Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/7YPhy7Bvm17ycjw0VFlfi-qHcLg.roa
File: 7YPhy7Bvm17ycjw0VFlfi-qHcLg.roa (raw, json)
Hash identifier: oqF8TqlGXaerNpjxOyBDHGEsSpAo//UC8nelVYvEm5I=
Subject key identifier: ED:83:E1:CB:B0:6F:9B:5E:F2:72:3C:34:54:59:5F:8B:EA:87:70:B8
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0185723A4509DB2966B3B42D7E1D1247F017
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/7YPhy7Bvm17ycjw0VFlfi-qHcLg.roa
Signing time: Mon 02 Jan 2023 11:24:59 +0000
ROA not before: Mon 02 Jan 2023 11:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202421
IP address blocks: 185.204.176.0/24 maxlen: 24
185.204.176.0/23 maxlen: 24
185.204.176.0/22 maxlen: 24
185.204.179.0/24 maxlen: 24
185.204.178.0/24 maxlen: 24
185.204.178.0/23 maxlen: 24
185.204.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:45:09:db:29:66:b3:b4:2d:7e:1d:12:47:f0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Jan 2 11:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed83e1cbb06f9b5ef2723c3454595f8bea8770b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:a2:46:50:40:2c:50:59:49:9e:1d:b6:6b:
60:86:03:0c:58:eb:de:64:f1:11:a0:66:04:3b:0c:
4d:89:f8:c8:bc:fd:50:c4:71:4d:01:9c:5e:b0:c7:
d3:45:07:81:3b:e1:30:f4:54:ff:a9:f3:d8:53:88:
98:2c:c8:60:29:ff:3e:c7:d6:0d:ff:6e:3a:91:12:
f2:31:7e:5f:18:e2:00:55:c2:47:83:14:a6:ba:44:
40:c2:7a:8a:70:ad:27:24:c9:11:60:bf:51:9d:79:
f0:d3:da:54:62:7c:6e:b1:76:e3:be:d5:83:c1:4a:
2a:e4:b3:1b:5a:09:78:44:2d:0a:c8:c0:1e:72:6b:
2e:70:79:9c:d0:f2:a8:3a:97:5a:98:7c:28:9f:bc:
57:23:af:c7:43:54:0a:0a:79:bd:26:87:e8:cc:fe:
71:bf:d5:24:6b:f3:f4:3c:8e:e4:15:3e:ed:e7:2d:
9a:59:27:10:14:39:6b:40:68:19:f4:da:d3:43:39:
07:25:fd:dc:18:25:82:a9:ca:88:e6:64:1f:7f:39:
65:12:54:0b:68:11:18:cd:2f:76:f9:21:0d:39:17:
a0:df:01:ec:0b:82:24:d8:27:7e:a5:fe:46:17:d1:
14:be:64:8b:a1:90:45:77:07:d8:01:97:be:87:5f:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:E1:CB:B0:6F:9B:5E:F2:72:3C:34:54:59:5F:8B:EA:87:70:B8
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/7YPhy7Bvm17ycjw0VFlfi-qHcLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.176.0/22
Signature Algorithm: sha256WithRSAEncryption
98:61:01:3d:a9:6e:cb:d4:c3:5b:e7:57:97:e4:bb:ac:71:02:
e9:d2:62:fb:34:fa:70:6c:76:26:7f:ad:b1:9e:8e:af:08:c1:
e6:c1:b3:db:7b:d7:99:4c:f6:4e:81:5d:0e:ca:06:fc:f5:b5:
4a:d0:6d:a1:80:03:cf:7b:99:a6:a8:b7:d3:f6:bb:dd:15:d1:
54:c4:45:a8:b5:76:64:a1:0b:97:97:0b:5b:db:b7:f8:59:12:
8b:90:cd:fa:bc:06:4d:50:57:49:f3:d8:bf:f9:ac:5a:a9:48:
2f:5a:6f:fe:c6:31:96:04:17:f1:f8:82:93:20:1d:45:ab:c4:
c0:03:d2:96:8c:a4:bf:1f:56:05:1a:83:ff:97:c0:2b:7d:3b:
e4:3d:7a:48:6b:bd:30:b7:15:7d:cd:38:ee:74:d7:99:38:c2:
a5:ca:f0:f4:75:c9:ed:b9:ce:81:e5:1e:7d:0e:79:43:66:de:
dd:bf:d2:a8:92:e0:87:98:ae:b7:9a:a6:56:40:3f:47:92:4c:
3b:6c:a5:91:ae:9c:3a:e3:5e:a7:44:2a:b7:5a:3a:8a:88:df:
b0:94:c3:05:43:7f:56:18:6d:3f:a8:fe:7d:6c:45:c4:3f:52:
7a:08:81:1c:9e:06:bc:34:2b:9d:13:37:3c:e9:f5:c6:92:0e:
47:fe:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:35 2025 by rpki-client