Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/IyAjWUKRf_lPPksJDUZ-3QUVSyI.roa
File: IyAjWUKRf_lPPksJDUZ-3QUVSyI.roa (raw, json)
Hash identifier: dbDOc7lef/BS/EFtg+muGLrRUb5DCQPM6R855DalFqA=
Subject key identifier: 23:20:23:59:42:91:7F:F9:4F:3E:4B:09:0D:46:7E:DD:05:15:4B:22
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 052D72CF
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/IyAjWUKRf_lPPksJDUZ-3QUVSyI.roa
Signing time: Sat 01 Jan 2022 13:04:47 +0000
ROA not before: Sat 01 Jan 2022 13:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61136
IP address blocks: 185.253.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86864591 (0x52d72cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Jan 1 13:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2320235942917ff94f3e4b090d467edd05154b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:eb:b5:b0:51:75:a6:0c:e4:6a:e5:fa:70:
90:30:ed:8a:9a:fc:f6:d2:c4:ff:2b:48:76:31:11:
15:61:f1:7f:03:bd:d5:e1:45:da:91:3e:55:40:72:
7c:47:58:8e:bb:ff:b7:e2:bd:b6:a1:6f:2a:34:cf:
a5:60:5c:63:a9:23:0e:89:46:b0:61:cc:81:88:ba:
db:e9:35:7e:97:57:ea:4d:20:14:4f:63:41:eb:00:
f5:00:5c:13:a7:da:bb:6d:d5:5b:e1:f0:56:60:af:
d2:fb:b7:91:32:e4:dd:ae:c7:04:1b:5d:35:af:94:
ac:1d:38:c0:25:45:b4:f5:2b:ad:fa:5d:2e:89:e1:
e8:76:5a:37:77:89:be:b2:21:d3:45:ce:b9:99:b6:
50:ac:36:04:2b:4d:34:a8:3e:67:f0:9d:22:e4:90:
12:32:c1:4d:05:f9:a9:68:5c:17:6e:39:4d:b8:6d:
79:ed:86:d7:59:fc:ea:02:0d:0c:28:2d:65:2d:67:
10:56:66:0d:b8:5b:e6:9b:27:89:79:11:ea:9a:e8:
f6:8e:67:72:fc:fc:45:5a:71:2a:7f:18:c3:50:a4:
be:6f:37:a8:4b:31:21:58:b7:0d:2e:6c:ac:a9:81:
5e:7c:c9:d2:06:94:f6:55:0b:3b:cc:ea:5f:a1:43:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:23:59:42:91:7F:F9:4F:3E:4B:09:0D:46:7E:DD:05:15:4B:22
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/IyAjWUKRf_lPPksJDUZ-3QUVSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.132.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8a:d5:f4:3f:4c:3c:f5:7f:da:d5:86:93:bd:57:20:cd:a1:
bf:a1:fa:11:55:bf:0f:59:c6:af:06:ed:b8:71:52:e5:ae:a0:
f7:8c:2d:50:cb:65:97:8a:e0:fc:07:ac:83:35:13:fe:17:ec:
4f:64:31:4b:29:34:67:0f:28:d9:c2:88:55:fd:0e:91:b8:43:
0d:02:e2:ae:20:35:e2:4d:21:80:34:8d:a6:07:4b:f4:20:de:
33:30:5c:92:bc:75:eb:cf:a0:1a:09:5a:cb:fd:f0:bd:d3:7e:
d7:b0:7c:f9:b4:fd:d0:fd:5c:4b:0d:69:de:ea:b1:9b:36:cb:
cf:34:a2:43:44:5c:db:ad:3e:9c:44:fb:f7:a8:ec:40:fc:6b:
e0:99:90:87:a8:74:ff:f1:ee:b5:4d:d6:8e:14:c9:13:b2:0c:
54:81:34:95:fb:d0:86:8f:c1:5d:38:57:80:53:c0:83:33:1c:
43:e3:b0:99:34:45:de:31:e7:b4:53:3a:a4:50:52:88:54:85:
7a:8c:ec:9a:6f:9c:18:d0:c9:c5:d6:7b:7f:ec:68:1a:d0:aa:
eb:72:f0:f3:55:24:ce:5d:79:4c:ee:91:b9:ee:9f:9b:a5:6d:
47:34:65:18:65:9a:e3:c0:f2:c3:13:8c:41:e5:69:92:f9:84:
90:ff:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:40:43 2025 by rpki-client