Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/V7jKjL80IIHb0EJNr-U56TIL9sA.roa
File: V7jKjL80IIHb0EJNr-U56TIL9sA.roa (raw, json)
Hash identifier: njcpMW3YmOXP1Unwmn5h+a0vYQl0yASW8GiSxHTUOlE=
Subject key identifier: 57:B8:CA:8C:BF:34:20:81:DB:D0:42:4D:AF:E5:39:E9:32:0B:F6:C0
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 01ABCC14
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/V7jKjL80IIHb0EJNr-U56TIL9sA.roa
Signing time: Fri 21 Jan 2022 15:34:07 +0000
ROA not before: Fri 21 Jan 2022 15:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197709
IP address blocks: 185.238.60.0/24 maxlen: 24
192.162.144.0/22 maxlen: 22
193.227.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28036116 (0x1abcc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 21 15:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57b8ca8cbf342081dbd0424dafe539e9320bf6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:85:24:d6:76:d1:63:a1:84:69:5a:59:e2:
48:58:e4:25:81:91:60:8c:4b:bb:53:1d:38:6a:90:
db:2e:a1:37:24:57:19:4c:71:81:3f:05:dc:db:3e:
c5:72:86:00:0c:52:97:43:ae:62:96:2b:81:56:28:
6b:63:12:1b:7d:50:9a:e9:ac:01:02:d8:b6:9f:da:
45:39:b4:e4:88:10:92:b3:4a:f5:e0:33:af:7c:94:
b1:3e:4d:f3:39:c1:02:e7:c1:43:f8:67:0a:dc:06:
91:18:9b:6c:3d:61:69:4d:24:3a:5a:19:8c:79:2e:
50:e2:be:cf:ff:3a:28:b7:ee:f4:14:73:e0:58:1c:
cd:7a:06:ba:c5:91:88:85:58:25:0a:82:d0:51:21:
0b:a1:ba:0a:5a:4d:46:bf:2c:9e:34:89:4a:6d:d4:
c7:e0:de:0c:f0:31:18:b6:c1:1a:62:60:7b:a6:55:
ff:96:7a:07:96:d3:4d:b8:5f:95:84:7b:15:19:f6:
01:47:b9:2a:56:ae:e9:b8:3b:2a:9c:04:ce:e5:63:
60:aa:d9:50:d7:d3:c4:c6:5d:e0:7f:78:79:dd:cc:
50:8a:2e:4e:d5:ed:18:a3:e1:39:c5:f6:50:5e:e1:
6e:d0:ca:0e:78:40:f9:1f:15:71:0f:c4:f5:ef:6d:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:CA:8C:BF:34:20:81:DB:D0:42:4D:AF:E5:39:E9:32:0B:F6:C0
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/V7jKjL80IIHb0EJNr-U56TIL9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.60.0/24
192.162.144.0/22
193.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:08:04:1d:a4:fa:8f:1b:47:c3:0b:5b:0a:cf:28:72:fe:47:
31:f4:85:3e:8f:f4:5a:c2:0c:db:b5:65:94:de:7a:6e:f5:fb:
48:89:50:b0:1d:93:c4:e8:8c:5b:40:af:e8:1a:83:1e:bc:6f:
00:ff:ca:af:3f:48:98:f6:aa:35:fc:4e:24:07:24:f4:69:ac:
3d:29:83:c7:b3:26:14:c0:c6:26:e6:f2:74:a5:b5:cf:e8:19:
45:12:4d:b8:25:03:d8:53:a6:e5:4b:a1:98:5b:df:cb:ed:b5:
87:e9:d1:0a:e4:3d:f1:c8:34:85:1f:dc:b3:3a:cf:f2:bc:5d:
31:fa:38:b4:95:1e:3a:f8:ff:3a:93:d9:bb:14:7d:05:0c:68:
3a:de:34:a0:7c:b8:82:38:3e:25:41:26:39:fd:72:45:1d:07:
7a:e6:41:62:83:88:e3:47:5c:c2:bc:25:ce:55:8c:a3:4e:01:
63:e2:9e:47:b6:b4:85:3c:2f:30:29:0a:ef:b1:84:ec:4d:21:
02:f2:df:2c:d5:45:81:96:e3:f1:2c:c8:2a:02:fc:04:57:ca:
99:07:5e:a6:67:3a:2c:0b:1d:0e:8b:f2:67:2b:c4:5f:77:22:
a7:50:68:ca:82:f9:68:b2:11:b1:af:5e:02:cc:a6:75:cb:6d:
48:7f:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:25 2025 by rpki-client