Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/k_g6GZgGLVORk-G61vJWJL0VhP4.roa
File: k_g6GZgGLVORk-G61vJWJL0VhP4.roa (raw, json)
Hash identifier: 572gq708OOSofqkmrUAo5F3Ck8NvNlORmVWWO94YUp0=
Subject key identifier: 93:F8:3A:19:98:06:2D:53:91:93:E1:BA:D6:F2:56:24:BD:15:84:FE
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018297D170D32E16844B4AD457B54877DBCC
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/k_g6GZgGLVORk-G61vJWJL0VhP4.roa
Signing time: Sat 13 Aug 2022 15:27:41 +0000
ROA not before: Sat 13 Aug 2022 15:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209286
IP address blocks: 185.233.219.0/24 maxlen: 25
185.107.135.0/24 maxlen: 24
2a10:4e40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:d1:70:d3:2e:16:84:4b:4a:d4:57:b5:48:77:db:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Aug 13 15:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93f83a1998062d539193e1bad6f25624bd1584fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:9d:82:56:46:b6:cb:72:e9:df:69:dd:33:
d4:f6:c8:b3:49:e7:dc:16:8f:8b:bc:6f:62:f9:20:
69:e5:35:a9:13:0f:72:cd:0e:9e:0d:36:19:12:dd:
a4:32:48:d9:0b:98:11:9f:9b:6d:73:d0:f6:2c:9c:
07:3d:ab:ab:77:8b:1a:4a:cb:24:fe:b1:99:5f:76:
9b:d9:11:10:b7:84:90:aa:c9:2c:70:77:31:b1:dd:
7a:b9:5d:ed:dc:9c:35:7c:a3:ba:fd:05:59:57:87:
57:28:01:bb:af:7c:d5:76:1e:de:14:93:0e:1b:2f:
e3:b0:d0:01:57:cd:e9:bd:c8:4d:07:10:50:11:1d:
94:0e:0e:93:25:1c:f6:50:e4:8e:cb:f6:e0:09:42:
bc:de:fb:bb:dd:2c:66:a2:ad:db:cf:fa:81:32:b6:
40:35:23:de:25:24:f3:be:55:59:ae:6b:eb:b3:57:
86:11:92:e4:2d:dc:fa:9c:be:12:c8:df:84:f0:92:
a9:55:36:98:a7:fe:dd:1a:f5:7e:fe:77:ad:a1:4f:
91:bc:5e:7c:10:7b:e6:07:de:42:35:a7:38:71:fb:
be:47:a7:95:d2:69:3a:19:b2:99:f7:5f:a0:d4:80:
df:be:df:b2:68:81:4e:79:a3:da:f6:5a:18:eb:2f:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F8:3A:19:98:06:2D:53:91:93:E1:BA:D6:F2:56:24:BD:15:84:FE
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/k_g6GZgGLVORk-G61vJWJL0VhP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.135.0/24
185.233.219.0/24
IPv6:
2a10:4e40::/48
Signature Algorithm: sha256WithRSAEncryption
04:8b:3f:2a:d5:48:d3:d6:78:53:bc:67:ef:3f:c4:04:f8:03:
20:07:1b:17:bb:1d:6b:f8:db:b4:2b:06:40:f5:8d:7b:f4:8a:
32:f5:d5:2d:4c:2b:2e:6a:72:1f:e6:d4:9a:7b:63:10:5d:3c:
ce:6e:49:f3:23:39:60:3f:a0:04:ee:e6:5c:ee:41:ee:44:cc:
07:ac:00:9c:74:02:63:ce:03:72:3f:6b:06:f7:b2:6c:90:28:
bf:28:cc:e3:a5:c7:5a:65:6e:0d:ad:4b:08:5d:5b:c9:e3:7e:
9b:5c:cc:4d:40:fb:5f:71:f3:24:b5:fa:bf:f0:79:f3:39:4b:
68:32:8a:78:51:e0:fc:8f:4e:5c:4f:f3:28:94:b0:ad:77:14:
09:52:76:e2:7e:25:9d:ca:eb:f2:d5:49:54:a4:05:d3:51:0e:
4e:40:37:ab:87:3c:42:ae:0a:42:62:3e:e9:63:93:61:c5:e1:
d5:b9:97:9c:35:f6:08:28:dc:f4:a7:bf:0d:a2:96:47:79:ec:
4a:86:38:ee:91:66:65:24:55:00:14:fc:2b:6e:4c:db:bb:f5:
9f:5d:bc:96:2f:b0:49:d4:88:37:9a:4e:fd:00:a2:8e:e9:0c:
14:1d:86:67:17:f1:d5:e0:4b:21:9c:ca:43:49:64:3a:54:f0:
aa:d6:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:07 2025 by rpki-client