpki-client