Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa
File: qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa (raw, json)
Hash identifier: /PzSQLyIr9QDocxkiNqAxe6ydXZfX/z1vdbpRmf4q1g=
Subject key identifier: AA:A3:A2:05:DA:72:2D:D8:71:11:62:EA:DE:3A:EC:9E:A5:B9:FB:39
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 01856ED4BFACFA6B0BB97158C9D72C024DD9
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202767
IP address blocks: 185.155.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bf:ac:fa:6b:0b:b9:71:58:c9:d7:2c:02:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa3a205da722dd8711162eade3aec9ea5b9fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:0e:aa:2a:8d:b9:77:91:9e:c5:fa:f0:86:
a5:53:10:ac:00:a0:f7:68:13:2b:d5:fc:5a:44:98:
20:f9:81:1f:1a:78:14:c0:6c:08:d2:f3:4a:25:63:
49:d0:2f:d0:e9:da:59:b0:10:b1:bd:71:e5:00:82:
58:5f:5f:28:aa:da:48:c9:8d:da:88:e2:d2:18:bc:
5f:31:d8:21:f6:e0:34:7a:41:4e:02:50:d4:96:ba:
6b:fa:1c:e0:a5:f3:c3:d5:4b:a9:72:ca:4d:bc:4e:
d3:59:0f:00:2a:40:a8:b6:fa:03:d6:e9:a7:a6:2f:
c0:8d:6f:09:69:88:f8:9a:8e:10:5b:95:47:89:15:
6e:d0:e1:43:52:1c:29:dd:85:64:59:08:b8:02:18:
41:05:b3:92:c7:76:a4:11:6b:a4:8d:9a:62:33:ab:
64:68:38:84:fd:7d:81:09:f9:cd:46:5c:39:66:be:
af:38:15:3e:ed:f5:ba:e5:36:3e:30:9f:37:52:d6:
a8:ce:8f:1e:fe:6d:48:fb:35:dd:87:9f:1a:cb:63:
f2:ad:cf:3d:3b:3a:8a:99:2d:48:51:bf:ea:9d:2b:
66:ae:91:d4:0d:a4:67:c3:83:76:c9:a0:01:1e:45:
8a:77:a4:a5:55:bd:f2:32:56:a5:83:8f:d5:59:b3:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:A2:05:DA:72:2D:D8:71:11:62:EA:DE:3A:EC:9E:A5:B9:FB:39
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/qqOiBdpyLdhxEWLq3jrsnqW5-zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.60.0/22
Signature Algorithm: sha256WithRSAEncryption
74:47:72:9b:9f:d3:4a:54:f1:97:08:48:9c:ce:2f:09:66:90:
6b:c0:ee:63:ca:0b:18:e4:68:57:84:99:6a:05:97:62:67:08:
01:26:c1:36:f8:81:d9:b4:fc:a2:a0:6e:31:0e:b6:83:70:6f:
d3:d9:32:b7:be:35:90:d7:bc:3b:8e:a4:a5:57:c0:f5:99:5c:
cd:e6:93:c3:18:95:9e:d1:1a:e1:f7:e0:06:40:02:f8:55:ba:
f5:34:08:53:9f:09:95:9f:be:58:5c:58:ca:f9:11:b2:c2:c8:
af:e7:7e:1e:62:31:a6:9e:5a:58:55:c3:9a:f6:77:bc:e6:e4:
ea:6b:1c:a4:2e:d9:67:ed:f0:b5:88:2d:28:76:62:8f:e3:46:
a5:9a:21:6c:74:1a:8e:c5:18:86:f7:6a:e0:20:d7:9b:2e:91:
2e:1c:1f:eb:c7:a1:cd:f1:bd:04:a5:b4:41:74:13:02:b2:ce:
1b:d6:41:ee:27:b4:bb:c6:30:3e:a0:49:75:e1:2c:4f:89:c7:
a7:a5:63:db:a7:06:ee:dc:6d:88:c5:e4:e4:f9:07:19:d9:7f:
cc:22:04:33:b4:38:86:94:72:8d:33:d5:24:f6:66:08:0a:58:
15:40:9b:25:ad:2f:0f:f4:d2:cd:07:b0:38:45:1b:03:e3:21:
f9:54:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:51 2025 by rpki-client