Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/IfmxnBWqkbvCuvOHHi6835wzXPE.roa
File: IfmxnBWqkbvCuvOHHi6835wzXPE.roa (raw, json)
Hash identifier: gmP81ZLETeIo7gSplGWf80TxXUjvxyRZV37Xue1b8qw=
Subject key identifier: 21:F9:B1:9C:15:AA:91:BB:C2:BA:F3:87:1E:2E:BC:DF:9C:33:5C:F1
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 19CF955E
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/IfmxnBWqkbvCuvOHHi6835wzXPE.roa
Signing time: Sat 01 Jan 2022 16:06:56 +0000
ROA not before: Sat 01 Jan 2022 16:06:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197558
IP address blocks: 185.103.224.0/22 maxlen: 22
185.10.148.0/22 maxlen: 24
77.237.252.0/22 maxlen: 22
185.98.48.0/22 maxlen: 22
46.253.48.0/20 maxlen: 24
2a00:6400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433034590 (0x19cf955e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Jan 1 16:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21f9b19c15aa91bbc2baf3871e2ebcdf9c335cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:8f:a4:4f:a3:11:2a:97:57:af:75:70:6c:
1e:08:46:f9:97:76:0b:45:3e:40:ac:f4:c7:c0:e9:
44:f7:9c:90:aa:68:3e:f0:7b:4f:54:3f:0a:ac:01:
dc:04:be:33:a6:0f:2c:c5:f8:ff:94:6c:fe:5f:cc:
67:07:dc:92:9b:ca:44:f1:ad:af:d5:a8:d3:4f:19:
24:1a:47:4a:24:55:2c:b0:54:01:bc:c7:63:30:e4:
31:32:b0:10:6e:a6:59:d5:e3:d4:01:66:46:db:03:
2e:9a:88:94:8b:cb:a4:c9:b3:33:5a:1d:0b:97:89:
52:bf:d8:08:22:89:27:31:6a:23:4d:4e:ac:f0:30:
d3:59:c0:ee:41:1e:1f:51:c1:aa:3d:53:03:a1:d1:
bd:2d:02:09:da:5d:e8:ab:61:6c:2f:0e:ce:f2:0a:
00:ec:6b:ad:85:31:68:7d:37:ed:c0:6f:9b:f2:73:
02:32:2f:1f:5a:8c:fe:a0:8f:7e:3a:0e:c7:df:66:
79:ba:93:b1:fd:d6:8f:68:12:32:fd:22:22:c2:13:
51:ba:20:c4:6a:58:80:e2:c4:b4:9f:8f:84:6c:a5:
c6:3b:12:7d:61:92:d5:88:b3:20:87:3e:f1:61:fa:
44:cb:a0:c4:a6:b9:fe:34:e2:93:98:46:d9:39:e3:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:B1:9C:15:AA:91:BB:C2:BA:F3:87:1E:2E:BC:DF:9C:33:5C:F1
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/IfmxnBWqkbvCuvOHHi6835wzXPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.48.0/20
77.237.252.0/22
185.10.148.0/22
185.98.48.0/22
185.103.224.0/22
IPv6:
2a00:6400::/32
Signature Algorithm: sha256WithRSAEncryption
00:9c:8b:d2:6a:ae:28:62:91:27:ae:f9:4a:d4:55:19:ad:d6:
93:6b:97:7a:99:ef:30:9c:55:ea:14:cb:08:71:6a:bb:cc:51:
65:73:df:e7:a3:8c:a5:05:6f:a3:ee:24:a0:17:fe:7f:b1:14:
92:de:ed:e3:07:d7:c0:92:89:93:1a:90:91:ee:ce:96:f8:fa:
49:21:65:11:11:cd:48:f2:f1:74:47:bf:cc:1a:33:21:41:a8:
29:12:6b:32:bc:80:dd:94:0f:a0:81:e0:c8:14:09:5a:94:0d:
bd:ec:85:4f:89:6e:4f:85:cf:fd:7a:cb:6a:33:63:58:cd:39:
7f:2c:eb:f1:65:bc:bf:6d:30:bc:bc:31:8a:b2:76:87:ca:db:
97:68:4f:cd:5a:70:47:11:3f:f4:99:20:90:51:27:cf:05:28:
ad:7d:72:79:ae:3b:68:f0:42:cc:fc:a2:9f:3a:13:9d:04:f2:
ff:ee:b1:27:da:a8:01:97:c2:bc:6c:11:a2:9a:f0:0e:56:6e:
15:14:76:c2:2c:eb:8a:f6:11:5f:1e:3c:ca:da:eb:da:9f:ef:
f4:ed:10:60:84:17:18:9e:08:86:6c:44:4a:4c:45:3c:de:d2:
5d:b3:fb:40:87:44:d4:7b:4f:73:70:3e:2b:70:bb:91:77:56:
89:9b:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:56 2025 by rpki-client