Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/o1TS3g2BZR5XI-9ncj_6sAc8Ndc.roa
File: o1TS3g2BZR5XI-9ncj_6sAc8Ndc.roa (raw, json)
Hash identifier: mY9MbeRX7x0gNscv0tDAOWwkb14XfVClfl4N8wpuL7o=
Subject key identifier: A3:54:D2:DE:0D:81:65:1E:57:23:EF:67:72:3F:FA:B0:07:3C:35:D7
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 01ED9FCC
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/o1TS3g2BZR5XI-9ncj_6sAc8Ndc.roa
Signing time: Sat 01 Jan 2022 00:55:28 +0000
ROA not before: Sat 01 Jan 2022 00:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204342
IP address blocks: 185.251.164.0/22 maxlen: 22
185.251.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32350156 (0x1ed9fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jan 1 00:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a354d2de0d81651e5723ef67723ffab0073c35d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:36:59:57:c3:3e:74:e6:84:3e:24:80:b8:
ab:6e:90:b6:3d:26:b2:44:d3:1e:45:81:61:52:01:
e4:c2:d9:f4:9d:86:06:8a:39:53:75:ba:e4:06:87:
36:1c:3a:ec:3b:f0:d6:94:54:7f:01:5f:d5:49:28:
60:c7:e7:8c:5d:8a:0d:d2:8c:28:f6:8e:e7:f0:56:
75:89:e1:80:20:0f:72:98:b0:b8:ce:2d:7f:ae:f0:
2b:5c:71:eb:e4:82:a5:af:c0:a6:d7:b5:71:cc:37:
60:87:2b:94:1d:08:9f:87:ba:80:29:e9:b8:66:2d:
45:84:4a:55:eb:3f:04:13:fd:22:9b:a6:01:93:6f:
0a:49:9d:30:df:bd:3d:e3:10:df:9f:9b:1f:61:d6:
e6:8a:6e:31:2f:be:a1:e7:7b:3b:8e:94:2d:8b:ae:
2a:24:bd:99:4c:16:96:d8:6b:ed:3b:74:cc:81:26:
be:d9:04:79:37:63:2e:e5:d3:cb:ff:80:2c:8f:f1:
38:20:fa:83:98:e8:2a:31:61:a1:26:e5:a8:04:f8:
f4:e2:35:ef:4f:45:d4:cb:85:d4:9a:eb:2e:93:17:
80:16:35:e1:44:12:1b:08:a9:cd:3d:e1:a2:5b:35:
cc:29:f2:fd:00:37:fd:73:03:df:b8:8e:a3:23:26:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:D2:DE:0D:81:65:1E:57:23:EF:67:72:3F:FA:B0:07:3C:35:D7
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/o1TS3g2BZR5XI-9ncj_6sAc8Ndc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.164.0/22
185.251.184.0/22
Signature Algorithm: sha256WithRSAEncryption
29:f2:49:23:e8:4a:34:5c:03:ab:84:bb:34:fe:a6:fc:d8:ef:
62:24:98:bf:0c:32:df:d5:38:6a:be:8a:86:0c:96:f5:80:10:
7b:23:4a:73:4f:76:da:a9:71:cc:ec:ce:5e:6b:d9:19:35:55:
33:83:95:4e:33:cd:84:d8:2b:b1:8b:84:8c:d9:74:11:f8:f4:
d5:6f:69:c5:9d:9e:b5:9d:c0:af:29:a4:86:13:5e:d7:5a:2d:
6e:92:cf:e5:f3:10:f7:5c:8f:84:6f:94:7c:05:2e:10:53:e7:
3d:b9:4e:04:51:fc:a3:cb:fb:ad:b9:c8:8e:37:73:ba:50:9c:
1b:0c:4c:1d:88:8e:2c:ea:49:2c:bd:4c:68:61:10:46:01:cf:
14:67:3b:53:da:03:22:06:c9:41:0a:2a:56:c9:20:52:bf:25:
4c:05:87:97:9d:ce:87:2c:b9:26:9c:35:fc:aa:62:1a:28:38:
d3:ad:bf:81:0d:2a:3a:01:6d:13:0e:24:8a:07:11:77:01:9f:
eb:b8:c8:d5:33:e6:d7:59:81:ad:11:31:4c:49:56:f2:44:fa:
e7:77:c6:66:c3:f2:ba:a6:4b:bd:8f:c3:22:e1:92:2d:08:15:
09:29:6a:34:df:51:fd:44:0b:2a:0d:7a:52:a9:44:a0:f6:e5:
66:19:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:36 2025 by rpki-client