Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/Yv0GehP-pwc_UQaFROOegPIyaEc.roa
File: Yv0GehP-pwc_UQaFROOegPIyaEc.roa (raw, json)
Hash identifier: xiDjVkAQA25rYeS8IpWfcTBu06yWdYF+hqFRanIo6Fg=
Subject key identifier: 62:FD:06:7A:13:FE:A7:07:3F:51:06:85:44:E3:9E:80:F2:32:68:47
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01856EB905C7F88AF392A1C283087EF2571C
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/Yv0GehP-pwc_UQaFROOegPIyaEc.roa
Signing time: Sun 01 Jan 2023 19:04:57 +0000
ROA not before: Sun 01 Jan 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202755
IP address blocks: 185.155.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:05:c7:f8:8a:f3:92:a1:c2:83:08:7e:f2:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62fd067a13fea7073f51068544e39e80f2326847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:6c:d8:9b:bc:a6:1c:64:af:e7:39:01:10:
70:5d:84:99:7d:c3:29:fe:f9:e3:6d:0b:f5:a2:d0:
72:ba:05:14:88:22:b2:f9:eb:7e:75:12:69:25:0f:
23:50:aa:6a:c7:2e:d3:20:28:ce:8b:e3:49:12:ba:
56:0e:ca:98:34:a7:84:92:b1:9a:dc:58:ff:b1:14:
95:82:04:50:49:e4:e7:03:f9:ad:e8:11:2b:f6:3d:
93:a5:8c:c2:36:27:90:d9:39:63:8c:aa:cd:39:2f:
a2:ad:66:78:8a:e4:08:8d:21:9e:e1:b7:3a:6b:21:
eb:17:0c:62:20:6e:3a:f4:51:71:ff:4c:96:37:ec:
7b:d6:dc:ca:23:f6:9d:8a:e4:d1:a1:75:89:4a:63:
e2:11:54:41:3c:2d:98:b7:2b:c8:c0:f1:24:42:18:
35:5e:15:1f:5d:fb:27:d4:dc:95:6a:3e:1a:ea:f5:
a3:ea:0a:db:15:28:2e:02:cd:55:3b:a3:f8:d8:98:
7f:96:52:e7:8d:f2:1b:6e:74:0f:eb:36:7e:e8:47:
65:8f:1f:2d:4d:31:ec:9b:1e:07:18:4b:20:81:75:
1b:8b:3f:7d:5a:f8:0f:a3:56:0d:c5:ca:90:d8:0f:
f0:64:11:6c:1e:9c:cd:9e:df:9b:3c:a6:27:68:a2:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:06:7A:13:FE:A7:07:3F:51:06:85:44:E3:9E:80:F2:32:68:47
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/Yv0GehP-pwc_UQaFROOegPIyaEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.172.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e9:69:04:dd:14:2d:5e:fe:31:78:4e:9c:05:03:3c:2c:12:
f2:ff:76:24:69:5a:86:88:5f:53:85:31:01:9b:9a:83:1a:52:
27:6b:7b:da:5b:c1:55:8a:ce:5d:ce:e3:90:81:07:a9:2a:b5:
8e:44:df:f5:05:4b:a0:d7:22:96:b9:d7:45:f9:a6:98:29:a9:
f7:b4:cc:2a:e9:e0:cd:82:30:d5:d4:fb:d6:6c:b0:18:54:4c:
02:7f:28:fd:9f:ec:10:14:d5:b5:9d:e9:5d:8e:92:c0:d7:a1:
a8:67:6a:bb:59:b4:dc:34:ff:ba:6b:94:4a:5a:80:e2:b7:a8:
ab:ce:53:21:00:ae:fc:0a:92:91:27:d7:f4:61:9f:8d:85:47:
a4:d4:70:d9:3f:ac:25:af:8f:27:33:22:b6:14:63:d3:79:e4:
be:fb:02:c2:36:69:54:a8:35:14:63:c9:3c:cd:a0:31:e5:6b:
89:4b:42:50:07:46:6a:3a:1b:da:64:87:ab:8e:11:bd:68:43:
01:a5:16:b7:e5:69:70:f1:af:b3:8b:6e:22:4f:19:2a:4b:08:
3c:b6:8c:da:2e:35:d3:b5:57:72:33:49:1b:13:f9:39:55:bb:
4a:4d:e9:53:4b:c2:6a:81:43:6c:15:2d:8d:7a:47:3d:cb:f3:
09:ab:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:46 2025 by rpki-client