Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/pbwsd2YQKHs0LQOtvJFfYhX6J0E.roa
File: pbwsd2YQKHs0LQOtvJFfYhX6J0E.roa (raw, json)
Hash identifier: /pWlhnee5sQHPognZF/MgtshzJbiWTyF9Aj65alQy1c=
Subject key identifier: A5:BC:2C:77:66:10:28:7B:34:2D:03:AD:BC:91:5F:62:15:FA:27:41
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 02C583C6
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/pbwsd2YQKHs0LQOtvJFfYhX6J0E.roa
Signing time: Sat 01 Jan 2022 14:55:22 +0000
ROA not before: Sat 01 Jan 2022 14:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205609
IP address blocks: 185.133.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46498758 (0x2c583c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jan 1 14:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5bc2c776610287b342d03adbc915f6215fa2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:6f:bf:b8:7a:a8:c8:a2:d4:bb:93:5d:01:
79:9d:e4:05:22:63:a0:d0:b8:16:36:3c:05:db:7a:
26:2b:b3:7b:d7:7f:72:3b:7f:03:8e:71:ea:1a:ed:
ab:6b:f7:7d:4f:f5:bb:27:85:a3:83:8e:3b:69:40:
8c:aa:bc:25:48:f9:63:a9:0b:b9:80:4b:28:e3:49:
28:d6:33:45:a4:e4:06:8d:de:a5:14:ef:63:84:05:
e3:1f:6d:42:37:ab:64:07:d4:01:b5:08:ec:82:ef:
a6:7e:13:90:09:3c:20:cd:71:d7:9d:c7:30:ff:e6:
ae:97:a2:dc:ff:69:51:e3:58:b0:b7:eb:9d:77:e0:
78:65:19:b5:a3:8f:80:51:81:97:fb:29:e6:2c:85:
b7:a6:b6:a3:a9:5e:f1:cd:99:2f:79:d7:cb:62:78:
f7:de:a5:9c:63:bf:83:ba:73:a1:ba:3d:4b:d1:3f:
71:8c:c6:5c:67:cd:b0:67:23:f2:3a:48:3c:86:3b:
e6:b6:f1:09:3c:cb:97:5a:fe:ba:07:90:dd:b4:7b:
35:57:23:a9:78:2a:97:18:0a:0d:4a:10:cd:a1:69:
00:fb:1f:cd:21:6b:4a:cb:ec:1a:d5:49:07:b6:4f:
fd:9f:a8:db:16:d1:3a:48:4a:ec:0c:2c:48:77:12:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:2C:77:66:10:28:7B:34:2D:03:AD:BC:91:5F:62:15:FA:27:41
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/pbwsd2YQKHs0LQOtvJFfYhX6J0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:40:b4:bb:5d:c8:37:51:e4:06:a5:a6:8b:f4:a4:b6:15:da:
6b:09:a7:97:c2:d3:5a:6a:c4:23:fa:c0:58:bb:42:1d:c5:19:
d0:53:bb:54:90:02:23:d3:fe:e9:8b:24:e2:2b:f9:27:a8:b3:
ec:e6:1b:27:0a:f3:74:dd:21:93:23:28:89:6d:a2:02:cb:50:
54:bb:23:62:23:f4:6a:6d:c9:d6:ab:27:e7:cd:ee:f5:f4:77:
fc:9b:36:56:de:4c:1c:ec:7b:a8:5b:f7:62:ee:f1:90:60:11:
68:0d:46:c8:af:cc:7f:8f:ae:05:6d:34:13:90:90:09:c0:bf:
0a:91:f6:e2:09:17:d7:f4:99:03:c7:3f:fa:21:86:58:37:ad:
a2:e8:3b:02:ca:0b:d6:5e:c3:a7:23:1d:c7:e5:02:0d:db:7d:
7f:70:b3:14:87:a7:3f:aa:80:5d:ec:a3:7e:a2:e2:3c:4f:5e:
80:e9:b6:31:d4:78:63:d9:b0:3e:50:64:1c:9e:45:d4:59:5f:
8a:47:a0:11:22:0d:f7:78:78:79:69:a1:78:9c:14:b6:20:12:
48:04:ca:eb:1f:6b:05:4c:96:a6:25:54:29:56:20:70:ee:13:
da:57:d1:91:31:16:14:07:59:3b:28:89:61:3c:cc:33:59:38:
d0:1d:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:21 2025 by rpki-client