Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ouOt1rQ1OHnvdRIHMEMWUG4pKhA.roa
File: ouOt1rQ1OHnvdRIHMEMWUG4pKhA.roa (raw, json)
Hash identifier: ve+SD3YLQhXIqQg8oOeCbPCMr56V+PVnx80f2uzhzSw=
Subject key identifier: A2:E3:AD:D6:B4:35:38:79:EF:75:12:07:30:43:16:50:6E:29:2A:10
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 018CB60074B10D265810996F970E855462E8
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ouOt1rQ1OHnvdRIHMEMWUG4pKhA.roa
Signing time: Fri 29 Dec 2023 14:35:32 +0000
ROA not before: Fri 29 Dec 2023 14:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205105
IP address blocks: 185.230.169.0/24 maxlen: 24
185.230.168.0/22 maxlen: 22
185.230.170.0/24 maxlen: 24
185.230.171.0/24 maxlen: 24
185.230.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:00:74:b1:0d:26:58:10:99:6f:97:0e:85:54:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Dec 29 14:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2e3add6b4353879ef751207304316506e292a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:60:bd:3a:f6:0c:fa:21:96:23:33:98:26:
4b:d0:ff:40:5c:a8:7c:40:56:2b:79:6f:38:d1:69:
20:0a:35:99:de:35:c2:6c:87:42:36:80:9a:2a:c0:
ce:11:e0:e5:ac:f0:ec:61:d3:7c:d6:b9:93:3d:08:
22:e1:fa:d8:d5:85:05:eb:d6:65:bf:21:d4:2a:3d:
f8:53:36:a8:00:95:3a:70:c7:15:4f:cb:20:71:0b:
42:63:3e:df:72:bb:42:0b:4f:ff:2e:91:0c:a2:87:
4a:51:1c:ef:27:2d:ef:e7:c3:5a:97:74:e4:c1:fc:
d1:52:04:9c:56:72:49:bd:1e:7a:a0:1c:72:43:1f:
fe:07:e0:56:c3:70:44:a7:05:3c:06:83:25:c0:1c:
61:65:5c:b5:e5:d1:0b:0b:2b:f1:b3:69:fc:2a:1a:
a9:09:50:04:ce:25:d7:70:d9:c9:e1:fb:4f:29:19:
5d:6b:dc:8a:99:a1:a8:77:95:07:d0:5d:91:16:3c:
0b:89:3d:3c:03:01:3a:a9:56:35:36:4a:5f:a3:2e:
30:6c:45:14:aa:f8:94:29:00:09:35:47:30:4e:e6:
8c:19:35:01:57:7b:74:dc:da:fc:39:71:70:3e:3f:
22:6d:6f:15:6d:00:4b:96:8a:ae:82:24:84:78:d6:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:AD:D6:B4:35:38:79:EF:75:12:07:30:43:16:50:6E:29:2A:10
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ouOt1rQ1OHnvdRIHMEMWUG4pKhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.168.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:b1:36:94:e8:e9:41:5e:93:11:be:c5:3b:d4:3b:df:ff:b6:
9c:a4:68:25:c8:6e:68:b8:82:66:86:f2:fa:78:b9:ff:eb:fb:
1b:66:5f:cf:f3:eb:73:a3:e3:c9:4e:91:97:79:7f:26:04:95:
bf:40:d1:4e:ba:18:85:4a:55:ce:66:16:ec:87:1a:dd:b4:57:
91:c2:6d:5a:51:0a:fe:0f:c7:e4:f4:95:0c:f9:4f:24:cf:fb:
91:ac:87:91:70:6c:ff:fb:61:b4:8e:92:a8:96:a9:96:28:a4:
ea:e0:dc:a0:92:b3:d0:40:f8:b8:3b:47:2e:e0:f5:9b:e3:78:
a3:be:aa:ac:f4:0d:f0:cb:7a:1a:f1:14:30:b1:97:87:61:e8:
df:43:19:bd:08:4b:d6:e1:b6:24:98:01:c3:f7:48:24:2c:b2:
61:a4:bf:f4:53:ce:59:0a:2a:8f:4e:aa:29:ff:24:3f:f0:a3:
2a:d4:ee:4e:24:24:90:69:22:59:3f:be:cd:d4:97:c1:ed:dd:
bb:f7:09:6e:6c:a6:41:d5:b7:4d:87:f1:2c:19:46:b7:60:a9:
c1:22:10:db:9a:76:43:86:50:be:69:64:f2:e7:14:d6:e0:41:
cb:c8:c8:41:62:56:7d:f0:0c:f7:bb:df:1e:7c:78:3b:10:b1:
30:01:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:35 2025 by rpki-client