Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/Dfx4gkbkNOQgMI__oEvqQUP-JXE.roa
File: Dfx4gkbkNOQgMI__oEvqQUP-JXE.roa (raw, json)
Hash identifier: 3irGzPU1LP+scv8FWI1Gq3gi29ZoDM/pz0RtFKW2vZ8=
Subject key identifier: 0D:FC:78:82:46:E4:34:E4:20:30:8F:FF:A0:4B:EA:41:43:FE:25:71
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 01857227FF6ACC79029407E001559C8B233D
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/Dfx4gkbkNOQgMI__oEvqQUP-JXE.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59816
IP address blocks: 185.251.224.0/22 maxlen: 22
185.251.226.0/24 maxlen: 24
185.251.225.0/24 maxlen: 24
194.147.121.0/24 maxlen: 24
194.147.123.0/24 maxlen: 24
194.147.122.0/24 maxlen: 24
194.147.120.0/24 maxlen: 24
194.147.120.0/22 maxlen: 22
185.251.227.0/24 maxlen: 24
185.70.134.0/24 maxlen: 24
185.70.133.0/24 maxlen: 24
185.70.135.0/24 maxlen: 24
185.70.132.0/22 maxlen: 22
185.70.132.0/24 maxlen: 24
185.241.38.0/24 maxlen: 24
185.241.37.0/24 maxlen: 24
185.241.36.0/22 maxlen: 22
185.241.36.0/24 maxlen: 24
185.241.39.0/24 maxlen: 24
185.254.91.0/24 maxlen: 24
185.254.90.0/24 maxlen: 24
185.254.89.0/24 maxlen: 24
185.254.88.0/24 maxlen: 24
185.254.88.0/22 maxlen: 22
2a05:2a00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:ff:6a:cc:79:02:94:07:e0:01:55:9c:8b:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dfc788246e434e420308fffa04bea4143fe2571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:8b:b1:bf:42:85:76:fc:3d:5a:58:8d:86:
34:5f:ac:38:e9:39:45:72:60:95:8b:53:c1:f5:2e:
66:ca:fa:90:12:3d:ad:6c:e3:fd:3d:d5:da:b1:a6:
90:d1:92:3e:33:e5:a5:be:4f:04:0f:ce:e1:0e:5e:
b2:35:d5:ec:fe:51:3e:b4:17:c3:d0:12:66:16:01:
e2:3e:b9:0c:15:7a:6a:d6:bf:d3:50:a4:71:0a:54:
04:92:80:f0:97:91:19:ff:15:fc:99:93:78:83:9c:
8b:14:1f:d4:ad:74:3c:47:90:f4:31:1f:fd:70:5a:
79:4e:1c:ec:cd:7c:c8:4e:06:5b:04:63:cf:45:0a:
b9:3f:ec:4e:20:b6:19:89:43:20:86:6b:e1:28:98:
30:79:4b:f0:8c:5c:d4:1d:ee:01:56:d9:56:a0:d6:
6e:3e:d2:97:c8:bc:ad:ca:c7:a6:1b:fd:7f:96:3b:
42:a6:37:0c:80:74:b1:c7:16:86:67:c1:3e:56:b6:
67:e9:62:bf:4b:46:cc:40:f3:2e:b0:f0:37:b6:b8:
87:f6:44:21:35:bb:9d:60:b5:74:aa:63:0f:10:10:
c3:d3:09:bd:95:a4:01:e6:cb:d3:04:66:05:33:36:
49:2d:e7:3d:43:ee:f1:87:0e:0f:d9:4b:10:67:af:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:78:82:46:E4:34:E4:20:30:8F:FF:A0:4B:EA:41:43:FE:25:71
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/Dfx4gkbkNOQgMI__oEvqQUP-JXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:b4:01:b4:0b:4d:2d:40:80:7b:f2:59:8b:04:47:12:3a:f3:
13:e1:1a:85:a2:b2:e5:b3:10:ee:d8:59:f9:b0:e0:2e:f9:6b:
2d:c4:75:36:dc:92:99:2d:0e:21:00:40:a4:c0:c0:47:43:bb:
57:9c:15:e4:8e:0a:5f:e7:f2:cc:e7:2c:f0:d0:dd:16:dd:ea:
6e:e5:a5:e9:4c:6e:0a:b0:ca:a8:0e:a0:4f:38:f3:ef:3f:86:
aa:a3:dc:46:c2:4a:ce:b7:f5:4f:20:0f:3a:65:bf:29:e2:0b:
ba:95:cf:5a:55:f8:d1:0d:cd:fa:e1:ca:d4:4d:36:97:10:7c:
d5:0b:39:3a:38:eb:56:b1:99:a5:5d:7d:fb:53:08:1c:d0:3e:
68:17:c4:78:2d:09:48:f5:b5:8b:9f:5a:49:25:99:1e:01:8f:
fb:04:8e:43:79:21:f4:72:47:d0:8c:43:8a:c2:4d:3d:53:a7:
50:e8:8a:05:82:62:2f:3a:47:c2:9a:26:34:e8:38:8d:a1:0f:
0a:8e:66:fd:dd:21:5b:91:7f:10:cc:04:92:7d:0e:5a:92:22:
43:3e:42:64:8e:7d:9d:55:36:b0:3d:fc:95:29:42:4d:ad:10:
c7:8d:6d:e4:92:76:0c:ac:25:0a:52:76:72:75:05:59:0e:50:
36:f0:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:54 2025 by rpki-client