Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/kJ_SCK18vR7M9fJOzTjF2nIcKJU.roa
File: kJ_SCK18vR7M9fJOzTjF2nIcKJU.roa (raw, json)
Hash identifier: Nqf/o+gwUSiwVPuK+wsvO9d6CLrn4lJ3406v7GJOhYk=
Subject key identifier: 90:9F:D2:08:AD:7C:BD:1E:CC:F5:F2:4E:CD:38:C5:DA:72:1C:28:95
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 0E02ABB3
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/kJ_SCK18vR7M9fJOzTjF2nIcKJU.roa
Signing time: Sat 01 Jan 2022 01:58:49 +0000
ROA not before: Sat 01 Jan 2022 01:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205889
IP address blocks: 185.135.71.0/24 maxlen: 24
185.135.68.0/24 maxlen: 24
185.135.69.0/24 maxlen: 24
185.135.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235056051 (0xe02abb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Jan 1 01:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=909fd208ad7cbd1eccf5f24ecd38c5da721c2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:d3:fc:98:2f:cc:2d:15:0d:88:8e:c4:d0:
80:e8:3a:c7:2c:4c:8e:42:ce:76:e7:70:51:6b:95:
35:3f:d8:ef:ab:48:28:ff:9a:f9:fa:ad:4e:5b:fe:
e9:33:a3:2e:f6:b5:fe:55:ae:bb:29:37:e2:3c:c5:
6d:f5:ca:34:a5:09:68:ba:a0:0b:f6:bd:c7:4d:3c:
9b:e1:9e:47:68:06:89:ba:b7:6b:70:ec:ec:0e:d2:
24:1d:b4:5f:8c:5a:8b:0c:5f:ec:f3:56:f8:f4:21:
79:e0:08:b6:56:1a:d7:64:93:37:bf:ac:80:32:19:
43:31:36:46:3e:69:e6:fe:ae:ff:d7:ea:53:b9:44:
c9:8f:08:e9:fe:68:2f:95:07:ce:ec:8e:96:2b:77:
9a:21:2f:20:b5:9c:50:c4:cc:7a:83:bf:ab:7b:cb:
11:e4:d4:5e:7e:38:75:95:68:50:b6:1a:76:af:e7:
1b:3c:44:62:04:17:9a:4a:53:dd:c3:60:29:87:fd:
48:18:55:2d:b6:9e:54:aa:e1:68:8b:7f:57:cc:7f:
f0:38:bf:5e:cd:aa:1a:ba:5e:ef:c4:bd:b3:93:9c:
18:e6:bf:f0:d1:e4:2b:b1:1e:b7:81:c2:d0:45:e6:
01:93:10:81:21:76:0f:f1:da:72:84:08:39:49:78:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:D2:08:AD:7C:BD:1E:CC:F5:F2:4E:CD:38:C5:DA:72:1C:28:95
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/kJ_SCK18vR7M9fJOzTjF2nIcKJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:af:bc:73:d9:77:b9:e3:6d:72:c8:83:86:1c:45:41:7f:6e:
07:68:07:a1:a5:4d:11:78:c5:ac:c8:8e:a4:db:24:f8:6f:91:
4a:0b:9f:85:73:17:8d:48:f0:a1:e8:a2:a2:aa:33:a3:4e:cc:
41:84:0f:f9:02:66:69:17:af:c9:53:62:37:6e:c0:26:35:06:
71:89:56:f8:61:f6:72:a5:e5:c5:d5:7b:e0:c8:bd:81:87:6f:
ab:04:4c:8d:1f:a1:b9:a0:b8:0b:1e:68:bd:e6:ef:ac:6a:ee:
d7:cf:7e:c3:22:26:e4:94:f1:83:cc:b5:ef:61:49:d8:ef:bf:
92:16:77:27:80:7c:98:c5:4a:8c:6d:55:e9:e6:0b:8f:c0:55:
e3:e3:a0:7b:41:80:fe:14:c9:1c:51:57:a8:39:a1:9d:7f:80:
c0:fa:c2:d0:96:4b:df:6a:6f:db:2b:ff:2f:1c:6d:6b:03:0c:
e7:48:03:12:ab:cc:24:4c:71:ad:f0:a3:87:28:59:1e:7f:8b:
31:04:85:91:94:e2:b1:de:33:18:fb:48:50:23:11:16:f9:37:
79:92:c5:00:ad:f0:97:d3:7e:28:1a:d7:d6:d1:0b:4d:84:88:
7c:79:40:4f:1c:a1:e2:e4:ae:7f:1b:45:cd:3d:d5:a7:96:de:
98:18:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:46:48 2025 by rpki-client