Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/cnDeZtfmtPikWXKPOYurWzMXafU.roa
File: cnDeZtfmtPikWXKPOYurWzMXafU.roa (raw, json)
Hash identifier: UKk3ISGkbm8k3YRbRoAebCfsvSZbOlVhASY6WfZtMT8=
Subject key identifier: 72:70:DE:66:D7:E6:B4:F8:A4:59:72:8F:39:8B:AB:5B:33:17:69:F5
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 0185714C282617D86D7C17109E675E1BB4AD
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/cnDeZtfmtPikWXKPOYurWzMXafU.roa
Signing time: Mon 02 Jan 2023 07:04:54 +0000
ROA not before: Mon 02 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62139
IP address blocks: 185.46.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:28:26:17:d8:6d:7c:17:10:9e:67:5e:1b:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Jan 2 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7270de66d7e6b4f8a459728f398bab5b331769f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:d6:d6:88:9b:77:37:fa:63:ec:28:18:44:
06:d7:01:07:68:ee:d4:02:b4:eb:f4:c7:86:d5:b9:
2e:29:2f:20:75:9f:66:e9:e0:8b:c4:4b:93:92:f5:
8c:23:87:48:64:52:be:7c:65:17:0c:8b:8f:a9:0b:
45:d3:8f:e5:5c:41:b6:06:75:5b:e6:8e:0c:93:d4:
82:bf:4b:03:fc:79:12:2a:ca:1b:8b:d0:db:fd:62:
1c:d6:da:54:10:13:25:af:e4:a6:ba:24:2e:6b:74:
bc:78:29:fb:ca:bb:ed:2c:dc:dd:37:1b:3d:ea:7b:
b1:1a:b6:32:b6:35:a6:88:f5:86:35:8a:bd:4f:eb:
fc:50:6c:5d:cb:a2:85:64:ee:bc:e3:83:11:58:7b:
b6:c5:0c:3a:7a:53:c1:a1:7b:ed:48:13:43:b6:5e:
3f:50:90:bf:7c:da:e5:01:ac:70:de:70:00:a9:63:
66:cd:de:7b:54:43:46:94:05:f5:ea:9d:b3:70:a4:
a1:1b:c7:60:27:d6:7a:85:ca:6d:1b:b9:f4:dd:c9:
e9:9a:56:9f:e0:13:7b:80:a1:3b:58:6e:0b:69:29:
6b:37:37:7a:91:29:e9:a6:f1:c9:2a:13:e1:a5:63:
48:e6:ee:56:4a:ab:0c:47:bb:97:76:7b:20:81:ae:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:DE:66:D7:E6:B4:F8:A4:59:72:8F:39:8B:AB:5B:33:17:69:F5
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/cnDeZtfmtPikWXKPOYurWzMXafU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.80.0/22
Signature Algorithm: sha256WithRSAEncryption
14:3d:32:0c:fb:64:7c:80:73:d0:75:70:be:57:c4:b7:b0:4a:
89:38:c4:e1:e9:c1:55:f5:1a:3f:fd:62:18:ff:ac:f2:71:38:
05:e3:23:3a:06:d4:22:c4:84:d4:74:ef:2b:78:9b:de:24:ee:
04:43:18:7c:36:9e:17:88:1c:9a:f0:0c:5a:c1:d3:e3:0d:c6:
5f:89:03:eb:0f:e8:0a:ef:f3:9d:2f:93:3a:c8:7a:92:33:66:
39:40:f3:01:6a:3a:b7:46:50:a8:ab:dd:cb:6b:44:e3:0d:78:
fe:7d:c0:9e:96:a7:81:1e:c5:64:fd:1b:6e:48:35:48:90:fa:
76:61:b4:a4:2d:a9:ac:d1:d9:4f:31:81:7e:55:a4:18:23:e0:
41:60:ca:53:99:82:58:29:56:4e:27:43:3a:e9:bc:ab:80:17:
11:2f:ff:cb:69:ff:17:cb:11:ba:f0:48:c5:97:87:9a:b8:66:
e0:a3:72:85:56:92:78:7b:a2:90:2d:1f:f1:4b:1a:03:2d:d9:
ba:14:c4:f4:fc:4a:4a:bd:28:2c:52:ca:0b:33:da:0a:6c:b3:
66:97:af:cf:41:9d:0b:c0:1a:90:86:c8:a5:55:81:a6:21:5f:
83:d7:4d:99:d2:ec:f1:04:b2:ef:4d:f6:df:24:0c:8c:20:87:
c6:cc:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:47 2025 by rpki-client