Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/iAYEdbU6PVz_Aixjf88C6uMUYR8.roa
File: iAYEdbU6PVz_Aixjf88C6uMUYR8.roa (raw, json)
Hash identifier: lMjL63zRh/Ml8jPbnHHiNWRNYa2xjdPQn06x23rbmAY=
Subject key identifier: 88:06:04:75:B5:3A:3D:5C:FF:02:2C:63:7F:CF:02:EA:E3:14:61:1F
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01894F570B055F5F68AFF9B8B63F2ABFB475
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/iAYEdbU6PVz_Aixjf88C6uMUYR8.roa
Signing time: Thu 13 Jul 2023 13:00:51 +0000
ROA not before: Thu 13 Jul 2023 13:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48944
IP address blocks: 185.243.50.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
178.239.144.0/22 maxlen: 22
185.212.50.0/23 maxlen: 24
178.239.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:57:0b:05:5f:5f:68:af:f9:b8:b6:3f:2a:bf:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 13 13:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88060475b53a3d5cff022c637fcf02eae314611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:4e:3f:78:67:d3:30:56:e0:2a:2b:74:9f:
51:35:ba:4b:6b:ed:5a:d6:e5:0b:9d:59:3d:88:f4:
a7:ac:1c:bf:31:64:73:85:e9:47:b6:e1:f6:64:b6:
f2:40:42:02:fb:8f:74:11:ae:8c:3c:3a:0c:bf:7d:
3b:a8:65:c2:02:fe:6a:84:7e:34:f5:c9:4a:3d:25:
5f:31:f9:26:0f:ef:6b:90:4b:09:09:60:27:3d:63:
ae:40:d5:55:b9:95:f1:59:e0:0e:eb:33:09:38:46:
70:c2:06:c2:50:da:86:df:81:89:7f:51:bc:a8:b4:
ef:c8:84:04:38:20:e9:f6:c9:0a:c5:3e:30:0d:36:
98:a8:9b:08:a7:ec:8a:1d:8b:b8:3b:17:58:ba:e9:
4b:4a:ba:2d:20:96:63:84:97:0e:87:4f:0f:b1:6b:
84:b9:2b:a6:4b:71:f7:d1:61:48:4e:c2:73:6e:c8:
00:c3:e2:99:05:38:67:dd:f6:ab:f7:d0:4b:4a:dd:
00:a7:a8:93:c5:dc:3d:3b:84:1f:82:00:2a:f4:6d:
40:74:73:d2:82:92:77:f0:af:0d:64:44:da:b3:6b:
cf:e8:26:94:22:80:ca:02:21:b4:1c:b9:89:30:bc:
af:22:cb:d1:7a:a7:a9:b1:0f:aa:fa:61:47:7c:5a:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:04:75:B5:3A:3D:5C:FF:02:2C:63:7F:CF:02:EA:E3:14:61:1F
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/iAYEdbU6PVz_Aixjf88C6uMUYR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0-178.239.149.255
185.212.50.0/23
185.215.228.0/23
185.243.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:d9:2c:95:90:8b:33:38:0e:a6:25:8b:67:b3:53:f9:65:58:
c6:de:19:1e:b9:0a:bc:44:e9:c6:6c:20:f9:ae:30:7e:6a:8c:
29:ff:cd:7d:25:f2:b4:cf:d4:5e:83:ba:43:f6:56:b6:a1:d9:
a6:72:4e:91:01:81:6c:93:03:0d:fc:ef:96:26:98:f6:98:1d:
ca:21:8e:a2:92:5e:02:48:be:f4:0b:31:1d:c9:b4:f9:4f:45:
fc:5e:15:00:50:0c:c9:24:c2:6c:b8:37:82:39:65:7c:41:1a:
09:f7:04:f8:51:9f:b1:b5:76:72:8d:9f:e3:56:a4:07:e6:b7:
95:97:ce:d8:a6:91:ed:a5:08:e7:50:11:61:71:35:26:c1:cf:
c9:b1:00:13:c9:6e:2c:df:ad:2b:3b:60:26:8e:73:bd:c5:54:
e7:d6:cf:d7:44:2c:cc:a0:3f:bf:9d:bd:18:e4:fa:06:11:35:
e7:35:9d:d5:95:da:a8:f8:14:dc:3f:ba:8f:9b:de:2f:54:b2:
68:b7:b9:42:5a:97:3c:c5:a3:7f:60:5a:46:3a:99:98:c0:39:
94:01:af:35:48:98:8f:d3:a2:5d:22:a5:b2:f1:a0:45:b4:74:
a6:1f:0a:e6:1f:b3:0e:3b:0f:e2:45:2c:a3:4d:8b:f5:c0:d8:
40:f6:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:15 2025 by rpki-client