Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/CO0HLRdHuJgAK9ztrqiSSYKJciY.roa
File: CO0HLRdHuJgAK9ztrqiSSYKJciY.roa (raw, json)
Hash identifier: 6swogChZJwBXgIFUJ4v1c1bOlnHzxZubuGzyHW/UxAg=
Subject key identifier: 08:ED:07:2D:17:47:B8:98:00:2B:DC:ED:AE:A8:92:49:82:89:72:26
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 03876557
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/CO0HLRdHuJgAK9ztrqiSSYKJciY.roa
Signing time: Sat 01 Jan 2022 06:05:39 +0000
ROA not before: Sat 01 Jan 2022 06:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206492
IP address blocks: 185.185.32.0/22 maxlen: 22
185.185.32.0/24 maxlen: 24
5.154.170.0/24 maxlen: 24
2a0b:4d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59204951 (0x3876557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jan 1 06:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ed072d1747b898002bdcedaea8924982897226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:82:bf:e1:0b:58:43:1c:ab:8f:5f:38:6d:
75:d3:b2:f3:25:64:df:c1:93:6f:8d:c2:56:27:af:
48:bb:29:68:77:f3:b9:01:fc:ff:8a:38:29:a4:3b:
f2:f1:84:4d:01:ac:8a:5d:45:08:45:d0:c3:a1:b1:
c7:3d:1c:e2:de:16:0f:2d:c4:7f:84:fa:ee:77:c8:
86:7f:39:eb:e4:7f:c0:f9:82:17:26:f8:15:39:4f:
96:fd:3c:b4:14:7b:20:30:c7:02:cf:41:60:22:62:
e2:22:c1:3b:7a:72:02:46:55:7c:df:59:ad:50:ae:
7c:03:46:ab:2c:49:01:14:e1:de:53:c9:f2:cd:13:
c9:89:ac:b3:ce:45:7d:84:9b:0a:c8:7e:62:56:b5:
99:76:4f:d1:9e:f6:72:ae:db:95:f8:f3:37:22:2a:
8c:a7:a0:04:a8:20:1b:05:77:76:e9:86:7c:6c:6f:
61:00:e8:ca:3d:f4:02:6b:cd:5e:37:b2:67:22:59:
1e:9d:5c:b6:16:74:2e:b4:55:cc:36:4d:42:a7:84:
7f:70:e4:2a:78:bb:ad:d1:74:5e:54:8d:fc:a1:17:
00:2e:a8:e3:a5:38:27:9a:c0:42:8b:bc:f1:90:f5:
f8:0a:9a:a2:ee:14:0b:de:cb:a6:01:ac:aa:b8:64:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:07:2D:17:47:B8:98:00:2B:DC:ED:AE:A8:92:49:82:89:72:26
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/CO0HLRdHuJgAK9ztrqiSSYKJciY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.170.0/24
185.185.32.0/22
IPv6:
2a0b:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
77:58:26:6e:7b:1b:34:d9:15:b6:17:c0:d1:2a:87:73:c1:df:
88:8c:78:e2:c5:5a:49:f5:90:84:35:39:f5:a9:82:df:f2:92:
ba:cc:9e:f9:92:69:c6:c9:b9:f8:99:ff:92:72:dc:fd:6a:65:
cb:f2:c1:d6:2f:80:b4:b3:bc:5d:73:44:20:8a:99:31:e3:da:
21:28:51:f2:6d:67:06:ba:e4:e7:5a:fa:cb:0c:c9:7b:b2:51:
a9:1c:58:19:fa:e9:a1:ca:89:b7:79:f8:49:74:db:29:3c:87:
57:f5:7e:68:89:53:68:79:44:57:ef:db:0f:7c:1e:c4:7a:f4:
23:f7:ea:f9:4a:32:c2:9c:46:f4:f3:25:00:41:86:9c:8f:08:
50:7a:1e:3c:84:0d:44:6c:ac:fe:42:fd:b5:a8:0c:12:8c:05:
61:3d:f8:9b:d1:87:6f:ce:43:2f:68:eb:ad:b5:d1:50:98:a2:
0a:ea:fb:0e:fe:ef:c2:3a:52:ab:f7:9e:37:a7:f6:a3:bd:49:
fc:d1:8c:c0:10:3b:75:92:87:d3:a5:06:36:24:50:22:19:90:
f1:b2:ca:e3:71:25:20:75:40:f6:97:43:d7:6f:b6:e5:01:1d:
2c:3c:f7:d7:b3:92:d6:30:67:b3:22:f6:57:42:20:f6:c4:ce:
b0:48:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:59 2025 by rpki-client