Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/CXYELXMLS3s3B4ypovw5LKVQfU8.roa
File: CXYELXMLS3s3B4ypovw5LKVQfU8.roa (raw, json)
Hash identifier: IebPwetHe4cACBsx7cgxO1mtY7wlXDFYL/Xzcws7/SU=
Subject key identifier: 09:76:04:2D:73:0B:4B:7B:37:07:8C:A9:A2:FC:39:2C:A5:50:7D:4F
Certificate issuer: /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial: 0188FB99200E9E8DF70FB407DF3339DCE313
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/CXYELXMLS3s3B4ypovw5LKVQfU8.roa
Signing time: Tue 27 Jun 2023 06:44:56 +0000
ROA not before: Tue 27 Jun 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30925
IP address blocks: 185.223.36.0/22 maxlen: 22
194.124.196.0/22 maxlen: 22
185.220.212.0/22 maxlen: 22
185.226.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:99:20:0e:9e:8d:f7:0f:b4:07:df:33:39:dc:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Validity
Not Before: Jun 27 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0976042d730b4b7b37078ca9a2fc392ca5507d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:29:9b:a0:ff:04:0e:80:0f:82:05:9f:9d:
5d:ff:e8:ba:4e:f9:0e:bf:3e:4e:cd:e7:da:09:55:
66:80:09:26:76:23:fa:73:2c:c9:e6:c7:52:b5:b2:
07:dc:a7:24:49:fa:f0:52:96:00:8e:b1:cf:d0:0f:
57:af:57:b6:1e:67:41:89:59:c0:43:70:69:2f:9f:
2e:8b:44:41:09:56:b8:64:5b:56:b4:29:49:59:c3:
08:79:58:ba:ab:86:a3:a4:3a:12:7f:84:68:c5:81:
a6:e9:8d:a4:60:2e:bf:95:35:84:62:1f:8c:a2:bf:
5e:b7:c1:02:f3:59:85:e1:4e:74:a0:5e:1b:e4:3e:
ce:1b:8f:6d:53:35:e5:5f:4a:57:f5:1b:ea:25:23:
ab:33:60:50:32:35:80:51:af:7b:83:81:52:f3:c3:
88:76:b7:a9:61:da:92:49:4c:cd:58:d3:91:18:a5:
b9:f0:b7:72:56:d8:c5:9b:b7:2e:f3:79:2b:ea:1f:
3e:26:7d:d5:c6:6f:99:ed:86:cc:e9:2f:de:d0:a0:
cf:44:59:7f:19:81:1f:e8:cf:0c:3c:ca:9b:c9:10:
b5:d2:93:5e:0c:0a:45:a4:93:b9:6a:82:08:74:ec:
41:54:0e:99:5f:d2:84:01:3a:fc:4e:7b:c7:e7:ff:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:04:2D:73:0B:4B:7B:37:07:8C:A9:A2:FC:39:2C:A5:50:7D:4F
X509v3 Authority Key Identifier:
keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/CXYELXMLS3s3B4ypovw5LKVQfU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.212.0/22
185.223.36.0/22
185.226.76.0/22
194.124.196.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:c8:34:d2:66:ea:5f:2b:f8:48:a5:20:2b:f4:3a:52:d1:b4:
9e:91:a0:06:de:63:cc:26:dd:0a:ed:32:f5:fd:75:e4:b2:bc:
3b:9f:fc:3c:c0:2e:f8:d9:44:23:ce:39:19:36:72:fe:80:9a:
98:dd:77:f3:4c:6e:59:05:e5:27:84:8f:60:92:5f:d4:9c:5f:
a8:b0:ef:60:1e:8d:a4:82:f8:5c:66:d5:4d:c6:37:07:21:5b:
57:89:7a:39:4c:76:64:dd:e4:c9:87:18:05:39:ff:58:e6:3d:
df:84:7b:ef:6d:22:cf:9d:4b:b8:7a:67:d6:93:47:85:16:8d:
d5:43:8b:5d:86:2b:3d:74:be:1a:32:6a:2e:c9:dd:52:f8:e5:
fe:f0:b3:90:14:a9:87:bd:ba:94:45:68:01:bb:da:8e:01:3f:
8b:bf:b7:3f:22:89:a9:a6:61:dc:30:c5:11:02:dd:0f:3d:7d:
18:91:51:81:e0:21:6a:de:de:1e:87:b9:5d:a0:b4:01:7f:f3:
da:d3:6a:f4:c6:a3:ec:d1:d4:13:e9:c7:9e:2f:ae:69:8c:7a:
4d:53:eb:3f:bf:52:00:ac:da:17:de:77:ac:27:9a:67:e4:7c:
71:6e:d5:56:1a:22:37:e2:bc:f8:43:b4:a5:b1:4d:9a:40:b2:
93:0f:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:27 2025 by rpki-client