Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SdwBEOZkB1h2znk3wJ81mYaMKaI.roa
File: SdwBEOZkB1h2znk3wJ81mYaMKaI.roa (raw, json)
Hash identifier: qtXRaZmlrMjsCD7+qzTYbY2PHf8d9/SuPs5n1liQE3A=
Subject key identifier: 49:DC:01:10:E6:64:07:58:76:CE:79:37:C0:9F:35:99:86:8C:29:A2
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 19BAEB70
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SdwBEOZkB1h2znk3wJ81mYaMKaI.roa
Signing time: Fri 15 Apr 2022 09:49:15 +0000
ROA not before: Fri 15 Apr 2022 09:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43893
IP address blocks: 185.9.164.0/24 maxlen: 24
185.9.166.0/23 maxlen: 23
185.84.240.0/24 maxlen: 24
185.84.242.0/24 maxlen: 24
185.84.248.0/24 maxlen: 24
185.84.249.0/24 maxlen: 24
2001:67c:1001::/48 maxlen: 48
2a03:4bc0:2900::/48 maxlen: 48
2a03:4bc0:1000::/48 maxlen: 48
2a03:4bc0:2200::/48 maxlen: 48
2a03:4bc0:2100::/48 maxlen: 48
2a03:4bc0:2000::/48 maxlen: 48
2a03:4bc0:3160::/48 maxlen: 48
2a03:4bc0:1001::/48 maxlen: 48
2001:67c:1000::/48 maxlen: 48
2001:67c:1000::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431680368 (0x19baeb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Apr 15 09:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49dc0110e664075876ce7937c09f3599868c29a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:bb:d0:a2:f0:fa:63:9c:d8:fb:b0:60:2e:
3e:e4:fe:2f:4c:f7:63:1b:10:d3:f6:63:58:bb:08:
09:c6:ca:df:64:2f:f9:a2:c3:a6:21:9b:ea:77:b7:
48:c8:a6:96:ab:73:d4:70:6a:d9:5f:34:ae:03:93:
c7:18:5d:be:c0:4a:58:eb:a6:79:a9:70:c3:3e:13:
25:95:74:c2:3f:17:c2:9b:f0:b6:a0:51:53:6b:7f:
95:49:b8:17:f0:5d:43:94:7d:06:11:bb:d8:51:cb:
93:c7:b5:53:e0:85:f4:fc:e5:ca:96:cd:f4:88:e9:
67:81:cd:94:47:77:73:11:9d:72:17:f3:48:23:a8:
d4:3e:68:a3:9d:7e:c5:db:67:ec:af:68:90:0f:34:
56:74:4b:47:3b:72:d1:f9:6d:0a:45:77:70:3f:26:
39:ee:b3:a1:9e:39:e4:28:0d:7b:7b:af:02:bf:a1:
2d:25:b8:80:5e:f6:33:9b:f4:7c:65:b7:07:4d:ca:
6e:e6:8e:ce:ef:f0:fc:b5:2c:20:f2:f4:f5:5d:44:
fd:c8:a3:c9:d0:8b:68:94:cb:25:78:e0:2f:d1:96:
67:2d:96:0f:64:18:47:84:22:3d:bf:b5:89:26:a4:
15:fa:9c:e8:61:7a:de:5c:a1:5e:6d:d5:96:ea:6e:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:01:10:E6:64:07:58:76:CE:79:37:C0:9F:35:99:86:8C:29:A2
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/SdwBEOZkB1h2znk3wJ81mYaMKaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.164.0/24
185.9.166.0/23
185.84.240.0/24
185.84.242.0/24
185.84.248.0/23
IPv6:
2001:67c:1000::/47
2a03:4bc0:1000::/47
2a03:4bc0:2000::/48
2a03:4bc0:2100::/48
2a03:4bc0:2200::/48
2a03:4bc0:2900::/48
2a03:4bc0:3160::/48
Signature Algorithm: sha256WithRSAEncryption
00:13:2c:78:fd:ff:78:ef:c3:37:01:11:70:e1:ff:07:06:67:
fd:98:d5:e8:25:66:4d:82:ca:29:f3:e0:da:60:96:31:b5:e9:
3e:44:5b:00:9a:65:7a:0d:3a:67:f2:0d:a4:4f:4c:67:a6:b5:
2d:9a:f5:5d:0c:79:43:8a:82:46:f9:4a:04:26:c0:23:21:7e:
e9:08:e0:19:02:36:d3:09:91:53:35:d4:dc:ff:59:97:56:2b:
bf:16:15:e9:82:cd:07:4d:55:0c:c1:21:a2:e6:09:31:bf:f5:
db:9a:88:8a:66:08:f5:b0:97:78:d5:e4:a4:a3:9d:d1:b7:be:
60:0b:51:81:a7:40:43:9a:3d:48:ac:5d:9b:ed:92:cc:10:0d:
ca:c6:4a:ac:a7:fe:00:6f:13:28:79:0b:a4:e7:77:b8:3f:aa:
99:46:d4:10:ce:06:c0:33:cc:7a:0a:91:c7:0c:55:c5:5c:51:
41:e0:9c:b7:90:2f:c3:16:2a:e7:e5:b8:de:2b:8f:84:be:d2:
d5:92:41:6d:18:f0:4a:76:cb:6b:2b:d1:7a:da:53:51:b1:f6:
01:2d:99:29:c0:e6:4f:ee:1a:64:c2:a2:c8:d2:bc:f8:30:6b:
bc:fa:d0:bf:bd:dc:6d:cd:1d:9b:35:29:49:b0:f5:14:9a:ac:
c6:d0:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:16 2025 by rpki-client