Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/z307QYA2Q_HYCG_CPUPoAp8J9k4.roa
File: z307QYA2Q_HYCG_CPUPoAp8J9k4.roa (raw, json)
Hash identifier: gKcwJNrofqBjxYTtbfAN/93gP3qepKH75HacThwRMJc=
Subject key identifier: CF:7D:3B:41:80:36:43:F1:D8:08:6F:C2:3D:43:E8:02:9F:09:F6:4E
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01856F42DAE89AD6BB1F1584F2D36D05B764
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/z307QYA2Q_HYCG_CPUPoAp8J9k4.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34871
IP address blocks: 185.240.151.0/24 maxlen: 24
185.240.148.0/22 maxlen: 22
185.240.148.0/23 maxlen: 23
185.240.148.0/24 maxlen: 24
185.240.150.0/24 maxlen: 24
185.240.149.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:da:e8:9a:d6:bb:1f:15:84:f2:d3:6d:05:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7d3b41803643f1d8086fc23d43e8029f09f64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:88:ea:d8:de:ff:1c:d3:13:05:2e:6b:c8:
50:a7:17:cc:79:59:81:84:84:2d:ab:18:5e:2c:52:
36:ba:3b:61:8e:45:e6:94:78:82:9f:cc:3f:5f:14:
74:bc:38:58:4e:e3:f1:bc:03:48:06:01:11:d4:cb:
da:ed:41:c5:06:31:17:f7:f4:fa:02:d7:ed:73:11:
6b:f9:e6:56:8b:61:b4:48:50:6b:4c:2e:90:ef:bf:
8c:e4:39:36:d6:bc:8b:2e:d6:8c:23:35:fd:7a:7d:
8f:53:e7:12:40:a2:50:c7:55:17:08:3a:bb:53:18:
e2:8b:13:dd:f5:84:f1:42:85:41:69:ee:7c:14:63:
72:f0:8e:b1:b9:46:84:ed:21:19:67:4d:2e:bd:0c:
fb:ac:33:26:d6:4a:cd:7a:96:49:71:78:de:39:3c:
38:ca:bb:c8:3a:cd:a3:19:46:04:59:65:85:44:13:
b1:e7:bd:34:05:ab:a9:d3:b0:58:0e:c9:7a:6e:f2:
65:5a:f2:12:f8:78:bd:c5:85:b2:65:43:7d:1d:9b:
6f:f9:f6:51:d7:4e:65:ba:e8:b2:5c:20:21:9e:94:
a5:52:23:17:42:31:09:14:eb:98:3a:d4:34:ba:31:
07:93:d3:f8:75:ec:39:7a:1b:1e:74:5d:7a:9a:17:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:3B:41:80:36:43:F1:D8:08:6F:C2:3D:43:E8:02:9F:09:F6:4E
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/z307QYA2Q_HYCG_CPUPoAp8J9k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.148.0/22
195.238.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:17:34:dd:3b:6e:b5:10:91:32:a5:25:8a:f9:93:52:b8:16:
b3:66:6a:71:95:72:b9:71:5e:0f:88:59:2c:98:b1:ed:01:d3:
82:e1:0a:88:79:97:ab:d9:48:f7:96:7e:65:31:b1:7d:e7:ba:
63:2d:fd:6c:28:3e:3f:8e:d3:04:4b:4a:33:29:30:b6:65:8a:
a6:4a:a7:5b:ce:63:35:dd:bb:2f:86:01:af:93:c0:d7:0e:8c:
ef:cd:b8:64:fe:47:7d:ef:69:b3:da:11:03:fd:a3:a9:ea:46:
c1:19:ac:03:74:f1:47:19:dc:94:ca:4c:58:71:d2:54:53:a0:
b1:f7:68:c1:25:3a:6e:7e:a8:3c:b0:55:d9:fc:ff:53:cd:47:
a5:7c:cc:81:74:e3:56:6c:f4:31:92:1e:91:9a:20:9c:de:4b:
0d:37:5c:ac:ec:d4:19:c8:fb:97:09:03:0a:66:03:a5:f5:ca:
53:e0:ae:a6:fc:c7:d7:dd:87:09:1d:55:80:0d:cb:fd:ba:42:
bd:a1:b9:9e:58:42:27:ff:2d:c0:4d:f2:ec:a1:50:43:d2:9e:
7a:0b:5c:43:bf:69:74:52:1e:12:dc:fd:8a:ca:13:40:b3:0b:
ed:8a:a3:0a:65:1f:bd:f8:1f:67:aa:8b:20:6c:4d:f9:01:64:
45:ce:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:51 2025 by rpki-client