Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/250m3rW0viivfmOouPAL8JJpTJE.roa
File: 250m3rW0viivfmOouPAL8JJpTJE.roa (raw, json)
Hash identifier: ICp/mOUb3q5m9y36+FYlBg01VVrVRcDfSHgsyGLHLak=
Subject key identifier: DB:9D:26:DE:B5:B4:BE:28:AF:7E:63:A8:B8:F0:0B:F0:92:69:4C:91
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 01898C197A1B1AD352D8EE609A79AFADEF9E
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/250m3rW0viivfmOouPAL8JJpTJE.roa
Signing time: Tue 25 Jul 2023 08:10:27 +0000
ROA not before: Tue 25 Jul 2023 08:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200565
IP address blocks: 185.11.64.0/22 maxlen: 22
185.99.136.0/22 maxlen: 22
2a12:4540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:19:7a:1b:1a:d3:52:d8:ee:60:9a:79:af:ad:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Jul 25 08:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db9d26deb5b4be28af7e63a8b8f00bf092694c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:db:ab:0f:7d:45:21:84:fc:fc:63:a8:31:
48:64:9a:1b:17:e7:2f:8d:f0:9c:c8:df:8e:c6:b4:
a8:4b:97:23:da:36:cd:cf:2f:f0:dd:30:2b:87:a4:
61:02:ed:eb:77:97:60:57:81:d1:49:8c:af:76:e1:
04:8a:58:59:94:8b:b7:b4:37:f2:47:58:9d:5f:8e:
ce:f2:e5:ef:41:de:1f:54:fb:55:91:29:09:8f:33:
40:eb:99:7a:35:47:2f:e6:57:b9:db:05:74:4e:52:
30:b2:2c:c2:9d:c8:19:9d:9b:a4:e0:98:44:53:76:
ed:be:eb:21:93:a3:68:7c:21:5f:a3:60:e6:9e:24:
79:fd:ea:0d:54:62:6c:78:ad:20:b6:7b:42:3a:e8:
11:8d:33:59:3e:f6:9b:16:50:31:f6:13:4a:d6:c7:
55:46:43:b5:45:78:63:51:44:1f:fb:a0:fb:4f:84:
2a:95:73:8b:8f:2b:7f:ae:59:10:a0:06:a6:dd:10:
7e:78:94:ab:5d:06:18:17:02:9f:8f:44:6f:ed:05:
ad:9b:8f:86:f2:14:e7:95:58:49:c3:50:60:5b:24:
4b:56:ba:74:1c:0c:63:f3:60:d1:fb:f5:d0:5c:c8:
5c:5e:a0:74:26:8c:1b:83:1c:ab:42:ab:6b:d1:10:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:26:DE:B5:B4:BE:28:AF:7E:63:A8:B8:F0:0B:F0:92:69:4C:91
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/250m3rW0viivfmOouPAL8JJpTJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.64.0/22
185.99.136.0/22
IPv6:
2a12:4540::/29
Signature Algorithm: sha256WithRSAEncryption
55:46:74:da:b1:e8:4a:f5:5d:1a:e4:3a:40:3f:91:b0:a4:20:
78:5e:f8:b3:f0:da:58:33:e2:e2:24:ab:1a:77:49:cd:6a:41:
a8:01:0d:a2:df:14:56:ee:8b:62:11:0f:92:a6:bd:23:5a:b0:
8f:75:fa:e7:9b:35:2c:86:c3:e1:1b:4b:d3:27:4c:88:63:b6:
1c:bd:5f:35:77:ec:98:2f:73:a4:31:c2:6b:b5:58:bb:7c:f7:
39:d5:f8:17:f8:3d:25:f2:f8:2b:a3:d7:b3:7d:73:24:46:00:
fa:2a:dc:0a:0a:22:97:1f:e4:7b:7e:14:ff:0e:a2:0c:5e:c0:
ec:36:bb:94:c9:ff:b6:39:af:02:b0:0b:fc:e5:44:a8:cb:a9:
72:d0:e6:dd:81:40:0b:ea:ab:13:1b:ab:63:15:0d:98:41:ff:
c2:9e:ee:6e:80:e7:a2:0c:11:46:bf:2a:bd:03:37:1e:81:9c:
e0:97:6c:0a:68:56:90:76:9a:60:b6:ea:64:99:73:9a:ac:9a:
07:79:df:97:15:16:fa:56:7c:46:84:b5:a5:d7:74:41:50:fe:
8c:3b:89:86:8f:ce:d9:ef:99:9c:74:0e:07:b6:89:d5:f4:f7:
f0:16:a8:78:c1:1c:39:ec:f4:17:cc:7b:eb:50:12:c1:00:a6:
5c:5c:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:13 2025 by rpki-client