Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/22oLJwJ_q5BOyDX5I5AhnQyUm0w.roa
File: 22oLJwJ_q5BOyDX5I5AhnQyUm0w.roa (raw, json)
Hash identifier: qCyNNrxJuqraYmbDzlgF1dziOENqFjzHN2tNa5FiqF4=
Subject key identifier: DB:6A:0B:27:02:7F:AB:90:4E:C8:35:F9:23:90:21:9D:0C:94:9B:4C
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01857355D2CE7D0AF12A49F223283BD4B9BC
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/22oLJwJ_q5BOyDX5I5AhnQyUm0w.roa
Signing time: Mon 02 Jan 2023 16:34:42 +0000
ROA not before: Mon 02 Jan 2023 16:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29484
IP address blocks: 185.73.22.0/24 maxlen: 24
185.73.23.0/24 maxlen: 24
185.73.22.0/25 maxlen: 25
185.73.20.0/23 maxlen: 23
185.73.20.0/22 maxlen: 22
134.147.0.0/16 maxlen: 16
2a05:3e04::/32 maxlen: 32
2a05:3e06::/31 maxlen: 31
2a05:3e05::/32 maxlen: 32
2a05:3e00::/30 maxlen: 30
2a05:3e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:d2:ce:7d:0a:f1:2a:49:f2:23:28:3b:d4:b9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jan 2 16:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6a0b27027fab904ec835f92390219d0c949b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:e0:37:dd:96:71:ff:7a:a1:22:b0:16:96:
51:6c:b6:b2:e1:83:e6:52:b0:1d:16:7a:2a:29:59:
54:7a:b9:02:19:08:c3:29:96:65:c2:c3:4b:d0:f2:
d2:bd:23:c4:a1:20:43:4a:62:ae:03:a8:cb:94:04:
dc:e3:6f:39:05:d2:28:d1:de:32:25:92:10:9f:05:
ad:10:5c:e0:03:79:c6:f9:58:ab:d8:15:66:9a:ef:
10:16:07:ba:fd:60:33:be:a6:1e:ac:67:b4:1d:69:
09:5b:f3:a2:a3:47:45:82:59:e1:98:0c:04:74:07:
4b:10:84:fd:6c:59:bf:6f:a3:c2:f6:ea:13:5c:f4:
d7:4d:7f:35:e5:22:e6:af:2b:d6:b5:e1:e5:91:32:
4d:ed:ae:77:d8:f0:6a:44:ac:e9:24:43:d6:35:e4:
18:2a:6a:38:a3:e8:c2:99:19:e7:b2:51:d5:24:c1:
1e:8c:1d:b0:64:fc:e0:20:1c:02:16:5a:e6:97:0b:
1b:7d:34:a5:8a:fd:f6:6f:c6:08:f0:2a:3d:62:25:
fc:2d:96:f3:df:05:8e:b4:23:ab:50:fb:13:75:71:
08:29:95:07:0b:95:6a:6f:96:cb:bc:be:4d:98:9a:
42:48:9f:00:eb:0b:37:64:c0:07:0f:2e:eb:a5:9e:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:0B:27:02:7F:AB:90:4E:C8:35:F9:23:90:21:9D:0C:94:9B:4C
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/22oLJwJ_q5BOyDX5I5AhnQyUm0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.147.0.0/16
185.73.20.0/22
IPv6:
2a05:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
84:3f:06:0a:3c:b6:60:dc:a7:a9:43:9c:99:f0:a4:33:0a:b1:
8b:0c:76:3e:22:18:eb:36:39:84:27:fc:41:e0:50:4e:ad:3d:
1b:74:c1:9d:bf:48:0b:4e:32:3f:65:f9:7b:e0:c8:38:db:8a:
4f:a9:48:ae:32:d9:7d:ab:2e:bc:7f:1a:5e:d0:72:54:52:5e:
43:1f:24:d4:19:6c:56:ab:59:0d:84:b9:6a:35:54:f9:bb:8e:
4e:83:3d:0a:bc:fe:d0:60:01:8d:b1:a5:ad:27:76:d6:9a:92:
aa:b6:c9:c9:dc:99:6f:ed:1a:e5:fd:37:e9:9f:e1:7c:42:d7:
aa:7b:b1:27:01:d2:35:72:b8:2a:3b:6b:3e:d6:7c:67:7b:c2:
74:0f:c9:0b:9f:23:be:b7:fb:8f:78:e6:7f:b3:8f:4e:10:ac:
c0:16:d1:0a:23:49:10:36:a4:ce:de:07:f8:84:5c:47:32:27:
7f:9a:f6:5c:5b:6a:09:a6:4c:d3:91:a5:6f:4f:6e:1b:3e:ce:
fa:31:2a:c2:23:f2:25:e5:47:d6:d4:00:99:79:7d:14:88:1a:
3d:0f:4d:ac:f3:58:53:f6:8c:e7:b0:af:49:67:48:c1:b9:2f:
fc:ab:fb:22:19:8a:f4:10:a0:e5:b9:20:6f:f1:30:75:62:44:
92:a6:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:25:15 2025 by rpki-client