Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/pRJ8-6uO798xOxtOikZ9AJIdDCg.roa
File: pRJ8-6uO798xOxtOikZ9AJIdDCg.roa (raw, json)
Hash identifier: rLIW4Cu9LDmY/ZMV6uUw6EwKeLS7S9KybaW71yP14vY=
Subject key identifier: A5:12:7C:FB:AB:8E:EF:DF:31:3B:1B:4E:8A:46:7D:00:92:1D:0C:28
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 0A223FAE
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/pRJ8-6uO798xOxtOikZ9AJIdDCg.roa
Signing time: Sat 01 Jan 2022 08:03:37 +0000
ROA not before: Sat 01 Jan 2022 08:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198641
IP address blocks: 185.58.230.0/24 maxlen: 24
185.58.231.0/24 maxlen: 24
185.58.228.0/24 maxlen: 24
185.58.229.0/24 maxlen: 24
37.205.40.0/24 maxlen: 24
37.205.44.0/24 maxlen: 24
37.205.40.0/22 maxlen: 22
37.205.40.0/21 maxlen: 21
37.205.42.0/24 maxlen: 24
37.205.46.0/24 maxlen: 24
37.205.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170016686 (0xa223fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jan 1 08:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5127cfbab8eefdf313b1b4e8a467d00921d0c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:27:ce:2a:72:c9:ea:6d:8d:df:9d:53:27:
d5:86:95:e9:c7:da:15:fb:c7:78:47:81:54:6f:df:
eb:29:30:c1:ff:80:5b:be:26:0d:85:b1:d5:1c:a7:
1b:a2:15:3b:bb:8b:d8:a3:6b:6d:0b:9a:f9:2d:62:
e7:13:e3:8e:f5:3c:9f:e7:be:00:38:b4:51:80:00:
16:4c:db:7a:12:f5:3f:9f:ab:a8:7c:74:13:d4:be:
cb:58:e8:a1:d9:e7:eb:74:06:04:21:78:29:06:7c:
66:05:f2:03:9a:75:df:4c:3e:ce:60:d8:ba:a1:ed:
75:01:52:1f:e1:35:7d:8f:03:cb:ae:ef:1b:70:98:
f4:d3:fd:f9:8c:56:46:99:25:db:6f:e4:4b:9e:7a:
df:a4:6c:15:05:0b:65:34:ba:22:8d:58:25:c8:32:
ae:f4:4a:d6:aa:5a:3f:c0:bd:df:d8:18:52:83:b8:
b8:65:7e:95:02:e4:ea:0a:84:7c:e0:6e:5e:6c:f4:
95:e7:6e:b4:8f:3c:ac:76:be:66:f7:1c:20:3d:10:
d5:9d:fd:8a:8a:fa:9b:44:cc:b4:6c:96:13:14:fb:
44:f8:02:0e:95:fa:0b:d2:76:f7:b0:d5:4b:fe:9a:
03:28:55:d3:08:1d:2b:5f:d5:f7:04:dd:b5:c4:a4:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:7C:FB:AB:8E:EF:DF:31:3B:1B:4E:8A:46:7D:00:92:1D:0C:28
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/pRJ8-6uO798xOxtOikZ9AJIdDCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.40.0/21
185.58.228.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0b:49:e3:82:59:6f:3b:2c:f4:22:dc:e6:f2:e8:42:10:0d:
76:be:56:ac:2c:71:43:e4:d4:a5:19:c7:ff:af:5d:83:16:a5:
3e:05:e3:71:6b:9f:f6:77:e9:a1:4b:b8:37:d4:a2:1f:e5:84:
8b:ec:10:35:72:83:b6:b3:ae:8b:59:1a:df:61:b6:c0:9c:c5:
8e:1b:3f:b0:54:b0:f1:5d:31:6d:f3:7c:1f:55:d4:b3:d0:6d:
af:49:69:7d:29:20:b6:ac:af:ab:b3:98:84:97:93:06:16:8e:
9d:47:4b:3a:3e:4e:37:b7:e0:77:4b:0d:22:03:82:3b:e2:a8:
88:40:df:7b:71:f1:a7:7c:c5:b1:d0:c3:0b:4f:4e:b2:f0:d4:
ca:8d:fe:b6:8b:64:88:40:a5:e3:0c:15:99:d8:aa:48:10:8d:
d3:b1:a8:86:fe:d1:9c:df:f7:15:06:c6:67:7f:3f:95:ab:1d:
8a:01:e9:b4:c2:12:08:16:40:38:68:a4:bc:7a:dc:fb:9e:96:
8b:43:b0:7f:41:d5:6a:9a:d8:48:09:2e:86:0e:b0:1d:cd:b0:
2e:e9:b1:cf:28:2b:de:cf:f7:7f:0c:d6:af:76:46:9a:92:1b:
da:ab:a6:b9:b5:eb:b2:e9:1e:a4:33:75:a9:db:b0:bf:93:cd:
6a:ec:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:19 2025 by rpki-client