Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/dsyoJOfumMAnVRlIIW23UOpqULk.roa
File: dsyoJOfumMAnVRlIIW23UOpqULk.roa (raw, json)
Hash identifier: mO81SH1wHR4NCIQHd4/20qnyzDUyVlnH8QvfOY2MOag=
Subject key identifier: 76:CC:A8:24:E7:EE:98:C0:27:55:19:48:21:6D:B7:50:EA:6A:50:B9
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 01856C53C6E2926A6F277A6778672A718617
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/dsyoJOfumMAnVRlIIW23UOpqULk.roa
Signing time: Sun 01 Jan 2023 07:55:07 +0000
ROA not before: Sun 01 Jan 2023 07:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.240.166.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
45.85.180.0/22 maxlen: 22
185.240.167.0/24 maxlen: 24
194.31.1.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
194.30.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c6:e2:92:6a:6f:27:7a:67:78:67:2a:71:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 07:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76cca824e7ee98c027551948216db750ea6a50b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:1a:8f:bd:f3:6f:d5:72:05:e4:33:9c:a6:
cc:7f:4c:01:65:21:da:ed:be:4f:24:41:40:ba:ad:
e5:93:a6:19:7c:f0:05:be:5b:d1:b5:09:c3:44:5b:
ad:78:9e:88:f4:0b:90:5e:ef:83:32:2f:ae:61:2e:
a0:d8:3f:f1:15:01:b2:55:0d:dd:6c:d4:60:d3:96:
2b:45:ae:37:9f:e6:95:b8:0d:57:aa:f5:20:c4:25:
b4:83:6a:4c:5d:e8:e9:43:cf:b1:63:9d:3c:61:d4:
df:5a:2e:63:54:60:6d:59:a0:2c:7a:98:af:96:3c:
4e:78:62:bb:bd:81:b5:74:9a:e7:72:61:12:f4:39:
42:e4:1c:c9:c3:87:8f:07:c6:00:c9:d0:97:a8:26:
74:d8:65:f0:93:ee:44:be:61:5f:49:a2:a6:59:a4:
f4:4c:57:e5:5f:18:52:0b:f6:be:4d:25:27:12:f0:
5b:b7:e1:8e:ef:01:32:0e:0a:c1:0c:8c:d4:f8:83:
98:82:d2:35:aa:f1:18:44:09:09:3f:e8:d1:de:5d:
d6:13:59:65:55:96:8e:5b:1e:96:1a:e7:9e:a0:d0:
d2:d5:c9:8a:97:96:2d:f3:4e:bf:84:ef:20:1a:3d:
b2:61:ca:dd:78:38:c9:3f:95:2c:66:c3:15:b6:4a:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:A8:24:E7:EE:98:C0:27:55:19:48:21:6D:B7:50:EA:6A:50:B9
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/dsyoJOfumMAnVRlIIW23UOpqULk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
194.30.183.0/24
194.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e8:d9:b6:a2:5e:0d:c9:aa:0c:6a:12:cb:b7:24:63:bb:ea:
ec:21:e2:a3:58:27:31:31:68:99:70:6e:44:5c:9d:7a:a4:99:
be:22:bd:3b:17:a7:4c:c1:18:f1:28:f9:45:ae:3a:42:f4:39:
dc:6f:4a:f1:9f:31:f8:d0:4c:44:40:61:eb:0c:14:ed:b7:77:
f4:87:c9:66:33:4d:31:d7:a9:f1:1e:3f:29:a8:2e:e4:80:bd:
6b:ea:d2:93:99:5f:bb:11:0b:7d:cc:e9:82:33:49:23:12:1f:
ba:ed:1b:4e:f1:00:df:64:0c:48:78:74:74:2e:9d:ea:d0:09:
02:34:45:b3:49:40:7b:f9:11:22:d9:fe:03:14:32:34:62:67:
01:81:39:94:bd:c5:07:23:18:9b:96:31:82:5f:4c:90:9a:e8:
84:05:2d:6d:04:f5:7d:c2:ed:86:15:9d:1f:90:60:a4:58:ab:
cf:f6:51:2b:ed:a9:ba:4f:81:76:5d:ed:3c:99:45:df:a6:f1:
28:20:3f:d9:16:52:bc:db:b8:92:00:2d:2b:d2:a4:80:d7:55:
dd:2a:21:69:c1:f1:2d:db:c9:4e:c5:86:ee:bf:43:5c:86:62:
a9:47:94:ef:1a:2e:d6:e4:dc:bc:32:d1:47:3d:d1:3b:97:fc:
e9:60:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:05 2025 by rpki-client