Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ddQWt1hMuMiMRV6UAbxaU-cf5c.roa
File: 3ddQWt1hMuMiMRV6UAbxaU-cf5c.roa (raw, json)
Hash identifier: 2g40kgxXcgM13fhUOjMJE2VH+Uzr0ITDzi6q4HNpoUY=
Subject key identifier: DD:D7:50:5A:DD:61:32:E3:22:31:15:7A:50:06:F1:69:4F:9C:7F:97
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095AACEEAD1AB3619211A12DF39743C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ddQWt1hMuMiMRV6UAbxaU-cf5c.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209067
IP address blocks: 92.253.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:aa:ce:ea:d1:ab:36:19:21:1a:12:df:39:74:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd7505add6132e32231157a5006f1694f9c7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:c5:94:27:b5:36:c5:e2:41:c7:0c:bc:85:
a0:42:0d:0c:b0:1c:24:d0:10:a6:f5:2f:a0:5d:9b:
25:f6:26:cb:0d:ad:fe:56:64:dc:e2:81:fb:86:4a:
d7:10:f6:0a:b4:09:78:5f:24:cc:b8:8d:30:61:dd:
f7:3e:ab:40:50:e2:88:f0:fe:14:b8:f8:92:22:15:
fd:b6:24:5d:bf:07:82:64:14:1d:0c:59:57:1a:bd:
fa:69:37:45:05:33:f9:57:97:e9:70:c1:d9:6d:62:
a0:33:c2:bd:2b:1d:a5:20:4f:f2:15:c3:59:cc:a4:
69:06:92:63:d5:99:f2:63:9d:89:70:3e:01:d5:86:
02:31:c9:f6:23:59:98:83:33:f9:5d:b1:de:3d:f0:
aa:fd:ab:e5:95:ba:00:cc:06:b5:b8:aa:77:ba:9a:
6f:68:0f:f9:ab:42:e9:93:c2:00:0a:68:27:84:b9:
9f:f2:f0:5c:b3:9d:f4:6f:62:66:37:7c:cc:38:41:
29:4b:25:c5:d5:52:d8:9b:a0:b6:88:34:82:cc:c6:
8a:96:a0:65:97:e0:88:58:d5:4e:d1:39:b2:fb:df:
60:f9:0d:81:ab:eb:e1:52:24:34:83:44:bb:40:35:
7d:4c:22:ac:60:d0:82:9a:48:1e:47:a3:a6:47:6d:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:50:5A:DD:61:32:E3:22:31:15:7A:50:06:F1:69:4F:9C:7F:97
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ddQWt1hMuMiMRV6UAbxaU-cf5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:92:4e:1d:c5:b7:a0:47:5c:25:43:6e:d2:ae:73:42:04:8d:
1d:cc:f0:b7:cf:8a:d5:42:5e:82:43:e5:b3:53:f2:b8:a5:37:
78:28:8b:49:e4:e5:01:28:22:84:fb:18:5a:f7:18:73:36:e1:
aa:22:dd:13:13:a5:00:5a:c4:f6:c7:56:6b:3c:3a:bf:63:ba:
c5:fd:c5:d6:83:de:9e:39:c3:94:0a:fc:be:d8:6a:44:d2:2d:
52:7c:7e:8f:77:54:33:91:39:e0:5f:a6:e6:c7:51:64:95:9e:
c0:a0:7b:58:c3:e1:f8:79:8c:a7:6f:33:f7:de:7a:c1:03:48:
a6:25:8b:e2:b4:1f:f6:8b:cc:e2:d3:73:ac:ff:ac:05:76:56:
aa:87:6a:25:9a:71:ee:41:6f:c7:d1:d7:88:92:66:7f:27:79:
a1:84:5d:c9:f8:d7:ee:6c:9f:61:fd:3b:c6:ec:99:b9:cb:a7:
66:5f:9b:0f:6d:35:50:0b:da:01:c1:e6:11:68:51:53:ef:36:
f4:fe:6a:86:0f:65:53:69:74:fb:a1:4f:54:0b:1d:54:7a:bb:
62:4c:5b:43:66:9d:d7:3a:01:ab:47:0e:09:8c:d1:d8:51:b7:
31:5a:ee:67:dc:1d:5a:6f:fc:71:d2:f0:e9:e9:46:d1:d6:78:
47:38:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client