Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/dJ900NZx7JlhteMi_XsHIv9OUBE.roa
File: dJ900NZx7JlhteMi_XsHIv9OUBE.roa (raw, json)
Hash identifier: Jlp25LuzLn1mUvOjjTbeJtvmbJuTiJ64xQ6/mjhBqEg=
Subject key identifier: 74:9F:74:D0:D6:71:EC:99:61:B5:E3:22:FD:7B:07:22:FF:4E:50:11
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 07BC6642
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/dJ900NZx7JlhteMi_XsHIv9OUBE.roa
Signing time: Sat 01 Jan 2022 15:56:19 +0000
ROA not before: Sat 01 Jan 2022 15:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205869
IP address blocks: 185.179.140.0/24 maxlen: 24
185.179.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129787458 (0x7bc6642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jan 1 15:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749f74d0d671ec9961b5e322fd7b0722ff4e5011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:6c:69:b1:d2:54:c9:c2:40:55:27:77:03:
23:ea:04:56:4e:db:73:d2:fa:7a:31:e5:ac:9a:8a:
77:b7:f7:10:51:e9:0c:59:1b:16:3b:c9:eb:60:f1:
ce:cd:ae:f8:14:7e:62:27:87:61:01:5b:5c:f9:f1:
26:34:83:6c:19:2f:8a:df:98:c9:de:0c:34:b6:94:
80:41:ab:34:ba:55:e1:0a:a4:e0:b7:b5:8a:df:a0:
03:d2:3d:35:d5:01:91:18:4e:4d:64:dc:0d:a6:78:
cf:6d:d0:6a:93:64:25:f2:31:1a:82:2a:21:99:d3:
05:fb:2f:73:dd:53:37:98:c3:f6:38:46:18:33:d8:
7d:60:df:78:c0:4a:f6:d6:4f:ef:18:1c:b1:56:35:
37:49:3c:89:7b:8b:53:d2:85:88:82:a2:34:92:b7:
f5:ef:52:00:35:b5:79:f2:b6:5e:63:de:cb:e8:c3:
e0:a8:2d:f8:1b:e9:22:af:4a:77:6b:c0:00:27:e7:
83:6a:c6:92:fb:ed:04:3c:28:65:7a:3e:c5:70:88:
3f:05:7e:34:2f:20:46:3f:f5:6f:67:8c:a1:b3:9e:
4f:34:68:41:39:55:82:7f:8f:7d:27:4e:7e:76:d2:
a8:52:17:5f:f2:64:2f:dd:b2:64:7b:7d:c5:d6:c3:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:74:D0:D6:71:EC:99:61:B5:E3:22:FD:7B:07:22:FF:4E:50:11
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/dJ900NZx7JlhteMi_XsHIv9OUBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/24
185.179.143.0/24
Signature Algorithm: sha256WithRSAEncryption
01:04:ed:86:32:99:f7:16:90:2f:03:4a:04:9b:5a:d8:fa:3d:
1d:fa:c2:af:4e:67:8c:30:7a:a3:a2:35:d7:cf:cb:43:9b:3f:
a8:ea:d6:c4:83:70:7c:50:6f:c4:26:26:7f:5e:d6:19:56:bd:
b5:b0:8b:90:09:ee:28:51:41:cf:54:3d:57:b7:16:ae:e2:b7:
c0:84:91:ab:0e:f3:5d:6b:c5:ba:61:b0:1c:1c:c9:82:1e:b7:
8d:f9:b9:3a:7d:4a:11:85:4d:6c:ea:b6:f0:ae:66:b9:ba:54:
19:45:ab:84:6d:bf:16:40:05:73:14:3b:d6:9f:3e:a5:13:ab:
f4:34:95:ca:6c:c6:20:16:22:ec:57:12:7c:ee:a7:8a:5a:5e:
8a:4f:8d:bb:a6:56:29:90:a2:d8:c7:bf:4d:db:c3:6f:43:47:
01:78:d0:ca:5e:82:7b:42:a9:93:02:42:b1:8e:f2:df:82:2a:
43:3d:34:05:9a:43:ff:18:45:8c:4d:40:98:87:e0:71:54:fa:
68:2a:30:f7:33:d8:1d:f2:1d:b0:34:df:c8:0d:ff:b5:1c:9a:
fa:f1:f6:0f:7b:c0:71:99:85:ce:b8:c2:6c:71:79:02:bf:c3:
96:99:5c:78:2f:ff:16:f4:f2:75:c6:7f:c1:10:bb:da:38:06:
69:fc:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:04 2025 by rpki-client