Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa
File: swcfL4m1S8RvzyOsH2VDxrBQVdM.roa (raw, json)
Hash identifier: tYf1z6gsT7CQXnlaJIBNW9mM4Gk8AXaZwJpoSuVK4no=
Subject key identifier: B3:07:1F:2F:89:B5:4B:C4:6F:CF:23:AC:1F:65:43:C6:B0:50:55:D3
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 05B96F3A
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa
Signing time: Sat 01 Jan 2022 05:56:34 +0000
ROA not before: Sat 01 Jan 2022 05:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203187
IP address blocks: 185.82.80.0/24 maxlen: 24
185.82.83.0/24 maxlen: 24
185.82.80.0/22 maxlen: 22
185.82.81.0/24 maxlen: 24
185.82.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96038714 (0x5b96f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Jan 1 05:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3071f2f89b54bc46fcf23ac1f6543c6b05055d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:93:7e:21:5e:6a:52:86:7a:c8:ec:67:be:
2f:c5:54:c7:df:82:40:13:8e:f9:38:c6:97:23:01:
49:ef:b9:c0:f6:26:d3:7c:b6:8d:85:d1:a0:d1:c4:
0d:37:fc:6f:2e:14:a3:9c:14:f0:35:a5:84:b5:b0:
4f:39:e3:39:6f:fe:e9:c9:c8:19:90:dd:a6:77:89:
1a:6a:03:ff:3d:da:ba:c5:d2:8b:11:8c:c8:cf:1f:
57:72:74:6d:f8:d0:e6:a9:68:70:99:40:bd:6c:81:
ed:b9:64:d6:d1:72:1d:92:fb:cc:4a:a5:e5:67:10:
2a:2c:8f:ca:9b:c7:81:d2:21:91:7f:87:7c:07:27:
f1:4e:3c:01:e2:e4:62:9b:c4:c9:9d:0b:cc:0f:39:
02:b6:c9:5d:6f:9d:6b:55:51:ac:a7:f3:41:d1:a6:
7d:f7:1b:f6:9e:e8:4b:d9:c1:ef:76:a0:0e:3c:cb:
3f:3a:46:9c:29:d9:3a:6c:c7:13:de:75:ac:12:e3:
98:e1:73:7f:af:a7:16:3f:c7:1f:e8:47:a6:90:b5:
5b:b3:80:ec:c9:12:d6:2f:6e:15:50:f5:73:41:14:
0e:ef:dd:3a:88:b5:8b:62:7e:92:ac:6c:65:41:0f:
3d:bd:9e:17:c9:76:e5:9e:de:46:82:97:62:28:5d:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:1F:2F:89:B5:4B:C4:6F:CF:23:AC:1F:65:43:C6:B0:50:55:D3
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6b:8f:ad:20:24:bb:de:55:67:f6:88:e4:2c:7e:6f:08:6c:
f1:4b:af:b4:dc:3a:aa:28:e7:52:a5:c7:24:04:5f:4e:47:d1:
44:d9:00:08:bb:5b:37:38:12:f7:06:4c:68:be:95:8e:7e:94:
aa:b4:3a:45:6f:9f:61:29:40:29:91:8d:d4:95:e2:ab:e7:a4:
a1:c2:57:2b:ff:b7:53:4d:2e:f1:f4:ba:6c:11:38:5e:82:35:
54:93:d6:ef:af:ea:76:02:65:ee:95:22:30:d3:52:22:5e:46:
fe:c6:09:ee:d7:e7:72:1d:b5:86:80:98:d8:2a:7c:63:5c:ca:
88:73:b8:c2:4f:15:40:86:dd:01:40:b4:49:47:e9:e2:24:fd:
a1:0b:f1:02:fe:71:ef:b9:78:af:a4:80:71:9f:d1:a8:4b:5a:
fe:ae:41:a1:d8:71:30:53:f9:e7:52:2e:ba:37:0a:c2:43:3e:
17:46:b2:0c:51:22:e8:1b:86:77:4a:c9:67:ea:0e:bd:5e:a5:
c6:4f:97:ac:a6:76:b6:42:f9:9a:e2:91:ae:9d:63:53:c3:ca:
f3:1d:60:81:f8:ff:ae:7c:2b:db:77:29:f0:dc:fb:91:97:c7:
48:69:59:ca:61:65:e4:01:c7:9f:d1:02:e3:5b:f0:74:98:49:
10:d6:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:58 2025 by rpki-client