Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/87972SvbqhTv9WxKFWI1Uy21zLY.roa
File: 87972SvbqhTv9WxKFWI1Uy21zLY.roa (raw, json)
Hash identifier: yOeZwViBUTKsvx5INem4RIOdw/iu9kr5ns1L2FceRCA=
Subject key identifier: F3:BF:7B:D9:2B:DB:AA:14:EF:F5:6C:4A:15:62:35:53:2D:B5:CC:B6
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 04378A
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/87972SvbqhTv9WxKFWI1Uy21zLY.roa
Signing time: Wed 11 May 2022 09:35:02 +0000
ROA not before: Wed 11 May 2022 09:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199831
IP address blocks: 185.45.216.0/22 maxlen: 22
185.30.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276362 (0x4378a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: May 11 09:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3bf7bd92bdbaa14eff56c4a156235532db5ccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:89:2c:56:9e:43:d2:82:a1:7a:a8:03:fb:
75:b1:3a:da:36:b7:c0:cf:70:d6:6a:ca:1b:48:85:
ec:c9:d2:f9:98:ac:96:e5:a9:60:85:3e:e7:58:fd:
fb:6b:de:e1:c0:c9:a2:67:0a:48:54:78:20:15:49:
e2:e0:e0:fa:95:68:fc:f4:62:41:67:da:fc:f7:c6:
2f:97:d3:79:0c:e0:74:3c:13:f5:05:e9:b1:30:44:
e9:6b:52:ef:52:9f:40:2a:0d:3e:ed:28:06:8d:b8:
5e:ba:cc:04:be:66:b6:dd:c6:21:37:e4:fe:f7:db:
73:7f:1e:7f:33:7e:5d:63:ea:06:28:d9:cf:f5:d4:
0a:cb:55:7e:33:1d:18:60:25:97:98:6c:e0:5c:92:
70:44:8a:69:25:00:02:5c:cd:8c:75:02:32:4d:d6:
e9:11:fb:d4:72:29:3a:89:32:1f:3b:6a:c9:6a:d0:
90:05:ea:37:c6:ff:d4:0b:a7:0f:02:f3:89:29:c6:
23:f8:f5:33:24:ae:c0:81:75:98:f1:aa:7a:55:3b:
dd:a4:73:c2:4f:a5:db:b6:c1:24:7f:66:97:5e:29:
15:11:ff:6d:27:ec:c7:92:ff:8a:47:87:f0:ec:e8:
d5:ea:80:3a:c5:a6:f1:34:eb:79:f1:2d:fb:cd:03:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BF:7B:D9:2B:DB:AA:14:EF:F5:6C:4A:15:62:35:53:2D:B5:CC:B6
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/87972SvbqhTv9WxKFWI1Uy21zLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.0.0/22
185.45.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:db:63:6b:f4:ec:91:81:b2:d7:be:36:d0:e8:9c:64:2f:18:
2d:1b:fd:f4:ba:25:50:87:48:5f:32:d0:e5:c0:d7:1f:5c:07:
0c:c3:60:df:89:6f:d6:83:90:43:b3:3f:98:f3:96:1e:48:c3:
f7:d1:01:67:09:71:83:a3:3e:3c:68:1a:24:63:94:7c:56:bc:
14:79:4e:58:6e:f4:6f:d1:c0:21:69:da:f4:0d:e3:1b:58:95:
3d:60:ac:94:30:97:79:5b:46:33:eb:5e:46:c2:3b:54:00:ef:
e0:f6:3f:82:85:89:96:4f:c4:89:62:2f:b8:b5:2a:59:60:ea:
eb:ba:fa:96:e4:30:9d:3d:0b:12:87:a5:cc:c0:61:08:30:b0:
90:e5:98:40:de:47:a5:e5:db:a2:1b:66:9f:7b:a8:f4:3f:01:
63:10:a3:d5:7a:38:7b:41:50:6a:01:39:72:4d:55:6a:ff:61:
34:76:e0:0c:83:00:32:4f:7d:b7:3d:c4:bd:f5:65:2b:70:8e:
23:ba:13:cb:a8:7a:41:25:04:bd:52:e2:ec:5f:8c:ec:31:8d:
d1:dd:ce:df:08:7a:81:1d:c0:2c:ec:01:ee:a8:0b:9f:d9:1f:
ca:5f:d7:61:81:0a:9a:71:23:55:47:56:4a:3f:fd:5b:84:48:
73:14:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:15 2025 by rpki-client