Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/9ILzTk4luwN6Y_tgQ1rOFyL3B_Q.roa
File: 9ILzTk4luwN6Y_tgQ1rOFyL3B_Q.roa (raw, json)
Hash identifier: VQIYWGjepUBgX1T+tUVKjExDr2gL/G+HiqofpKnVi+o=
Subject key identifier: F4:82:F3:4E:4E:25:BB:03:7A:63:FB:60:43:5A:CE:17:22:F7:07:F4
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0185727130A246AAD57554A3412769E6825D
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/9ILzTk4luwN6Y_tgQ1rOFyL3B_Q.roa
Signing time: Mon 02 Jan 2023 12:24:58 +0000
ROA not before: Mon 02 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50979
IP address blocks: 92.118.148.0/24 maxlen: 24
185.237.218.0/23 maxlen: 23
2a0a:8c40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:30:a2:46:aa:d5:75:54:a3:41:27:69:e6:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 2 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f482f34e4e25bb037a63fb60435ace1722f707f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:79:8f:82:92:e8:b2:54:97:17:36:24:22:
51:05:2d:7f:06:71:ca:ad:86:70:6c:39:cb:c4:63:
0b:ae:28:b9:22:26:21:d9:32:52:2b:c0:0d:3e:7d:
89:f8:c7:db:da:30:77:f2:d9:2d:01:be:66:d6:a4:
f5:7e:2e:12:a1:f4:a7:e1:7f:d8:0a:80:10:ae:c4:
89:13:ce:91:73:9f:2c:4c:e9:3e:b9:34:76:86:f6:
7f:62:0f:62:40:07:4d:2b:64:b9:77:47:28:e8:5f:
96:c9:8e:6d:bb:e2:55:ee:13:43:f0:ee:46:41:45:
93:30:63:86:b1:01:e4:4c:0b:35:63:fc:e3:62:c6:
d5:c4:f6:6f:95:30:66:09:5a:4d:50:08:7e:3a:f0:
85:40:81:ad:17:7f:66:7a:31:26:c4:a1:46:25:d9:
1b:cc:86:b7:46:ec:91:a3:89:b2:e6:0a:ac:e5:7c:
5b:bd:22:bc:c9:ea:c1:1b:00:0c:69:93:f3:0e:fa:
37:42:e4:e4:04:e9:83:c8:1a:83:9a:00:0b:e9:c7:
a9:08:8f:1b:ca:3c:9f:33:c7:4d:cd:20:ad:d5:a6:
52:b3:2d:33:f2:03:99:59:72:42:30:7c:7f:f9:4d:
33:be:23:9f:90:c6:a6:0a:23:8e:76:84:dd:de:3d:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:F3:4E:4E:25:BB:03:7A:63:FB:60:43:5A:CE:17:22:F7:07:F4
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/9ILzTk4luwN6Y_tgQ1rOFyL3B_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.148.0/24
185.237.218.0/23
IPv6:
2a0a:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
aa:91:e0:b9:4f:17:c6:c6:61:b5:e1:69:60:4b:4b:03:8b:cf:
cc:ae:ac:0f:ef:0c:84:40:81:bb:25:cc:dd:16:42:00:9c:50:
19:83:57:7d:a3:b0:85:89:5f:f6:1c:db:d3:d0:57:8e:6a:a9:
4f:e2:c9:ff:ea:24:c9:ef:83:17:1d:e0:38:f5:c6:44:47:08:
05:ed:82:98:9d:8a:d3:79:a0:60:58:9a:af:d4:26:40:f3:6e:
0d:25:11:8d:90:ec:16:f6:6b:38:6a:c6:38:0e:18:03:73:87:
57:bd:92:c8:d1:25:07:a9:fd:df:7a:e9:d3:bc:7a:4a:61:7e:
7a:69:ee:15:b5:d2:24:b5:40:32:28:ba:89:a5:85:53:3a:4e:
1d:80:4c:91:31:99:17:eb:7a:b8:e3:41:5e:2a:85:ef:df:c7:
19:a4:86:f3:3e:e0:69:b3:3c:f6:25:58:18:3e:de:a7:04:3f:
8d:e9:e9:20:6b:bc:1e:20:ed:12:23:33:02:58:fa:3b:79:0a:
8a:47:b4:1a:fe:49:ea:73:79:9d:9a:b3:8a:ae:cb:62:ef:17:
ca:ec:d4:4d:de:a5:30:a8:b2:aa:c8:b5:8a:56:3c:7e:98:19:
67:dc:0b:5a:00:27:7c:87:1b:a2:24:58:9c:42:15:62:11:1b:
8f:09:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:06 2025 by rpki-client