Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/yJr6oV3rVbp5HWxMdyUob-M-PoI.roa
File: yJr6oV3rVbp5HWxMdyUob-M-PoI.roa (raw, json)
Hash identifier: hdoZkjEACge3RcNmmXHYcGwIFF/PmuyeVtzcm4ezc3s=
Subject key identifier: C8:9A:FA:A1:5D:EB:55:BA:79:1D:6C:4C:77:25:28:6F:E3:3E:3E:82
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 0A19FD61
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/yJr6oV3rVbp5HWxMdyUob-M-PoI.roa
Signing time: Wed 30 Mar 2022 06:06:30 +0000
ROA not before: Wed 30 Mar 2022 06:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49562
IP address blocks: 185.2.172.0/23 maxlen: 23
185.2.172.0/22 maxlen: 22
2a02:80c0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169475425 (0xa19fd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Mar 30 06:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89afaa15deb55ba791d6c4c7725286fe33e3e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:7b:98:a7:eb:5d:8b:64:44:67:35:d5:e8:
60:17:97:34:2a:04:6f:24:f1:e2:08:2d:47:d5:3b:
ba:8e:e4:bd:aa:a6:a8:d1:fc:34:aa:c3:8d:24:ca:
b1:c8:57:ca:74:f7:9a:e9:3e:2d:68:1f:a9:09:a4:
b8:66:5b:06:10:3c:0c:55:4a:39:a7:76:90:58:0e:
d3:8f:57:2f:19:f5:42:bb:07:da:28:35:36:d5:9b:
17:9b:2c:a3:ad:06:ce:71:f2:74:54:0b:9e:6c:05:
49:df:d7:50:e1:a1:d8:af:9e:cc:7d:b4:18:ce:b6:
19:cb:f3:b6:6d:51:63:04:9f:15:ac:bb:67:01:ec:
e2:72:ca:44:17:11:fe:eb:6a:ca:8f:31:03:67:dc:
9a:73:1d:b0:43:76:38:e2:db:a2:7e:6f:f4:31:e7:
cb:ad:f6:40:41:65:61:a9:3f:92:f9:12:e0:b3:80:
7d:6c:23:ac:ee:26:2d:21:57:75:e2:b4:b5:bb:89:
a8:9b:21:af:73:e9:22:cb:b4:3b:d3:03:81:f8:92:
8c:a9:91:76:8b:0d:28:da:c6:31:8e:da:7c:69:8f:
30:77:3d:8e:ed:9c:cc:05:8c:6c:53:1f:ee:b2:b9:
f9:de:2e:b8:87:0f:7f:11:4a:92:30:36:af:ab:c7:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:FA:A1:5D:EB:55:BA:79:1D:6C:4C:77:25:28:6F:E3:3E:3E:82
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/yJr6oV3rVbp5HWxMdyUob-M-PoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.172.0/22
IPv6:
2a02:80c0::/30
Signature Algorithm: sha256WithRSAEncryption
14:97:31:c1:a7:cc:51:7b:56:a6:f0:25:60:58:18:a9:4e:1b:
c0:3a:74:ce:d9:17:5b:df:b8:a5:fa:64:47:cf:d6:7c:e3:e9:
74:a1:5a:ee:63:dd:d9:44:ea:c1:67:1b:47:8c:af:55:fd:2a:
7e:ca:7b:c6:c1:b0:89:4b:5d:c9:ab:08:86:50:24:b9:1f:3c:
b7:1e:2e:8a:7a:d6:f5:5c:8c:83:a4:0b:ae:a7:5c:ce:a7:8b:
b7:15:df:96:bd:c1:08:ab:64:e2:98:8d:fb:58:d5:b8:54:96:
a9:20:a2:23:30:c1:ea:4b:4c:11:86:55:91:e6:14:17:6e:99:
88:7c:80:8c:90:d4:32:fc:24:5f:ae:ab:2f:3f:f9:96:e1:38:
86:52:92:64:3a:e4:c4:d3:cd:67:48:41:b2:2a:14:6b:ea:dd:
7c:c5:b2:05:42:da:52:fc:1f:79:bb:4c:2d:5a:bb:a0:55:bc:
60:98:05:a2:1c:a7:31:6c:72:6f:d4:c8:55:88:fa:dc:06:e0:
7a:1e:9f:43:ea:f6:42:48:d1:9b:5f:f3:ce:6f:c2:ae:e7:5a:
d5:93:89:d3:90:c2:7e:d6:bd:1c:ea:32:fe:44:ee:61:30:a8:
fa:18:65:f3:96:8b:de:46:68:9b:d9:fd:3f:ec:06:69:c3:dc:
3e:96:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:38 2025 by rpki-client