Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/B12wwG9RyWHAZjSA3wJBzD11Q-8.roa
File: B12wwG9RyWHAZjSA3wJBzD11Q-8.roa (raw, json)
Hash identifier: 75jFVFRlMZ6z3xbipLGt+sd2LPyWHq7jXslPdD0kkwM=
Subject key identifier: 07:5D:B0:C0:6F:51:C9:61:C0:66:34:80:DF:02:41:CC:3D:75:43:EF
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0A3D2F99
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/B12wwG9RyWHAZjSA3wJBzD11Q-8.roa
Signing time: Sat 01 Jan 2022 04:01:37 +0000
ROA not before: Sat 01 Jan 2022 04:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.160.152.0/22 maxlen: 22
185.160.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171782041 (0xa3d2f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jan 1 04:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=075db0c06f51c961c0663480df0241cc3d7543ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:55:f5:b8:23:6a:78:2c:3d:b8:fa:88:5e:
0d:06:2f:e7:d2:b6:7c:30:6b:9c:7d:ae:8e:1c:3c:
c7:6b:e8:f5:4b:5b:36:85:0e:df:d1:e8:e7:7e:20:
99:b9:0c:2f:8a:e9:2e:43:63:a8:90:91:0b:db:6a:
11:af:e0:ce:b7:d1:c5:09:40:75:85:fe:0e:4d:3f:
f8:6d:99:10:59:1d:fc:a6:a5:e5:e9:b2:eb:d1:69:
56:e8:4f:d4:e7:78:04:8f:41:ec:0e:09:33:6a:e1:
16:02:02:37:97:04:3d:d9:a1:04:16:69:bd:2f:20:
d5:2f:52:df:df:a2:ea:1b:f2:83:98:08:5f:84:81:
60:32:03:5a:3e:bf:6c:9b:86:95:58:33:10:7e:7b:
d2:10:44:d1:63:a6:7a:42:71:32:5d:22:c0:0f:ee:
41:61:b1:a8:30:41:91:8f:1b:83:78:47:74:00:09:
d3:b3:36:03:16:2b:14:b9:26:6b:a2:8a:9b:a2:69:
78:5d:96:8d:de:05:46:58:1e:68:12:5f:28:9d:61:
2e:4d:be:97:e9:c3:99:22:25:da:eb:69:8a:90:97:
c6:1c:28:13:48:b2:32:0c:2a:d9:7a:a9:4b:2a:68:
a4:c4:f0:98:b1:03:e1:10:a1:29:80:45:19:15:19:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:B0:C0:6F:51:C9:61:C0:66:34:80:DF:02:41:CC:3D:75:43:EF
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/B12wwG9RyWHAZjSA3wJBzD11Q-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.152.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ad:01:b6:3d:8b:8c:a5:fa:5b:e6:35:10:3b:34:48:4e:53:
8f:70:c5:e0:ff:70:31:33:d7:9d:bd:8c:85:56:9b:d3:ce:2f:
51:55:0f:68:c1:58:3b:6f:31:4c:2d:b3:cc:47:f0:ed:b2:50:
33:d5:d2:ba:a2:01:4c:dc:f0:b6:c4:6e:f1:20:30:f0:7d:2b:
d7:f3:ef:eb:28:94:aa:83:e1:b4:04:02:83:b3:6e:40:df:6a:
f4:b8:7d:ab:06:18:46:93:fc:74:0d:d3:f7:9a:79:78:9e:32:
7f:10:53:ae:55:c6:a5:c2:b6:f1:17:d5:52:eb:71:b8:c1:7f:
3d:26:d8:ed:f4:2e:74:e8:cb:4f:60:16:33:7f:6c:8d:78:83:
d4:8c:54:ac:54:ab:60:8a:5c:64:e8:da:78:fa:01:1a:93:06:
1a:b7:39:04:6b:c9:33:6e:cc:06:f7:8b:7b:87:8f:83:ae:5b:
66:07:6a:e0:34:87:34:2e:35:a4:06:1a:0d:62:bf:c3:89:de:
fa:58:a3:be:03:7f:f8:62:ca:7b:d8:70:33:da:43:6d:2f:ed:
ad:dd:7d:22:34:eb:aa:f2:e9:1b:91:f7:79:a7:7c:7e:4d:65:
d3:26:e2:0a:e6:06:43:bd:c5:f6:45:02:40:8e:f3:8b:e6:95:
0c:e6:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:47 2025 by rpki-client