Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/pDTcgpGj4bKG3yJ5dmq94D5LYiM.roa
File: pDTcgpGj4bKG3yJ5dmq94D5LYiM.roa (raw, json)
Hash identifier: EGhdXeDsOKlgMhNnRziESjLYxEgSffKKxNKEvPq791g=
Subject key identifier: A4:34:DC:82:91:A3:E1:B2:86:DF:22:79:76:6A:BD:E0:3E:4B:62:23
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 8FD18C
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/pDTcgpGj4bKG3yJ5dmq94D5LYiM.roa
Signing time: Sat 01 Jan 2022 02:59:55 +0000
ROA not before: Sat 01 Jan 2022 02:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211309
IP address blocks: 185.190.36.0/24 maxlen: 24
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9425292 (0x8fd18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jan 1 02:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a434dc8291a3e1b286df2279766abde03e4b6223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:d0:ed:5a:dd:05:00:94:88:97:db:f9:31:
c6:a6:2a:2d:b9:72:d9:c6:cb:1d:a4:92:6f:75:d4:
4b:eb:2b:70:35:1b:a0:bc:a2:9f:b7:94:5c:74:df:
f5:8a:41:c4:de:a1:33:57:7f:27:d0:e8:d9:51:9f:
35:47:94:24:4c:38:7c:a1:90:88:64:92:f1:40:a9:
e7:70:c3:ce:47:93:5c:5b:b0:ca:d9:4c:1a:a1:44:
33:5e:97:7c:2a:23:aa:d9:4e:23:8e:ac:44:b4:45:
ec:d4:21:55:3a:72:92:f4:78:b3:5d:0f:45:4d:c0:
0d:d6:93:00:01:66:e2:85:b3:46:7b:e5:0f:d1:bc:
03:da:d2:eb:36:9a:5d:5f:65:d3:7d:eb:57:37:64:
d5:47:7e:b4:70:7d:80:3c:84:b4:ab:16:ae:73:94:
55:86:c1:a8:20:b7:62:68:d1:88:37:a2:68:f9:2a:
10:ac:73:d6:2b:b9:8f:10:58:45:e4:51:37:95:7b:
56:27:30:78:d0:a2:cf:f8:07:0d:b7:13:92:d5:a3:
df:13:e9:0a:f4:51:89:5f:dd:e1:92:b0:be:68:64:
7c:b1:6a:76:f3:44:0b:b6:0f:39:d0:68:4d:44:68:
12:d6:8d:7c:ba:b6:04:d0:67:8d:82:fb:aa:c0:99:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:DC:82:91:A3:E1:B2:86:DF:22:79:76:6A:BD:E0:3E:4B:62:23
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/pDTcgpGj4bKG3yJ5dmq94D5LYiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.36.0/24
IPv6:
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
06:23:50:5d:5d:0f:87:d1:6c:60:14:2e:ca:32:20:c6:20:7e:
1b:72:28:e6:34:03:9b:c9:12:3e:94:fd:7e:c7:95:3f:3b:bf:
7d:c2:1c:57:dc:63:21:fd:03:54:7e:9e:dc:e8:91:10:10:34:
8a:6c:1e:47:e2:29:c4:0d:1e:c9:e1:2e:a6:10:06:b7:19:c0:
61:ce:71:73:f4:6c:14:b4:05:8f:2b:b6:c1:7b:39:55:6a:cd:
92:39:b4:21:3c:2f:02:38:2e:7a:79:0f:32:3b:1b:4b:ae:26:
59:e4:a6:01:fc:e2:db:46:eb:2e:54:ac:98:02:a2:18:1a:ae:
e3:3a:c6:a9:04:44:c1:0b:d4:50:13:86:b2:6c:60:2a:56:1a:
8a:d9:55:d7:ae:f9:a5:4f:ce:e8:27:8d:68:c9:3e:d9:4e:76:
da:04:3c:c7:a8:ec:e6:8d:c6:81:3f:37:12:dd:3c:dc:c0:81:
b2:31:4b:53:31:5e:9f:bf:b4:8d:d6:bf:41:2e:4e:bf:4b:3d:
73:35:40:1c:c8:8b:b9:5b:22:b0:a0:16:1b:0c:da:ee:b2:68:
50:af:02:d2:45:c8:71:68:67:18:bf:a7:ff:7b:e0:a5:61:75:
eb:12:98:41:ee:47:5b:f7:ab:a3:e2:fa:4b:d8:a2:c4:00:df:
60:06:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:10 2025 by rpki-client