Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/tD1wilVWQ72QujySTcDSQJy9p7U.roa
File: tD1wilVWQ72QujySTcDSQJy9p7U.roa (raw, json)
Hash identifier: QvbNMr4s/fMn5hCmqNTUmvIQVXNNzQCpaGYyGWznlTQ=
Subject key identifier: B4:3D:70:8A:55:56:43:BD:90:BA:3C:92:4D:C0:D2:40:9C:BD:A7:B5
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01857082D7BEE5F5A156A062058A13595999
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/tD1wilVWQ72QujySTcDSQJy9p7U.roa
Signing time: Mon 02 Jan 2023 03:25:01 +0000
ROA not before: Mon 02 Jan 2023 03:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202513
IP address blocks: 185.248.78.0/23 maxlen: 23
185.248.77.0/24 maxlen: 24
185.248.78.0/24 maxlen: 24
185.248.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d7:be:e5:f5:a1:56:a0:62:05:8a:13:59:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 2 03:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b43d708a555643bd90ba3c924dc0d2409cbda7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:b9:8d:97:5e:59:6b:28:9b:4f:14:63:8a:
5d:61:5d:6a:93:00:f6:c9:e1:86:14:de:5e:c4:30:
cc:70:a0:2e:07:7a:e5:84:68:1f:72:e7:de:c5:3e:
ef:1c:39:45:1a:e1:e1:26:af:99:5d:79:0f:bf:95:
70:4e:e2:d0:17:75:c4:12:1b:0c:ad:fc:3a:32:bb:
82:f4:72:a9:b2:9c:40:d1:d6:21:a1:92:e5:33:66:
5f:fa:d8:d2:de:54:5b:3f:79:34:26:33:19:9e:25:
70:a7:00:60:92:5d:af:7a:0a:60:f9:81:a4:19:b2:
37:13:08:c4:5a:64:98:f1:7a:68:84:f1:c3:88:34:
a4:b2:93:f1:2a:62:c2:ad:68:ba:ae:e1:a9:86:ae:
f5:d1:4b:b0:cb:78:4f:62:bb:43:76:46:15:e3:39:
1c:95:34:9b:53:4a:0d:84:5b:3a:29:7e:92:67:f5:
40:65:4b:ec:7b:d9:69:73:0f:a0:95:13:65:7c:bd:
81:7c:b7:9b:98:1f:a5:45:f9:42:d5:e6:13:12:8a:
92:5c:4a:20:74:51:8d:1e:6a:a6:4c:d5:26:2e:59:
76:cc:64:27:47:c3:20:1f:a6:9f:0f:28:d8:65:ae:
67:65:2d:a9:89:f6:29:8f:14:71:cf:8b:b4:0e:6e:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:70:8A:55:56:43:BD:90:BA:3C:92:4D:C0:D2:40:9C:BD:A7:B5
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/tD1wilVWQ72QujySTcDSQJy9p7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.77.0-185.248.79.255
Signature Algorithm: sha256WithRSAEncryption
35:e2:dd:3f:50:e5:fd:86:58:a9:8a:e1:46:9a:ff:bb:ba:a1:
ff:32:51:63:da:8e:3b:e3:62:f2:5f:91:17:b6:51:47:06:eb:
b1:82:4f:70:7d:d1:4c:9c:e0:6f:01:8e:97:da:37:a3:8d:8a:
97:6d:fd:4d:41:e7:0b:c3:a4:58:d4:f6:17:13:73:87:09:9b:
b0:46:76:4d:bc:6f:cc:9d:23:04:92:00:c4:80:5b:86:06:26:
33:e2:fa:45:5f:3a:29:c5:ac:a2:75:8d:b9:b5:9d:4b:28:86:
22:06:1a:b9:59:da:5f:94:6a:b4:5d:1d:9b:aa:71:e0:a1:b7:
8e:17:e7:bb:06:77:98:2b:be:28:2e:40:fa:cf:68:d2:4c:60:
f8:04:72:ab:c9:a1:e3:9d:6f:32:dd:4c:fb:2f:47:85:07:21:
35:2a:22:2b:ee:d1:6f:39:1d:8f:f6:b8:5a:82:66:87:82:67:
ad:88:ec:d6:68:8e:e9:11:41:7c:07:95:c9:64:cb:6a:7b:3a:
47:d9:f4:37:e7:69:5a:4d:da:07:57:7f:8f:d6:fe:71:cb:be:
33:ff:76:92:a9:73:1c:e4:14:9b:db:fe:b8:9b:90:dc:4c:8e:
70:8e:60:57:7e:21:e4:19:26:d3:83:1c:d0:e3:9b:55:29:7c:
ab:c1:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:52:54 2025 by rpki-client