Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/vDlytypv6qAIRTLmEcBFkmB8d6A.roa
File: vDlytypv6qAIRTLmEcBFkmB8d6A.roa (raw, json)
Hash identifier: 9q7pOezzK8s/Uj2hUxygUj6t1iFQaQTBk+PlMLJmpL8=
Subject key identifier: BC:39:72:B7:2A:6F:EA:A0:08:45:32:E6:11:C0:45:92:60:7C:77:A0
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 039D899E
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/vDlytypv6qAIRTLmEcBFkmB8d6A.roa
Signing time: Sat 01 Jan 2022 06:01:14 +0000
ROA not before: Sat 01 Jan 2022 06:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206596
IP address blocks: 185.181.181.0/24 maxlen: 24
185.181.182.0/23 maxlen: 23
185.181.182.0/24 maxlen: 24
185.181.180.0/24 maxlen: 24
185.181.180.0/23 maxlen: 23
185.181.183.0/24 maxlen: 24
185.181.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60656030 (0x39d899e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jan 1 06:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc3972b72a6feaa0084532e611c04592607c77a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:7b:8e:bc:d9:a6:9e:20:01:05:25:b9:66:
6d:69:e0:9b:27:b7:3b:f1:39:69:6b:d0:84:43:65:
cd:94:1e:72:99:0a:d8:9d:ec:7e:ea:1e:68:af:eb:
cc:bd:12:4a:42:bb:f7:98:df:05:31:c4:fa:f2:66:
ba:87:6d:81:2c:1f:94:d1:a0:ee:e7:ff:24:ea:7d:
44:c3:8a:5d:25:6a:69:27:1c:15:fe:2c:75:bb:78:
0c:c6:5a:79:b3:5a:93:e7:81:4c:03:15:b7:16:ec:
ba:00:f9:7d:37:6e:36:6b:06:ff:3d:d7:43:3d:64:
b1:70:57:bd:4d:09:fc:7c:15:4d:9b:29:5a:5e:04:
86:d7:cf:9e:79:8d:ef:4b:52:49:ed:89:e5:c4:d4:
bc:2b:96:c1:52:f4:5c:41:24:d8:4a:be:c1:33:0a:
3a:f6:73:5f:eb:9b:0f:26:54:7f:30:80:3a:2c:77:
f6:99:a6:56:31:d9:dd:dc:be:58:86:68:5c:15:df:
c6:71:c7:8c:aa:e3:c5:39:7d:b7:89:ee:8c:cd:64:
7b:45:dc:82:cb:ab:bd:b8:89:0a:3c:df:c4:f2:2d:
10:71:e6:bb:cf:11:b3:3e:4a:d6:2a:df:1f:d4:a9:
b1:03:5a:6d:04:19:18:c7:13:74:3c:06:6b:d4:49:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:39:72:B7:2A:6F:EA:A0:08:45:32:E6:11:C0:45:92:60:7C:77:A0
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/vDlytypv6qAIRTLmEcBFkmB8d6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:6f:fa:bb:1a:b9:f8:7e:9c:af:39:55:ae:03:03:68:05:ba:
6f:c4:b8:07:d9:de:12:23:2c:e8:6a:3b:6c:08:f2:bc:f8:33:
a6:aa:02:cd:44:b9:3e:57:3c:08:2a:24:2e:51:65:8a:9a:78:
5a:5e:1a:b6:5b:fb:2c:1b:76:4c:4f:53:fb:77:cf:e7:3c:8d:
35:51:b6:2e:c2:ba:ed:4b:df:d2:90:b3:b2:0a:9d:b2:02:e0:
de:77:44:52:27:d9:c0:b7:5c:bf:5d:10:3d:fa:04:35:df:24:
ab:69:89:c5:4c:d0:44:dd:89:3e:8f:01:ad:51:be:ad:bd:0f:
43:e2:61:d1:2c:ec:00:0d:cd:67:e1:aa:b9:b8:d1:52:32:33:
8d:1c:ea:a7:99:74:2e:69:7e:0c:02:04:73:d6:6f:06:98:02:
f3:bb:84:50:76:cb:73:e7:00:96:ac:33:ac:5d:c3:f6:1a:c4:
63:8c:53:8f:ac:30:c8:88:3a:62:98:51:fb:c1:1c:49:a6:f3:
35:08:08:ff:62:c0:45:7c:3c:92:46:1c:51:9f:7d:29:73:fd:
1f:99:ce:04:8f:4b:01:82:2b:f9:f9:ec:3c:4e:19:80:65:84:
4a:9a:20:59:fd:67:c3:ac:44:c0:76:52:5a:0c:4e:58:db:8c:
0b:38:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:15 2025 by rpki-client