Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Y60rQ-d8T0b4fx6PtPqbxvVrGGY.roa
File: Y60rQ-d8T0b4fx6PtPqbxvVrGGY.roa (raw, json)
Hash identifier: p1g82ZoE39wDrYgDieN8VLBzE3tISDYag9y/w6xJkNM=
Subject key identifier: 63:AD:2B:43:E7:7C:4F:46:F8:7F:1E:8F:B4:FA:9B:C6:F5:6B:18:66
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 1B3E2A43
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Y60rQ-d8T0b4fx6PtPqbxvVrGGY.roa
Signing time: Sat 01 Jan 2022 12:00:33 +0000
ROA not before: Sat 01 Jan 2022 12:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200154
IP address blocks: 185.32.44.0/24 maxlen: 24
185.32.44.0/22 maxlen: 22
185.32.47.0/24 maxlen: 24
185.32.45.0/24 maxlen: 24
185.32.46.0/24 maxlen: 24
2a00:c0a0::/32 maxlen: 32
2a00:c0a0:c000::/34 maxlen: 34
2a00:c0a0:8000::/34 maxlen: 34
2a00:c0a0:4000::/34 maxlen: 34
2a00:c0a0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457058883 (0x1b3e2a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jan 1 12:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ad2b43e77c4f46f87f1e8fb4fa9bc6f56b1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:7d:70:76:d2:a7:b2:81:c3:fa:1c:ce:98:
15:42:98:8b:27:82:06:c6:f0:23:a8:d5:6c:a9:ec:
0e:f7:47:99:73:cf:75:73:90:83:e9:a9:2d:48:63:
f1:ad:63:11:4b:56:19:23:89:20:5f:a0:86:42:1e:
42:e6:6f:9c:7b:93:66:fa:84:49:a5:50:28:a5:cb:
31:34:b2:0c:1f:ee:d3:cc:05:5e:f3:e1:41:fb:2c:
2b:29:13:d7:99:16:ae:4c:e4:51:e7:a2:00:58:3e:
78:25:12:98:30:95:4e:41:f3:59:14:ec:3f:1b:90:
f5:cc:77:4b:73:45:a9:b9:9c:71:7b:52:ee:8c:b5:
17:cc:ba:bf:f7:3d:44:ac:20:14:e5:ef:54:e6:87:
ad:16:13:9f:80:42:e0:5a:a7:6d:ae:b0:10:61:d7:
de:2c:3c:18:3d:0a:a6:ed:52:74:95:78:c8:40:5b:
39:75:64:5a:ea:2f:03:f2:df:6d:21:fe:be:39:4d:
29:bc:d2:e9:4f:a7:d2:07:7d:63:de:66:fc:fa:18:
4d:7f:54:10:9d:70:91:49:e4:2e:a4:b4:90:eb:ed:
58:27:70:07:8b:aa:e9:cc:9c:1a:99:19:10:6e:de:
16:6e:20:45:88:f8:c0:df:30:a1:a8:8d:31:00:17:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:2B:43:E7:7C:4F:46:F8:7F:1E:8F:B4:FA:9B:C6:F5:6B:18:66
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Y60rQ-d8T0b4fx6PtPqbxvVrGGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.44.0/22
IPv6:
2a00:c0a0::/32
Signature Algorithm: sha256WithRSAEncryption
73:85:f1:b2:a0:f5:d5:e7:bc:a2:a0:75:b8:cc:e7:7f:51:c9:
e1:5b:f0:34:62:a7:50:5d:ea:5b:fa:60:d3:da:fc:d2:19:c6:
a3:9c:64:09:67:e8:5a:5f:38:b9:cc:e2:09:ab:d5:b5:a6:45:
1a:e3:22:39:40:8f:99:61:95:8b:e2:6a:f5:dd:39:c9:84:13:
c1:4c:a3:13:49:5a:58:75:ca:9d:ef:4f:75:e9:93:a5:8c:da:
dc:f6:a3:1b:04:47:6b:7a:ec:ea:99:50:d8:36:1f:87:da:a0:
58:1e:e3:72:14:33:88:04:b7:b5:09:c6:ce:86:84:b9:83:89:
b5:42:17:e6:46:46:32:dc:e4:d4:65:02:fe:57:02:2a:28:a8:
4a:c6:f5:86:61:54:39:63:12:1c:8d:c9:00:1c:38:b9:98:ad:
d6:cf:5f:55:dd:ae:69:32:5a:95:90:92:a4:02:96:3e:aa:64:
f0:b3:2f:0d:3c:b0:5d:62:5a:b5:d8:8b:e3:09:33:50:60:ac:
c8:db:cb:43:34:a1:5e:52:d9:57:8c:4a:21:e6:db:9c:b8:48:
52:e5:8f:1b:d1:ff:87:80:14:be:f9:47:68:88:39:17:af:4e:
34:27:ec:24:de:be:59:33:7b:97:93:ae:83:a7:a8:73:d0:ee:
aa:d3:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:40 2025 by rpki-client