Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/DYq1cJRhcFJbD10Hf9IqAFRBvRc.roa
File: DYq1cJRhcFJbD10Hf9IqAFRBvRc.roa (raw, json)
Hash identifier: IID5WhJu4ORuQNjNWzlVWzLJc7F5Cgv7JiiP7YMl+nY=
Subject key identifier: 0D:8A:B5:70:94:61:70:52:5B:0F:5D:07:7F:D2:2A:00:54:41:BD:17
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01856FF041CAF5E2BE4E33B3EEAF5E70BA5B
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/DYq1cJRhcFJbD10Hf9IqAFRBvRc.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213024
IP address blocks: 185.179.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:41:ca:f5:e2:be:4e:33:b3:ee:af:5e:70:ba:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d8ab570946170525b0f5d077fd22a005441bd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:4c:a9:da:3e:b8:90:50:e6:16:17:58:6e:
18:88:23:28:21:03:bd:f5:8a:1c:02:d0:49:0d:8d:
51:28:be:a6:7b:ce:05:a2:2e:27:68:c2:82:f0:ce:
64:c7:9c:50:21:3a:66:7a:ff:8e:da:a7:ad:75:b6:
64:4f:7a:20:60:4e:bc:2e:92:b7:40:7e:e1:45:55:
57:4f:a7:bb:f5:93:8e:f6:ec:f8:45:6c:a0:85:1d:
28:b3:de:68:f5:65:25:0f:89:19:90:f5:1c:4a:10:
f0:8a:d7:f5:04:9a:15:d0:e3:5e:bf:dc:cd:cb:2e:
da:da:19:01:c5:6c:f0:7f:93:e3:f9:11:ca:d2:07:
00:98:58:ee:80:9a:24:c5:e0:b4:f5:7e:73:13:ee:
85:20:12:41:fd:bb:b8:6c:72:d2:66:6b:49:59:7c:
08:8b:2d:3c:30:93:aa:a1:18:db:9b:a8:e4:fe:da:
48:b1:fc:b1:c6:8d:19:4e:d5:d6:00:b3:d9:73:82:
7a:ad:90:29:6e:7d:f2:34:44:36:66:e7:5b:0f:88:
da:db:0e:58:ca:9f:d2:5f:41:ae:27:28:4d:88:93:
c0:d0:15:ff:d7:9d:cd:09:d6:fb:a7:39:4c:82:80:
78:c9:d8:04:df:9b:1b:7e:5a:0a:ca:29:b5:a2:03:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8A:B5:70:94:61:70:52:5B:0F:5D:07:7F:D2:2A:00:54:41:BD:17
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/DYq1cJRhcFJbD10Hf9IqAFRBvRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e8:c5:5e:79:c8:a6:bb:11:83:3f:e2:53:fd:32:08:34:ab:
55:1d:f8:78:5c:88:ac:04:52:11:e3:be:fd:33:95:ff:1c:28:
f2:ca:f9:31:ec:51:b6:00:06:78:55:16:5c:b7:21:ca:b5:2c:
18:09:3e:53:4e:7e:93:53:3e:d2:49:4e:15:7f:65:c7:e9:27:
49:78:e2:c6:2b:81:b5:cd:ba:30:f4:f3:aa:fc:68:04:f2:8a:
fd:23:3c:c8:75:03:0d:34:2c:b6:be:bb:62:0b:e4:0b:0c:3d:
33:20:e0:49:77:2a:65:3d:7c:e3:88:15:6e:93:a1:6d:c6:41:
64:13:eb:b9:a4:15:57:c5:29:4a:cf:08:79:7d:e8:b0:3b:85:
10:c2:d3:8b:fb:78:2a:9a:e9:ba:78:38:0a:6b:a8:13:82:91:
f1:0d:97:85:b1:70:b8:36:e1:b0:c9:b2:d5:5d:91:94:cc:be:
a3:b4:76:ae:b7:d6:68:38:83:bb:31:05:2c:eb:07:5e:b1:23:
95:e2:f3:19:bc:0f:3d:9c:91:95:45:a2:0a:18:97:09:c0:be:
69:c1:6b:7d:48:9b:e0:3e:a7:27:06:56:6f:d9:ac:7f:e2:b6:
38:a3:ae:5e:23:3e:fb:20:e9:d3:9b:a5:40:b1:93:22:48:c1:
cf:b6:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:47 2025 by rpki-client