Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/3cj7sIRswwqACR46TszgSgNfQlM.roa
File: 3cj7sIRswwqACR46TszgSgNfQlM.roa (raw, json)
Hash identifier: IH2kDMsYotE4qYxyny1OXrCLkBHrDukjIvGU4lHP9EM=
Subject key identifier: DD:C8:FB:B0:84:6C:C3:0A:80:09:1E:3A:4E:CC:E0:4A:03:5F:42:53
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 06295D44
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/3cj7sIRswwqACR46TszgSgNfQlM.roa
Signing time: Sat 01 Jan 2022 15:03:47 +0000
ROA not before: Sat 01 Jan 2022 15:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50025
IP address blocks: 195.211.181.0/24 maxlen: 24
195.211.180.0/23 maxlen: 23
195.211.182.0/24 maxlen: 24
195.211.180.0/22 maxlen: 22
195.211.180.0/24 maxlen: 24
195.211.182.0/23 maxlen: 23
91.229.165.0/24 maxlen: 24
91.229.164.0/23 maxlen: 23
91.229.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103374148 (0x6295d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Jan 1 15:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddc8fbb0846cc30a80091e3a4ecce04a035f4253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:82:da:35:46:19:9f:18:32:cd:4c:9e:b9:
e0:7b:c5:85:a0:59:80:55:41:40:a4:ed:44:a7:32:
9f:4c:46:03:cf:68:a7:02:2a:d6:8e:10:76:39:5a:
e3:58:55:6f:bc:ce:87:19:c9:f8:6b:1d:70:d9:70:
57:d1:7e:ec:e4:f9:bc:c1:e5:6f:7c:9e:38:8f:0e:
c4:c4:9d:04:b5:ce:99:48:38:c9:1d:1c:76:d4:ab:
65:ec:76:b9:3c:8b:38:f0:4e:80:b1:5c:25:c0:5c:
01:a8:de:b8:77:36:e7:aa:dd:bc:ed:a3:2f:ad:90:
fe:3b:4d:98:23:fc:cb:91:1d:52:26:04:eb:aa:f9:
b6:04:9e:a3:13:76:ae:5f:71:ca:55:d8:09:4e:22:
ea:97:85:84:da:99:2c:cb:45:3b:f0:ee:11:25:c5:
c2:69:f1:bb:a6:20:29:60:71:c3:a7:22:0b:bf:80:
de:d6:1a:a5:2e:6b:be:0d:2d:bf:7c:38:e4:61:8b:
62:0a:2b:67:06:04:b5:ac:94:8f:3b:01:b7:6f:51:
1f:cc:7c:08:23:76:72:86:56:ad:78:90:ab:fe:af:
44:ee:21:3c:24:a0:67:85:a0:3e:23:32:a7:38:6c:
29:c3:f9:35:a4:d8:23:94:b9:c5:76:73:b9:4a:f1:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:FB:B0:84:6C:C3:0A:80:09:1E:3A:4E:CC:E0:4A:03:5F:42:53
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/3cj7sIRswwqACR46TszgSgNfQlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.160.0-91.229.165.255
195.211.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:cd:61:7d:a5:c4:6b:27:25:81:fa:1d:28:f2:e9:76:1d:26:
ad:47:b5:f1:bf:4c:b7:d2:ce:3a:b2:58:c0:a5:03:c8:65:c4:
11:ec:9d:cf:7a:b7:f1:d2:be:79:c2:c9:bd:84:dd:32:70:4c:
e9:3f:68:44:e8:13:e6:df:38:cf:75:2a:f0:6b:ea:3f:8d:c3:
ff:fd:01:72:a2:ed:39:a2:b4:46:7e:af:07:28:d6:13:42:75:
21:98:16:78:1d:b4:34:3d:c1:3e:8c:cb:4b:bd:14:af:88:13:
8b:6b:93:23:a0:f1:f7:44:ff:86:a9:80:3c:e5:a4:ec:ee:cd:
0a:21:04:2e:96:7c:9b:a1:e3:04:b7:89:fa:c2:85:0f:49:8e:
c8:d7:67:bc:58:62:6f:22:55:af:bc:b8:5c:86:78:9a:74:2a:
ae:de:f0:92:52:54:02:66:a4:37:ef:a4:c2:ea:1a:3e:9c:c0:
96:b1:1f:ef:3f:5c:d6:e7:4b:d1:f9:13:12:81:84:2a:cc:56:
c1:df:8a:48:a0:d3:af:c4:99:aa:1a:76:4e:d3:29:da:8c:c5:
a6:99:05:3b:7b:d9:1c:fd:16:d0:61:be:ff:be:e3:df:5d:2b:
1b:21:2a:cd:dc:29:e7:51:27:7a:4c:e4:d8:a9:d6:2e:9a:04:
21:e7:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:33 2025 by rpki-client