Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/K8byLQ8eiHooCPZg4pcMqbY070U.roa
File: K8byLQ8eiHooCPZg4pcMqbY070U.roa (raw, json)
Hash identifier: z6tMUc8xx6JUiLG/lRBAsRRZ2DcGiCGMUIwBVxEYLo8=
Subject key identifier: 2B:C6:F2:2D:0F:1E:88:7A:28:08:F6:60:E2:97:0C:A9:B6:34:EF:45
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 02C86C48
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/K8byLQ8eiHooCPZg4pcMqbY070U.roa
Signing time: Wed 15 Jun 2022 11:51:44 +0000
ROA not before: Wed 15 Jun 2022 11:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47777
IP address blocks: 185.160.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46689352 (0x2c86c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jun 15 11:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc6f22d0f1e887a2808f660e2970ca9b634ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:eb:e3:e0:cb:dd:12:08:36:b4:3f:98:44:
40:aa:84:d9:95:20:c7:34:82:dd:e0:bb:31:bc:8e:
13:3f:eb:ea:c6:e0:2c:23:4c:0e:12:b5:d6:a3:81:
d8:d3:9d:b4:2b:05:e5:d2:04:e7:0d:96:dc:a0:a2:
52:0a:0b:04:94:c7:29:74:8e:6e:8a:a4:15:05:66:
b3:80:f0:a1:3a:7a:94:99:17:96:f0:9c:06:01:75:
3d:8a:71:ba:99:55:43:21:7b:82:36:7c:5a:a3:0e:
6d:fe:e3:8a:29:9c:48:e0:53:72:2c:2f:94:34:e5:
fc:85:b5:d3:53:35:ba:67:ce:bb:d5:01:82:57:06:
13:a0:52:a6:1c:d2:b1:ee:5f:5b:1a:e6:5c:cc:55:
85:d8:d7:16:42:84:be:8a:21:73:f7:0f:d6:fd:85:
33:cc:c2:f2:bb:bf:14:cf:38:2f:54:b8:8f:1c:11:
0c:d0:24:aa:8d:89:28:c6:cd:53:66:2a:58:e3:b7:
75:6e:5e:27:fc:c0:45:54:e5:57:bb:00:9f:23:3d:
1a:0c:18:ca:b2:e8:41:e4:3d:66:9f:f2:f9:9a:4b:
84:95:54:0a:fa:60:4e:2e:b3:96:f9:10:9c:ce:0f:
58:2d:d5:7a:9e:a2:c0:ad:4c:73:c2:ee:01:76:16:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:F2:2D:0F:1E:88:7A:28:08:F6:60:E2:97:0C:A9:B6:34:EF:45
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/K8byLQ8eiHooCPZg4pcMqbY070U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e3:b5:e5:3c:69:b2:88:82:8f:a8:f3:82:1e:59:08:28:fc:
4b:c8:55:cd:7d:c2:94:ee:40:50:48:02:e4:05:2b:f8:ae:ef:
1c:9b:6e:e3:db:26:68:2b:1c:6f:10:29:5f:83:e8:c5:43:b5:
06:61:8c:9e:dc:e6:0e:f4:25:90:6b:cb:dc:bb:cb:2c:56:1a:
42:b5:b4:9f:11:87:4f:0b:76:d8:a6:fa:10:aa:6d:de:a9:b7:
70:05:b4:29:58:d9:6b:c1:2d:28:52:35:0d:75:b3:1a:b8:71:
4b:e5:34:31:95:0d:1e:68:b1:28:91:52:55:7c:bd:a8:7e:a8:
7f:88:99:13:2b:f4:5b:a2:af:1e:a9:bf:c8:e7:61:5a:8f:54:
3f:d8:89:45:2a:fa:03:83:e5:12:37:d1:02:2c:37:2a:7a:ee:
d5:bf:fd:ac:0b:16:38:18:99:1a:ba:1f:df:82:9a:0e:ed:5e:
4a:6b:6a:7c:b1:fb:2e:64:4c:ee:eb:aa:6c:34:57:c8:5f:b4:
cb:bf:45:11:88:27:e2:8a:c4:0f:29:d6:90:85:e8:3a:88:a8:
67:31:fa:34:ed:c0:03:7e:67:bb:93:bf:c6:76:b6:c9:d2:15:
04:32:4b:9c:4c:5b:92:5b:ec:3f:f8:89:bc:a8:09:7c:1b:6c:
85:55:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:34 2025 by rpki-client