Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/g2CDg-9R27fJUzEBLjiPzp6Ujzw.roa
File: g2CDg-9R27fJUzEBLjiPzp6Ujzw.roa (raw, json)
Hash identifier: ioHMOfnV3bj1pS3c4iGw0+RxeGFqFhIEuNH+XvUXjq4=
Subject key identifier: 83:60:83:83:EF:51:DB:B7:C9:53:31:01:2E:38:8F:CE:9E:94:8F:3C
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 0B15B87E
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/g2CDg-9R27fJUzEBLjiPzp6Ujzw.roa
Signing time: Sat 01 Jan 2022 03:59:24 +0000
ROA not before: Sat 01 Jan 2022 03:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203713
IP address blocks: 185.153.77.0/24 maxlen: 24
185.153.78.0/24 maxlen: 24
185.153.76.0/22 maxlen: 24
185.153.76.0/24 maxlen: 24
185.153.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185972862 (0xb15b87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Jan 1 03:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83608383ef51dbb7c95331012e388fce9e948f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:5a:7a:56:46:70:80:3a:1d:4a:13:b1:b6:
6b:84:3e:60:3b:6d:a1:e4:37:33:a2:ec:39:c2:6f:
58:20:be:d9:e7:42:5f:26:91:fb:8b:23:39:19:00:
62:c1:49:9d:81:63:02:e3:fe:4e:5d:51:6c:a9:2e:
14:87:ed:05:5a:5f:65:ae:cb:6e:a5:b6:6b:32:d8:
ee:f6:8c:d0:44:66:02:e6:d3:5f:06:60:dd:06:1c:
fa:1a:3c:34:ba:aa:2f:dd:1c:ca:68:1d:75:3e:41:
9b:5e:97:77:79:6b:61:ea:2d:2f:a4:65:5b:e6:d2:
77:3d:e5:e7:b5:2f:cf:e8:ce:bb:43:9c:ac:db:52:
26:09:93:01:28:56:f8:48:8c:02:1b:09:76:36:5e:
48:b2:0f:6d:f9:52:11:64:d6:1b:ae:01:c0:96:db:
f2:51:40:f0:31:2e:8b:d2:c2:a5:70:df:ee:4e:6b:
73:c1:47:0e:b8:7f:e8:71:e4:fe:06:92:01:67:39:
8f:b2:c2:6e:24:4c:36:bd:14:88:83:cd:21:a1:df:
bd:19:f4:7d:cf:24:07:77:22:a2:67:d7:5a:42:dc:
00:25:79:22:84:e2:f0:11:c0:1a:14:a5:33:3f:19:
98:ec:98:8b:dd:d2:fb:fa:7f:f5:c5:cf:95:90:35:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:83:83:EF:51:DB:B7:C9:53:31:01:2E:38:8F:CE:9E:94:8F:3C
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/g2CDg-9R27fJUzEBLjiPzp6Ujzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.76.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c5:f5:43:c4:84:e6:bd:84:07:30:76:25:d8:38:7c:48:c4:
96:bb:84:f1:d0:4a:b9:48:66:62:06:c5:c9:a9:72:8f:77:76:
8d:12:ce:65:84:34:33:33:77:1d:11:ed:94:46:ba:6e:ec:0d:
e5:f9:e0:67:b3:27:18:7d:a0:c3:47:f6:cb:93:91:4e:62:3e:
10:a5:e3:46:e9:75:5f:21:4d:69:18:02:06:f2:e2:d0:31:e8:
33:4a:74:74:c4:1b:7d:71:fa:38:3d:8c:b3:3e:df:28:3c:21:
08:ac:4b:f2:05:32:e7:37:ce:a8:8c:4a:83:e7:a6:c2:fc:7e:
0d:74:f9:09:bb:50:1d:d9:d9:67:62:5a:50:c6:9f:77:69:f0:
86:4d:67:5d:b2:00:4f:40:c4:6b:48:9a:e1:78:42:ec:03:57:
a4:c3:41:af:7b:12:b6:e8:85:01:97:cc:86:e5:49:ca:46:97:
62:79:cb:99:3d:a1:1f:7d:c1:79:2b:90:f8:27:89:a9:63:42:
24:bf:3f:42:ce:ee:a6:f6:66:c0:4d:e5:51:1e:99:f6:c6:01:
30:4e:ea:f9:19:52:d3:5c:3d:6e:ce:53:45:4d:1d:57:07:91:
01:6f:fa:67:ad:39:fc:b7:f0:23:e2:f3:c6:d5:f0:26:bf:1b:
83:5d:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:09 2025 by rpki-client