Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/0QzQEQ_77YlDbyk2N5gViS1o7-Q.roa
File: 0QzQEQ_77YlDbyk2N5gViS1o7-Q.roa (raw, json)
Hash identifier: JUVZH1PXB0uzW1BWlAkngdJtwpT16jecO+ChTdDOiI8=
Subject key identifier: D1:0C:D0:11:0F:FB:ED:89:43:6F:29:36:37:98:15:89:2D:68:EF:E4
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0182B0DC7B7292C4480D5A996A1AE2CBE66A
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/0QzQEQ_77YlDbyk2N5gViS1o7-Q.roa
Signing time: Thu 18 Aug 2022 12:10:15 +0000
ROA not before: Thu 18 Aug 2022 12:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211432
IP address blocks: 185.169.228.0/22 maxlen: 22
45.147.152.0/22 maxlen: 22
85.8.168.0/22 maxlen: 22
2.56.184.0/22 maxlen: 22
193.37.220.0/22 maxlen: 22
31.40.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:dc:7b:72:92:c4:48:0d:5a:99:6a:1a:e2:cb:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Aug 18 12:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d10cd0110ffbed89436f2936379815892d68efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:46:56:c4:fe:6f:94:b3:c0:1a:b1:70:a7:
01:ce:41:40:d8:9a:5e:bb:bd:7b:1b:ff:76:e8:12:
38:f0:1a:39:b2:fd:eb:f1:03:e8:3d:66:c5:c7:c2:
f5:79:32:2e:b4:12:c3:79:07:b4:03:6b:67:2a:65:
2c:aa:99:a2:31:73:98:b7:08:87:88:fd:50:93:b8:
50:ca:2a:f2:76:12:5f:21:26:0a:99:ab:73:c7:be:
2f:48:1f:35:54:f0:cf:b3:22:1c:07:6c:13:fb:e0:
1e:f3:ce:88:62:19:b9:c0:9b:15:82:26:19:29:34:
d3:18:f6:b0:fc:c7:71:36:08:5b:2d:5d:9a:a2:40:
59:60:dc:f4:69:00:fe:85:b2:53:4d:bf:c2:38:e6:
4b:fb:2c:d3:48:e9:bd:a2:fc:c2:db:bd:f2:36:1c:
64:68:6c:a0:3d:49:fd:29:a6:17:8b:d5:18:80:a7:
87:51:bd:5e:80:55:54:f8:a4:e9:91:39:fc:e3:b3:
16:44:9d:70:bc:14:95:b5:10:a8:9d:b7:59:9e:2c:
d0:ca:b2:a9:87:a4:fa:dc:ed:f4:91:11:1d:04:ef:
70:4c:33:b4:ce:a4:87:ee:c6:12:db:67:24:ae:5b:
fe:5c:ec:72:65:87:80:56:ef:9a:30:a7:63:c2:ca:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:D0:11:0F:FB:ED:89:43:6F:29:36:37:98:15:89:2D:68:EF:E4
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/0QzQEQ_77YlDbyk2N5gViS1o7-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
31.40.232.0/22
45.147.152.0/22
85.8.168.0/22
185.169.228.0/22
193.37.220.0/22
Signature Algorithm: sha256WithRSAEncryption
50:69:1e:65:ba:61:ec:c5:72:ad:59:1a:e2:d2:28:8d:57:7e:
f8:7c:8c:72:67:95:46:88:08:f0:01:e3:b5:ed:bc:3c:58:62:
1c:b4:86:0d:a3:84:c3:4e:a4:05:fd:c1:5f:95:a1:de:5c:3d:
f2:84:12:b9:ad:85:b7:b4:f2:8a:e4:d1:3d:d1:56:a3:b4:8e:
d0:03:c7:b4:7f:8d:90:87:ea:a8:7d:c9:b1:2b:95:11:80:07:
2e:f2:f2:21:85:c9:db:5c:7a:a4:f6:94:f0:32:5f:7d:36:00:
ef:1a:73:f0:2f:f9:ac:84:b8:3c:dc:74:7e:c7:a6:aa:ae:93:
b0:ac:d7:9f:c7:89:4b:dc:91:c1:0f:37:68:69:1e:90:d1:66:
e1:a4:10:25:75:1a:b2:54:36:4c:0e:7f:3d:23:8f:82:f6:70:
57:1b:6a:4b:ff:cb:6e:91:7b:bb:87:5b:f9:0e:2a:0e:39:60:
f7:ec:ee:e3:1d:f4:38:5a:59:83:3d:02:46:14:ec:86:ae:3b:
97:d2:c9:4a:e8:bd:5a:27:3c:7b:60:05:f0:04:7b:ed:24:e8:
7d:3a:a8:aa:41:b7:05:18:c5:ef:e6:61:47:9c:ea:0b:ba:76:
fb:f7:2a:d6:6a:96:61:d2:a9:64:8b:e5:4a:79:a3:a3:2e:6f:
1f:f1:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:38 2025 by rpki-client