Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/CVmE6zEk8FZ_qoqmw__Zb268HHc.roa
File: CVmE6zEk8FZ_qoqmw__Zb268HHc.roa (raw, json)
Hash identifier: W8J1XwLe4MgrerttJq7/rrzOvErPwW01UuIDW5gdlxA=
Subject key identifier: 09:59:84:EB:31:24:F0:56:7F:AA:8A:A6:C3:FF:D9:6F:6E:BC:1C:77
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0F787387
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/CVmE6zEk8FZ_qoqmw__Zb268HHc.roa
Signing time: Thu 23 Jun 2022 18:11:16 +0000
ROA not before: Thu 23 Jun 2022 18:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205371
IP address blocks: 185.220.112.0/24 maxlen: 24
185.220.115.0/24 maxlen: 24
185.220.113.0/24 maxlen: 24
185.220.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259552135 (0xf787387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jun 23 18:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=095984eb3124f0567faa8aa6c3ffd96f6ebc1c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:d3:cd:b9:af:37:e1:8d:b8:ef:48:55:7d:
2c:36:10:d0:c2:e3:98:54:b5:4f:a7:cf:33:e8:f1:
66:22:20:09:eb:89:64:09:3b:a0:ae:53:bd:c9:aa:
0b:02:65:e4:e3:de:ce:b0:62:2b:fc:87:0d:73:21:
88:8f:c2:7b:66:62:ef:e7:6f:fb:82:16:4d:5c:ef:
b1:2f:40:f3:e5:58:aa:e5:a6:b5:69:b3:9c:5d:6f:
79:60:ad:2b:70:01:e6:a9:6e:4d:d1:4b:e5:c3:d3:
a6:09:ee:cb:40:b7:53:84:3e:dc:83:eb:af:73:e1:
30:06:3a:6e:d0:b0:50:2c:25:9f:3e:2f:44:34:17:
44:84:c7:65:0f:95:11:1d:45:ce:b5:70:bb:22:b1:
7e:07:f4:8c:53:da:c1:03:29:ee:18:59:8c:13:52:
0f:b9:de:a5:89:05:11:ac:86:f4:e3:2c:a9:a3:cf:
17:7f:23:e9:e1:aa:b0:e2:fe:e6:99:f7:ae:a3:79:
da:81:95:c2:6c:f4:9f:c4:66:55:e4:9b:44:c6:4a:
53:c0:50:a6:1e:5c:eb:d5:7d:3c:71:eb:c3:55:f7:
e6:53:56:d5:31:46:eb:7c:59:43:79:dc:b4:8e:74:
99:d5:f6:ba:7c:a0:84:cf:30:3a:32:1a:49:33:e3:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:84:EB:31:24:F0:56:7F:AA:8A:A6:C3:FF:D9:6F:6E:BC:1C:77
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/CVmE6zEk8FZ_qoqmw__Zb268HHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.112.0/22
Signature Algorithm: sha256WithRSAEncryption
42:49:57:0d:f4:fd:e3:e0:4f:39:00:00:10:ad:dc:b8:3f:28:
54:4d:52:f8:c8:78:31:d1:d9:3c:59:c4:9d:9d:9a:1c:6d:d9:
47:95:bc:5a:1a:b0:f9:07:05:59:5f:40:5c:2b:33:44:13:27:
73:71:9e:21:a8:a6:5f:c8:5a:22:7b:08:f7:f5:76:70:84:c9:
88:a5:dc:34:0b:5a:0a:e9:02:98:e4:85:66:d1:18:5f:bb:82:
3b:ff:7b:5c:30:43:3a:32:e0:3c:9a:54:02:04:3e:00:3c:46:
e6:bd:ce:a7:e4:5e:84:01:44:0e:a5:0f:80:54:cd:02:97:87:
8f:b7:50:c4:7b:3b:ea:8d:bc:b8:d6:a7:46:b9:56:39:63:e1:
a6:48:ce:7b:19:10:ca:b5:6e:f9:37:3f:05:e2:01:99:9f:ff:
bc:7c:16:b1:ab:1a:b5:aa:6c:e3:af:68:c8:e6:0f:d4:e9:d7:
5b:31:79:88:cf:4e:b0:58:a2:db:a2:54:23:35:c2:a9:ea:01:
5c:8a:cb:bd:da:a8:97:fe:df:66:b3:d7:cd:ce:be:b9:87:53:
a7:0d:dc:af:92:73:da:f2:4d:50:62:71:0d:af:11:83:c0:27:
c0:77:d0:10:2a:93:eb:1f:0e:fe:a0:cf:24:ca:5d:76:fa:5c:
db:96:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:33 2025 by rpki-client