Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/eBCd3t9JKi-33436mozT725CERs.roa
File: eBCd3t9JKi-33436mozT725CERs.roa (raw, json)
Hash identifier: 5xBCDJLtuP9jPMJc8wWAkzNg+lXcvCCBaHjDkhxnQi4=
Subject key identifier: 78:10:9D:DE:DF:49:2A:2F:B7:DF:8D:FA:9A:8C:D3:EF:6E:42:11:1B
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 03BEA576
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/eBCd3t9JKi-33436mozT725CERs.roa
Signing time: Sat 01 Jan 2022 14:08:27 +0000
ROA not before: Sat 01 Jan 2022 14:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205964
IP address blocks: 185.170.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62825846 (0x3bea576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 14:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78109ddedf492a2fb7df8dfa9a8cd3ef6e42111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:49:6d:26:34:b7:1b:50:61:85:65:e1:9e:
1a:ed:e9:da:52:e3:2f:5a:9e:cc:b9:64:8c:75:94:
23:58:e4:42:5f:28:fe:be:74:ef:cc:3e:4c:cd:a7:
cf:ef:a4:e5:6c:4c:ea:9a:6e:dd:30:60:35:88:57:
38:12:61:0b:0e:fe:40:a1:21:5b:84:f0:10:30:23:
95:fa:95:49:a5:aa:c8:23:af:32:f9:cc:d1:c7:3c:
30:29:ef:05:14:31:bf:7c:70:88:cc:23:76:20:c3:
c6:95:ab:28:82:a9:0f:01:79:da:5c:ef:12:bd:1d:
9f:db:8f:47:94:66:ec:b2:4e:ed:55:46:67:bf:8d:
3c:03:e4:4b:fe:83:e5:c9:c3:7e:88:fb:1c:88:fa:
ca:d3:0b:2b:aa:bd:0f:ae:22:0a:3c:be:94:4e:12:
bb:42:6f:16:7b:be:7b:90:f5:bc:83:67:c8:3b:05:
3b:87:20:74:46:39:1e:d2:9b:04:30:d5:a0:00:bf:
30:67:8c:c6:55:e3:80:9e:e7:fe:44:5b:93:3e:a3:
b3:19:20:94:ff:82:85:55:74:34:f1:e7:09:78:49:
c9:7c:47:b8:33:7f:f1:e8:58:ce:a1:23:40:a5:50:
43:06:d4:54:52:8a:8b:f2:b5:12:71:62:79:32:6a:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:9D:DE:DF:49:2A:2F:B7:DF:8D:FA:9A:8C:D3:EF:6E:42:11:1B
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/eBCd3t9JKi-33436mozT725CERs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.252.0/22
Signature Algorithm: sha256WithRSAEncryption
64:74:1f:01:33:e5:f1:f2:07:c3:12:dc:d4:4c:de:26:99:ff:
09:89:a8:54:51:73:f4:71:82:32:ad:cd:2b:45:b4:6b:4e:3d:
66:c7:c7:d1:68:1a:c8:80:56:60:2a:a7:49:f2:01:33:0c:e1:
f7:bb:ed:05:9a:d3:62:0b:79:73:ef:7f:c0:0d:08:46:c0:1f:
20:b5:74:35:18:b7:8b:11:08:44:ea:c0:83:0f:a5:0b:59:ed:
5f:63:ed:b4:f5:78:59:6d:a9:ce:3d:f3:e3:47:e5:81:d4:08:
8e:1b:d9:ad:50:63:30:40:32:e9:36:ab:50:91:02:0b:45:60:
d6:7d:fa:7f:a0:2e:b0:f7:6e:f6:a3:a1:f8:54:7c:5f:a2:1b:
65:04:fd:b9:05:f5:69:c8:a1:37:ef:d6:b0:cc:3b:4d:ce:71:
4a:dd:5c:fa:52:19:16:85:67:86:96:ae:47:45:30:fb:1c:11:
c4:6c:56:21:d4:42:56:5c:db:62:13:6d:57:b5:2c:cf:5d:a5:
e2:21:b0:25:d8:c8:fa:cc:54:aa:08:0e:14:0b:b6:ad:02:8a:
18:76:ed:ca:f2:bb:70:44:02:af:1d:79:9e:8b:a6:c8:68:8b:
db:61:bb:9b:90:40:4a:e8:37:ea:31:99:8f:82:a3:ca:5c:ad:
27:e6:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:48 2025 by rpki-client