Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/MyAE38b-YxTxGijFT-l3j1zT17k.roa
File: MyAE38b-YxTxGijFT-l3j1zT17k.roa (raw, json)
Hash identifier: DaTHRWMqn41rHIk4ozVwBja0AJzs/zSAOwd3nORhkAI=
Subject key identifier: 33:20:04:DF:C6:FE:63:14:F1:1A:28:C5:4F:E9:77:8F:5C:D3:D7:B9
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0184894FE1162BF6DB17B0FC3736769704FC
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/MyAE38b-YxTxGijFT-l3j1zT17k.roa
Signing time: Fri 18 Nov 2022 05:57:04 +0000
ROA not before: Fri 18 Nov 2022 05:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47237
IP address blocks: 195.216.237.0/24 maxlen: 24
185.117.148.0/22 maxlen: 24
194.152.36.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:4f:e1:16:2b:f6:db:17:b0:fc:37:36:76:97:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Nov 18 05:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=332004dfc6fe6314f11a28c54fe9778f5cd3d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:24:ea:f1:67:87:36:26:e9:0d:6d:7a:d7:
eb:43:d8:d1:7a:19:2f:b3:6d:df:24:82:b8:b6:7b:
7a:bc:4c:ca:06:b7:82:3a:6b:b4:3e:38:0f:d4:6f:
b1:0a:06:72:3e:26:0d:4f:22:ca:5c:6f:4f:14:3c:
43:52:55:8b:2f:39:f5:31:e2:0d:b1:87:17:98:71:
7b:49:44:74:7b:85:26:5c:f0:52:0c:c4:92:0f:96:
4a:02:9b:91:95:da:fb:92:78:0d:2d:65:c7:72:ef:
aa:ba:ae:49:4f:a4:6e:c6:5c:83:6c:e0:7d:bf:7e:
a7:f5:d0:f8:96:4c:58:db:66:ef:43:e6:ba:be:24:
42:de:9d:96:93:11:6e:c5:a0:07:8b:0c:f0:a4:cc:
59:e7:03:9f:47:c8:ac:64:69:15:4b:50:f8:d1:1f:
ab:04:91:0a:92:73:9e:b3:75:54:1a:92:39:50:23:
3c:af:32:44:be:cf:34:fc:b4:ad:ed:b7:1c:4d:85:
80:f7:98:51:fe:3e:40:d4:41:1b:f4:cd:f9:d7:55:
9c:24:cc:6c:3e:c3:8e:ac:db:7f:4c:2e:48:8a:db:
72:ca:01:7e:c2:5a:17:60:ea:57:a5:16:77:ce:9d:
b0:0c:51:bd:10:8c:88:9f:d7:65:3c:da:cf:87:b9:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:04:DF:C6:FE:63:14:F1:1A:28:C5:4F:E9:77:8F:5C:D3:D7:B9
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/MyAE38b-YxTxGijFT-l3j1zT17k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.148.0/22
194.152.36.0/23
195.216.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fc:6c:20:ec:a0:09:66:c1:29:54:53:d3:d9:2e:65:e9:4f:
ad:c4:13:7e:bc:c6:fd:1a:b0:eb:1c:83:81:b9:08:64:f7:50:
1c:2c:e1:0a:88:4d:67:c7:05:a7:09:5c:4c:d9:54:27:d0:f0:
0f:01:7e:b3:bc:54:6f:43:86:ec:f8:40:a7:e4:eb:a7:87:3b:
05:d7:d1:89:2a:33:ab:90:ae:64:73:20:7a:1f:57:62:fe:5b:
12:36:cb:ef:33:48:75:19:6f:a2:f6:29:b0:da:81:dc:f3:06:
95:97:a6:ed:cb:1d:e4:79:05:64:bd:b6:ba:98:0d:a6:47:50:
86:5b:90:ec:e6:70:31:ef:5b:4b:76:ac:0c:1c:be:0b:36:b3:
11:37:59:f3:38:c0:cb:00:2e:07:38:b9:74:8b:2a:72:aa:42:
17:52:3e:39:4d:39:e1:c5:08:00:58:27:84:45:81:3d:03:c3:
d7:6c:b0:27:6a:53:36:f7:2e:6a:29:45:29:bd:ee:5b:32:85:
67:f7:71:1c:c5:98:3d:2c:d5:c8:d0:72:c3:fb:24:9e:3b:d2:
8f:e8:93:6d:9a:de:a1:f6:a5:ce:06:38:45:cc:47:ed:2d:14:
2d:76:0a:e2:8f:30:b9:5c:00:85:57:de:22:e3:7c:04:0b:8f:
ff:b3:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:08 2025 by rpki-client