Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/iDZdPXZv8BfqKivc7aOaFUv-6-0.roa
File: iDZdPXZv8BfqKivc7aOaFUv-6-0.roa (raw, json)
Hash identifier: wY1vjSAd9y7sv1RpVTNf+2tACYlEzd5+AKVWMwPYMeQ=
Subject key identifier: 88:36:5D:3D:76:6F:F0:17:EA:2A:2B:DC:ED:A3:9A:15:4B:FE:EB:ED
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01869340D7FDC4841098683A4E5AA6A14824
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/iDZdPXZv8BfqKivc7aOaFUv-6-0.roa
Signing time: Mon 27 Feb 2023 14:22:25 +0000
ROA not before: Mon 27 Feb 2023 14:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59726
IP address blocks: 37.230.201.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:40:d7:fd:c4:84:10:98:68:3a:4e:5a:a6:a1:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Feb 27 14:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88365d3d766ff017ea2a2bdceda39a154bfeebed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:21:80:fa:e4:0b:1a:f4:b1:2b:48:b1:12:
69:df:00:84:78:fa:79:2d:bf:d5:f2:8c:73:57:ee:
c8:7c:78:a7:d7:14:1f:11:67:2a:99:8f:8a:58:e7:
4a:ef:36:55:04:5e:ad:7a:07:af:a5:ee:a3:30:2e:
2c:19:2e:b7:22:68:d2:0d:20:d0:d2:5c:68:df:21:
27:99:17:5b:e1:88:a1:8d:6d:14:90:d4:76:6b:a9:
2f:af:4f:ee:88:c0:a0:fb:92:a3:fa:0e:92:19:57:
1f:d5:54:61:ac:2d:94:a6:b9:43:54:a5:9c:2e:96:
3b:0d:3f:38:c0:7a:64:98:37:8a:38:03:ce:4c:a0:
89:63:4f:c4:d6:45:82:58:73:2e:9c:a6:99:85:6a:
de:57:6f:29:89:48:8b:8b:83:36:f8:5d:f9:2a:4b:
c4:2a:d8:d9:ce:60:d2:6b:ef:7e:f0:0c:34:52:39:
86:a6:6d:01:53:eb:67:99:e0:10:0d:e9:ec:ab:53:
f8:82:0a:ea:25:dc:66:d0:7e:01:80:04:73:be:35:
93:67:ad:e6:8f:bb:64:7e:c2:93:d0:ec:2d:e8:c4:
aa:91:29:1d:d2:59:de:9f:f8:bc:3e:ac:68:fb:96:
5b:ef:b8:5f:16:48:5c:5b:ea:e8:3a:3a:46:08:39:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:5D:3D:76:6F:F0:17:EA:2A:2B:DC:ED:A3:9A:15:4B:FE:EB:ED
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/iDZdPXZv8BfqKivc7aOaFUv-6-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
212.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:5d:a5:54:5f:c5:d4:cb:58:b4:7c:d9:4e:9d:2f:17:71:
ef:13:35:35:3a:de:62:af:1a:54:87:19:c8:b4:16:5b:71:56:
87:82:86:33:6b:11:73:d4:f2:78:ac:9f:b7:51:1c:8a:24:e5:
22:9f:63:f6:d5:ad:25:89:12:7a:b6:ec:c6:7b:58:2f:b5:1a:
e0:8f:b6:2a:d3:26:47:df:65:48:e3:e5:d4:69:91:cf:73:29:
c9:8d:66:3b:26:aa:9b:ef:07:3d:bc:c8:77:4f:56:85:ab:e4:
9c:ef:8c:51:07:a7:fd:b8:8a:90:2f:77:31:0b:e6:df:85:0f:
75:57:44:f7:08:94:97:49:a9:d1:f0:8e:0f:7c:5d:23:68:3b:
aa:70:a7:3c:20:cc:9d:55:63:e7:62:ea:e9:6d:69:34:fe:44:
46:63:7a:4d:d9:06:9f:e3:cf:30:66:e5:5e:a3:b1:f3:08:b4:
ff:73:3b:73:4a:0b:7f:90:19:d4:f1:37:67:e6:8a:c8:d7:24:
72:4c:c2:99:88:2c:c5:6c:66:2d:95:5e:af:56:a9:65:02:e8:
42:76:69:aa:12:0f:7c:9f:ac:65:76:b7:84:ac:cb:e8:9a:c7:
3b:c6:d9:7a:d7:94:0a:f6:bf:40:d5:60:0a:46:c1:03:70:81:
db:e3:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:13 2025 by rpki-client