Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/L1AaoRQn5MX14AKNdDdxCFpgDaY.roa
File: L1AaoRQn5MX14AKNdDdxCFpgDaY.roa (raw, json)
Hash identifier: Z7QkFfucuwR+7oH3mo5yMYIjol6BXEeoE0GgjhxJuRg=
Subject key identifier: 2F:50:1A:A1:14:27:E4:C5:F5:E0:02:8D:74:37:71:08:5A:60:0D:A6
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 0559D214
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/L1AaoRQn5MX14AKNdDdxCFpgDaY.roa
Signing time: Sat 01 Jan 2022 07:55:27 +0000
ROA not before: Sat 01 Jan 2022 07:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200978
IP address blocks: 185.89.228.0/22 maxlen: 22
91.227.98.0/23 maxlen: 23
2a05:d980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89772564 (0x559d214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jan 1 07:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f501aa11427e4c5f5e0028d743771085a600da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:d3:c3:0b:86:ce:ad:dc:1c:e3:80:9a:fb:
8f:17:1e:cb:57:df:a5:04:a6:b5:d0:51:d0:2e:6e:
84:2f:48:b3:fc:aa:05:b8:69:af:b2:fc:17:9e:63:
aa:b9:99:25:f1:23:ba:2a:bf:88:50:79:44:1d:76:
0c:f4:91:3f:df:0d:b5:e9:9d:65:0e:fc:d3:9a:3c:
c9:58:3c:ff:03:ef:d9:11:26:8c:b4:a1:85:94:db:
59:62:dd:41:e6:d9:28:ef:a3:e4:44:70:c6:c4:4a:
e7:36:ee:0e:29:3c:fc:51:36:a3:f2:db:b7:0c:da:
af:b6:07:26:01:55:c7:3a:18:55:4d:59:33:c7:5f:
b8:dc:76:d9:f7:0d:37:77:5c:7e:2d:85:79:f5:83:
a2:12:2f:37:59:c0:54:d8:50:4f:dd:b7:51:ac:d6:
69:9b:75:b4:67:cc:c0:39:38:4c:cc:d7:d6:4f:11:
90:9c:83:46:62:1f:67:8b:b4:0e:31:2f:64:16:39:
48:3f:21:e7:c0:7f:61:70:ea:01:d7:78:cd:48:26:
ac:66:47:5a:3c:af:65:97:6e:b5:f3:af:e8:80:60:
6f:e5:2d:fb:14:56:2c:68:97:6c:93:0d:8a:a8:5d:
12:dc:c5:6a:f3:bf:fc:c1:8d:df:81:c2:95:a6:4b:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:1A:A1:14:27:E4:C5:F5:E0:02:8D:74:37:71:08:5A:60:0D:A6
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/L1AaoRQn5MX14AKNdDdxCFpgDaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.98.0/23
185.89.228.0/22
IPv6:
2a05:d980::/29
Signature Algorithm: sha256WithRSAEncryption
4b:94:19:9e:dc:1c:ae:c8:18:b0:2c:d5:eb:00:e1:74:6a:55:
14:4f:86:5e:9f:02:e6:b9:46:72:42:b7:ee:f1:5e:f1:2e:ef:
56:7d:e2:26:41:7c:b7:aa:97:7c:38:ad:0b:16:1d:50:61:f5:
b5:13:7f:24:aa:23:5f:8d:5b:23:33:2d:2b:1c:d4:8a:9d:34:
9b:08:3a:c3:cd:08:5f:3a:b7:6c:be:86:4a:3c:a5:bb:7b:60:
ea:f9:5d:22:0e:8f:18:1f:60:2a:7e:38:01:c2:9d:55:0d:f0:
bd:82:8d:29:d0:7e:0a:2a:e3:e9:a7:d8:be:6c:5b:6c:03:7e:
16:0e:ff:3e:0c:c4:99:5f:03:b7:6a:32:35:63:9f:00:74:bb:
59:11:df:1c:02:dd:65:3d:00:16:92:ff:fd:96:3b:ad:ac:60:
7b:60:65:c2:5d:0a:27:87:e4:99:33:59:6f:ac:7d:3d:77:9a:
e6:8b:c0:e7:f1:40:12:51:e9:16:37:b7:a1:43:22:f9:da:3d:
24:b2:41:e5:a5:1e:4c:f2:5b:d5:14:a2:f2:72:e0:e0:05:bb:
0c:39:38:bd:4b:ae:13:63:0e:22:ec:71:b0:2e:07:87:2d:6e:
72:75:15:50:25:4f:b8:1a:38:68:ed:72:11:c4:98:6e:23:a3:
f2:eb:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:01 2025 by rpki-client