Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa
File: tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa (raw, json)
Hash identifier: LNKhqCFpfxh4yLCE6flHF7nS1iuYQ5HYGHmanz4NOuU=
Subject key identifier: B5:7A:A0:64:6D:64:56:06:E4:00:8F:B6:8E:16:30:56:B8:B9:65:1B
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018571C30D16C004E0136C6FD50C805618E8
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa
Signing time: Mon 02 Jan 2023 09:14:46 +0000
ROA not before: Mon 02 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203729
IP address blocks: 185.186.8.0/24 maxlen: 24
2a0b:6b81:210::/48 maxlen: 48
2a0b:6b81:208::/48 maxlen: 48
2a0b:6b81:1::/48 maxlen: 48
2a0b:6b81:205::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:0d:16:c0:04:e0:13:6c:6f:d5:0c:80:56:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 2 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b57aa0646d645606e4008fb68e163056b8b9651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:ff:93:4b:68:b9:a5:b3:c2:b5:b6:c2:13:
b8:8e:b3:dc:e2:38:de:ca:91:88:df:48:e6:75:75:
ce:39:bf:27:b9:72:3d:82:e2:90:9b:11:21:c8:0e:
e5:9c:25:5d:fe:a1:41:3d:fe:1d:ac:c0:86:21:df:
f2:57:de:46:75:0d:5d:27:90:b5:98:cf:f5:c1:52:
ff:8f:ee:d4:62:56:66:1b:ef:82:49:45:1d:d9:c6:
d6:ba:48:17:75:21:ff:c4:84:4a:2e:e2:62:28:e4:
83:15:6d:28:a8:48:67:ca:72:d1:78:fe:c7:5a:03:
30:af:68:11:5b:88:77:46:ce:0f:03:22:bb:28:bc:
23:22:3d:53:56:55:2e:75:eb:ad:8e:52:5e:9a:db:
12:ef:a5:3f:a2:94:41:d9:d7:cd:55:e9:05:cf:b6:
24:2c:79:b3:76:9f:8e:7f:3c:b8:ed:4b:0f:06:c1:
24:7c:63:6a:b7:9f:dd:33:f9:eb:4c:6f:c4:df:a7:
80:6a:b5:17:33:e7:3d:b8:1e:91:08:9b:79:94:d8:
e4:2d:28:6a:17:81:79:ea:61:7a:22:01:ec:ed:2e:
23:2e:21:e9:21:ce:c7:73:4b:8c:2c:c5:24:1d:dd:
0e:5f:0b:b5:af:02:83:0b:5b:16:2a:7f:4f:9f:27:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:A0:64:6D:64:56:06:E4:00:8F:B6:8E:16:30:56:B8:B9:65:1B
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/24
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:205::/48
2a0b:6b81:208::/48
2a0b:6b81:210::/48
Signature Algorithm: sha256WithRSAEncryption
74:cb:7e:f9:b5:9c:b2:9b:5f:a7:ef:4f:84:0b:6d:b7:31:dc:
3a:72:ac:79:bc:3d:55:cc:c2:18:2c:31:9f:5a:f9:ff:06:f2:
a5:3d:4e:fd:2d:d6:51:a8:41:b4:38:3f:d8:10:c1:f0:75:b5:
2b:53:c3:9d:9f:db:e3:26:fa:3c:84:43:e5:b8:f4:2e:1a:db:
de:68:00:ca:ab:1b:af:2d:cf:65:b8:6b:f6:de:73:b5:35:06:
35:ad:7f:d0:31:9a:ac:d4:6b:2e:41:15:85:2b:cf:d3:40:01:
15:c0:4c:4a:f4:84:1d:da:b9:66:47:15:1e:d3:34:c0:2a:69:
1a:42:04:9a:98:bd:15:3a:52:59:79:13:35:5b:a9:6f:8a:64:
13:1b:b3:48:33:c9:7d:69:59:d0:ed:f7:2a:eb:ce:ca:ca:8a:
01:74:eb:b4:ff:d7:75:09:c3:f4:5b:ed:77:5d:28:49:6f:7a:
49:40:08:0b:67:76:dd:36:50:8f:84:1e:9a:80:56:12:73:1b:
0f:1e:fc:3a:76:63:23:cd:ac:14:5b:62:a9:63:ed:3e:2a:dd:
8b:98:fc:87:4f:a7:4c:7a:31:b6:b8:4c:eb:ef:29:f1:0a:20:
b1:93:bd:10:31:62:36:1e:47:75:0e:32:1f:1e:a6:38:b4:1b:
ff:8c:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:23 2025 by rpki-client