Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/02xwn5plhiT5rlTnPPlT6cq5Oio.roa
File: 02xwn5plhiT5rlTnPPlT6cq5Oio.roa (raw, json)
Hash identifier: 9eQphaogE0LZgQynZMDk53sUGgS0IDKFUM0gEOxeStE=
Subject key identifier: D3:6C:70:9F:9A:65:86:24:F9:AE:54:E7:3C:F9:53:E9:CA:B9:3A:2A
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 01856BAE9F904F46D58B47C7A627909389CE
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/02xwn5plhiT5rlTnPPlT6cq5Oio.roa
Signing time: Sun 01 Jan 2023 04:54:44 +0000
ROA not before: Sun 01 Jan 2023 04:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 185.3.168.0/24 maxlen: 24
185.3.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:9f:90:4f:46:d5:8b:47:c7:a6:27:90:93:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jan 1 04:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d36c709f9a658624f9ae54e73cf953e9cab93a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:7a:45:df:93:19:97:7d:60:42:a9:5c:b9:
0f:a2:56:09:e2:42:d7:5a:19:ac:96:0c:35:c0:86:
b3:d4:07:0c:dd:2e:8d:91:41:c2:8a:a7:8e:14:46:
7f:82:d3:f2:5d:7b:a0:cd:3b:7c:55:df:c5:7b:49:
c0:d2:78:c2:cd:4b:d9:84:cc:a5:e0:11:3e:dc:aa:
7a:38:2c:da:bb:a0:84:70:f2:03:64:ff:92:e7:f6:
9e:02:08:0b:38:84:6e:36:84:55:9d:fa:15:4d:ad:
a1:af:bc:5a:f9:dd:27:ce:89:fc:8b:48:12:9b:b9:
ff:a3:7f:aa:05:45:98:03:9d:17:4a:22:b6:f1:c3:
5a:7b:f6:d8:dc:70:cd:05:7f:20:6a:fc:bf:4a:dc:
99:10:35:c3:f9:a3:44:ee:15:15:0e:52:80:2d:0a:
bf:fd:21:b1:2d:1f:dc:6b:00:77:31:75:42:aa:06:
03:b4:7e:02:bc:0e:ff:98:64:32:7b:17:ce:af:52:
b7:bd:e8:bb:3c:91:8b:55:a3:62:c7:9e:11:2a:46:
76:c1:9f:6e:91:ef:bc:08:a0:55:b4:11:20:f1:5d:
28:56:75:e9:48:d0:80:67:ea:01:54:b6:25:e2:cf:
df:e7:cd:a8:31:9e:76:45:f6:5d:20:53:1d:e1:26:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:70:9F:9A:65:86:24:F9:AE:54:E7:3C:F9:53:E9:CA:B9:3A:2A
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/02xwn5plhiT5rlTnPPlT6cq5Oio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.168.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c5:38:05:44:b4:19:d6:26:6d:1a:93:7e:fd:65:b2:71:dc:
e7:a7:cc:03:da:bb:c2:35:a1:0d:64:2f:7a:43:31:11:bb:f6:
af:66:a6:67:c0:67:45:4e:36:a7:92:74:5e:a7:d7:a9:54:8f:
2e:b5:b8:df:b3:55:a1:7b:3e:7b:29:d4:f8:65:04:18:58:93:
1c:74:37:57:78:fd:82:a8:bd:10:7e:92:c9:9e:81:47:82:56:
d3:e2:70:01:dd:b4:1f:0b:b3:ff:d5:a6:10:8d:35:31:e3:97:
a3:9b:3d:c1:35:81:aa:b0:ad:35:4b:23:55:8c:df:79:04:d5:
45:66:10:c6:40:1f:7c:3b:e6:44:ed:6e:36:18:7e:6b:77:8a:
72:a9:18:43:8c:04:2a:44:13:df:68:bc:a3:01:bb:96:19:1d:
2d:26:13:61:0e:1a:e1:22:75:6c:ae:73:1f:d3:45:4c:8a:61:
fb:0c:f3:e8:ba:99:83:a6:2a:06:0c:34:35:79:fe:8a:73:28:
93:50:cc:6f:db:6a:c5:4f:cd:67:d7:8f:53:7d:9d:9b:c3:41:
48:25:46:aa:64:05:bb:0a:da:87:78:79:8e:7e:64:68:dd:f1:
0f:6c:50:f6:b7:f1:0d:f7:10:25:df:83:be:e7:1f:61:72:09:
5d:b4:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:26 2025 by rpki-client