Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/dKzGnUzj4OfOQ0tuPBYRlGR7r4o.roa
File: dKzGnUzj4OfOQ0tuPBYRlGR7r4o.roa (raw, json)
Hash identifier: A+hae0+nIh/Y/RCTd65VlPPkIQv0B9GS3MQlINvmnpY=
Subject key identifier: 74:AC:C6:9D:4C:E3:E0:E7:CE:43:4B:6E:3C:16:11:94:64:7B:AF:8A
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 36892A36
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/dKzGnUzj4OfOQ0tuPBYRlGR7r4o.roa
Signing time: Sat 01 Jan 2022 12:56:49 +0000
ROA not before: Sat 01 Jan 2022 12:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206837
IP address blocks: 185.44.61.0/24 maxlen: 24
185.44.60.0/23 maxlen: 23
185.44.60.0/24 maxlen: 24
91.195.34.0/24 maxlen: 24
91.195.34.0/23 maxlen: 23
91.195.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914958902 (0x36892a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 12:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74acc69d4ce3e0e7ce434b6e3c161194647baf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:e0:06:97:75:b9:2b:9c:d0:e9:64:85:d8:
ae:55:f6:43:25:fe:dc:6c:d3:c5:ca:9b:cd:a6:46:
e1:7c:cf:be:3e:c5:df:53:6f:28:e7:81:9c:1a:86:
b5:0a:05:60:b1:42:a8:7c:fa:8e:89:25:fb:17:37:
f5:b5:3a:c1:93:57:97:e3:9c:2d:da:9a:b0:19:0c:
d7:f0:56:b9:e9:aa:94:80:18:81:bf:a3:27:72:59:
e5:1b:e1:14:59:cc:4a:30:c8:0b:a1:0d:f3:fa:3f:
bf:22:60:af:d4:4b:d2:6b:71:e3:b5:7a:11:e7:71:
8d:5a:5a:a4:63:54:01:c5:20:42:1b:e2:d2:f0:01:
ed:9b:9a:47:a0:8f:9b:8c:a6:ab:ce:c9:55:e9:8e:
a5:c6:87:5f:ba:8e:fc:46:fa:4a:78:58:2d:a4:e9:
b8:b2:58:2f:df:6f:a3:b2:87:1e:57:e1:d2:5e:ed:
fe:ce:9e:cd:33:bf:72:cc:d7:d5:eb:35:e8:cf:b3:
98:e5:9b:c0:be:e6:ec:65:2d:0c:0e:13:7b:c1:3b:
14:50:bd:8a:47:a1:97:71:cf:6b:ac:22:e6:5e:6b:
12:ee:0c:54:cb:dd:8d:12:0d:5d:df:78:c5:7b:79:
e0:e8:8c:2f:50:dd:7b:36:bb:88:6d:d1:0d:97:f0:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AC:C6:9D:4C:E3:E0:E7:CE:43:4B:6E:3C:16:11:94:64:7B:AF:8A
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/dKzGnUzj4OfOQ0tuPBYRlGR7r4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.34.0/23
185.44.60.0/23
Signature Algorithm: sha256WithRSAEncryption
28:6c:29:40:bd:13:bf:af:7d:f0:3c:12:ec:99:85:0d:ac:81:
bb:48:d9:4b:aa:24:bf:f2:64:26:6f:56:7a:4b:d1:cd:5b:22:
90:8c:ac:20:18:4b:4a:0b:ef:f5:c4:3d:eb:c0:e7:db:29:02:
b4:a6:bd:0a:2c:79:ed:8b:2d:0e:28:23:12:8e:e9:89:a9:d3:
50:7b:0f:f5:e5:82:e0:e4:ca:0a:f4:ad:8f:76:29:9a:a7:22:
fb:27:54:86:90:fc:c2:c3:78:85:71:1d:1a:65:c7:f0:ba:60:
e5:40:1d:71:04:f9:21:1d:89:f2:77:f1:a7:44:d8:7c:e4:19:
b7:f5:b2:d4:34:be:88:f1:15:c6:5d:ec:d5:3b:bf:24:49:6b:
d5:03:5a:0b:16:0d:87:e5:21:93:a1:14:9b:b0:90:5d:65:36:
f2:29:29:42:bd:43:c1:a8:e1:c7:fc:bc:59:68:90:1c:3f:9e:
75:ac:6c:07:be:d9:8f:ad:02:12:1f:35:83:ff:e3:60:86:d4:
be:4b:76:53:85:ba:7e:fb:b7:a9:53:84:4d:86:a0:36:c3:66:
91:56:c5:f1:7e:51:f9:92:69:69:4d:f1:f5:bb:0c:70:82:f0:
ea:c4:b8:c4:72:d3:b4:87:d8:28:0e:d9:37:0e:89:8f:95:a0:
99:e7:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:38 2025 by rpki-client