Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/1sJ3bBUS1qnDFij4tFqbHb2g_aU.roa
File: 1sJ3bBUS1qnDFij4tFqbHb2g_aU.roa (raw, json)
Hash identifier: l1swhrnZ8OBBhro3Zl1/DXYO/geCrQO5XdylOo++R2U=
Subject key identifier: D6:C2:77:6C:15:12:D6:A9:C3:16:28:F8:B4:5A:9B:1D:BD:A0:FD:A5
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 0185719E6E36437F0A7473E2E5026729429C
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/1sJ3bBUS1qnDFij4tFqbHb2g_aU.roa
Signing time: Mon 02 Jan 2023 08:34:46 +0000
ROA not before: Mon 02 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29422
IP address blocks: 194.29.192.0/21 maxlen: 21
194.79.16.0/22 maxlen: 22
81.17.192.0/21 maxlen: 21
185.123.116.0/22 maxlen: 22
109.75.224.0/21 maxlen: 21
80.69.160.0/21 maxlen: 21
80.69.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6e:36:43:7f:0a:74:73:e2:e5:02:67:29:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jan 2 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6c2776c1512d6a9c31628f8b45a9b1dbda0fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:4b:a4:08:62:6d:64:af:ff:cc:3e:6f:86:
46:30:1d:85:74:07:0b:41:db:b2:cd:a3:76:b1:0c:
99:8a:ac:23:e5:a1:5e:df:75:1f:03:42:61:4d:17:
d7:e6:42:17:54:a1:8a:89:b4:e9:03:26:02:93:d4:
b6:22:06:5b:af:eb:0d:da:cd:9c:c6:e1:3d:73:a4:
5e:f1:7d:db:95:8f:5c:5a:00:8c:92:01:78:00:47:
e3:c3:a3:7b:a3:76:c5:b8:d7:0b:11:d2:3a:a5:8a:
16:c6:e7:cf:a9:22:15:c9:9a:0b:22:91:a8:4a:da:
66:bf:48:dc:b4:2a:7c:3c:ca:7a:c1:d8:eb:30:12:
2a:b5:c5:33:1b:eb:42:5b:08:10:be:84:1d:09:ed:
4d:f4:74:a4:cd:9c:63:48:7c:99:0c:48:59:27:f6:
11:12:31:86:3a:a3:20:0c:44:a3:4d:98:4a:14:6a:
45:c1:91:8b:49:aa:ff:ac:68:87:57:8e:63:07:b9:
b3:67:c2:1f:c4:74:a4:fb:7a:e1:f7:d1:9b:88:ee:
59:6b:40:b3:b3:79:16:4d:71:2d:6e:88:c4:b1:d4:
7b:df:4b:71:5c:ca:f4:63:e0:27:97:16:49:03:53:
f1:84:4f:73:c8:d6:83:86:ac:f1:11:a3:63:b1:43:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:77:6C:15:12:D6:A9:C3:16:28:F8:B4:5A:9B:1D:BD:A0:FD:A5
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/1sJ3bBUS1qnDFij4tFqbHb2g_aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.160.0-80.69.171.255
81.17.192.0/21
109.75.224.0/21
185.123.116.0/22
194.29.192.0/21
194.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
32:19:ee:c8:6a:c8:a8:76:ca:f9:24:44:4d:9e:e0:4f:1e:41:
c1:18:c6:fc:16:42:1d:a9:0d:05:3f:1d:47:d3:f8:ee:bb:54:
f3:5c:66:85:51:7b:c8:a2:47:dd:a2:f2:dd:90:66:b3:91:5b:
c9:2d:6d:17:79:a5:d5:3b:bd:21:a4:7e:20:02:5e:c0:0f:b2:
e5:a6:28:e9:46:4c:24:74:b1:08:72:7f:5c:3a:c4:4d:0a:a3:
61:44:2f:ee:05:ce:8d:a2:36:31:b2:9d:85:4b:7d:c9:28:d6:
20:dd:14:f3:91:2a:87:3b:b1:1b:a1:7a:57:e2:85:e7:fc:ee:
c9:e2:4a:41:7a:b0:5d:e3:e8:0c:0d:cc:3e:1c:7b:7e:8d:f3:
64:36:e0:31:29:28:db:7c:dd:b5:7b:01:84:ab:c5:9b:d0:23:
48:7f:05:7a:a5:22:6f:de:02:39:18:03:fc:29:fd:dd:15:48:
95:14:3d:29:22:3b:60:5d:25:5e:d0:ec:53:55:f1:2e:27:9f:
f1:cc:8f:48:2f:18:ff:e1:5a:22:cb:0a:2a:53:7f:1c:fb:4c:
95:ec:4b:ce:e7:94:8b:bc:42:d0:4f:c4:53:ad:49:38:9d:c6:
b2:47:e6:54:83:98:d8:70:2b:3b:2c:cf:65:25:b0:cd:2e:99:
f9:81:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:12 2025 by rpki-client