Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/rVIyT_C-zwXmL_oeCOfLWasKB6E.roa
File: rVIyT_C-zwXmL_oeCOfLWasKB6E.roa (raw, json)
Hash identifier: pueA36XNP7zx8gVpzCF3BjCwjUa8hh4ZW97EUGTY1yA=
Subject key identifier: AD:52:32:4F:F0:BE:CF:05:E6:2F:FA:1E:08:E7:CB:59:AB:0A:07:A1
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 10313FCA
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/rVIyT_C-zwXmL_oeCOfLWasKB6E.roa
Signing time: Sat 01 Jan 2022 00:52:46 +0000
ROA not before: Sat 01 Jan 2022 00:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206993
IP address blocks: 185.169.172.0/24 maxlen: 24
185.169.173.0/24 maxlen: 24
193.160.37.0/24 maxlen: 24
193.160.34.0/24 maxlen: 24
193.160.38.0/24 maxlen: 24
193.160.35.0/24 maxlen: 24
193.160.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271663050 (0x10313fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jan 1 00:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad52324ff0becf05e62ffa1e08e7cb59ab0a07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:b9:f4:49:cb:a0:1c:7d:4b:98:40:52:54:
8a:be:2a:75:ba:26:cf:b3:68:9b:50:f0:67:4a:a7:
98:a5:90:ed:f1:d4:9a:82:28:e9:1b:3f:31:1f:58:
41:5e:20:1e:f3:07:a4:16:88:29:64:13:d4:e0:e8:
db:80:7b:ea:f9:76:5b:a5:ad:2b:1c:10:2a:4e:fe:
85:10:fa:e8:48:7e:73:95:b5:e6:0d:09:0a:31:26:
7e:99:34:35:54:eb:fb:cc:19:4d:22:48:79:e0:44:
f6:29:cf:30:b6:e4:58:49:a8:6c:be:94:85:3f:2d:
77:3e:74:46:0d:72:a9:ef:31:a4:5a:d8:c4:75:3c:
82:a4:e6:01:50:0f:82:3b:3e:a0:56:d0:fa:65:e3:
2c:ae:11:c5:db:ef:03:f2:05:28:6f:10:1f:7d:cc:
fe:94:58:a8:66:04:74:52:4a:ea:02:c0:d2:e7:16:
77:e5:d8:06:f6:c4:b7:60:d5:bb:1b:0b:3b:46:09:
56:ba:42:3f:d5:af:3a:f5:e3:5f:7a:66:d3:9d:e4:
30:25:d4:3c:db:85:f1:77:58:3e:25:d2:84:68:e8:
51:81:6b:b1:b7:9e:82:dc:2d:75:0d:ca:a5:7f:34:
3d:d1:7d:0c:98:30:0d:51:b6:0a:92:81:76:9e:02:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:32:4F:F0:BE:CF:05:E6:2F:FA:1E:08:E7:CB:59:AB:0A:07:A1
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/rVIyT_C-zwXmL_oeCOfLWasKB6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.172.0/23
193.160.34.0-193.160.38.255
Signature Algorithm: sha256WithRSAEncryption
02:c8:8b:3a:3d:1e:02:4d:d7:c4:bf:88:ae:a8:62:53:8f:0e:
99:2f:0f:a7:f7:8b:ba:f9:fb:7c:de:b6:bd:1e:45:39:ee:93:
af:cf:ef:df:4b:db:0f:b5:00:a5:51:23:06:d7:3f:ad:27:19:
71:51:68:19:a0:df:1a:fe:f5:4b:f9:0a:f3:81:b3:ef:a7:90:
28:08:5c:a3:e4:1d:ee:f5:9e:27:7c:f1:22:80:ad:96:d5:1a:
99:5a:6d:33:40:b1:cc:fe:05:83:37:c2:f2:8a:23:25:da:9d:
58:04:d4:e3:8c:10:b4:ba:3d:be:e6:cf:33:d8:67:cd:b3:b7:
13:24:70:84:aa:7e:3e:e7:e2:a7:3d:14:f8:bc:d2:4a:83:ed:
e8:e8:0e:85:3c:a9:36:89:02:46:a3:a3:be:1d:1c:31:a8:85:
20:4f:21:02:20:c2:1d:f2:b4:e6:06:1b:41:2b:5d:6c:c6:63:
89:43:28:75:c7:5e:38:2e:31:6e:b2:ed:2a:54:fb:91:9a:df:
55:0f:1b:83:ac:09:6b:58:78:35:cd:f2:9e:dc:dc:de:e5:b3:
12:f1:c3:ab:d1:c4:b8:9b:5c:5e:c4:f4:cd:fe:95:8e:7b:a7:
4f:80:d0:e7:f9:de:33:a7:37:27:11:2c:bd:f9:8b:fb:d0:eb:
17:46:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:30 2025 by rpki-client