Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jV8bBoi4OtkRk3JX_9x5UZVKtQc.roa
File: jV8bBoi4OtkRk3JX_9x5UZVKtQc.roa (raw, json)
Hash identifier: 3ez/M9iHAD0YxiHVwjf8lsTHEujMOh5ZYNme05FTLWc=
Subject key identifier: 8D:5F:1B:06:88:B8:3A:D9:11:93:72:57:FF:DC:79:51:95:4A:B5:07
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018906B6ECBBADFC47ED2478DB68D4A68199
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jV8bBoi4OtkRk3JX_9x5UZVKtQc.roa
Signing time: Thu 29 Jun 2023 10:33:18 +0000
ROA not before: Thu 29 Jun 2023 10:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 194.5.65.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:b6:ec:bb:ad:fc:47:ed:24:78:db:68:d4:a6:81:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 29 10:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d5f1b0688b83ad911937257ffdc7951954ab507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:72:87:21:ff:54:75:15:18:70:d7:ee:39:
3c:57:76:54:6d:da:f2:31:0f:b2:e4:f4:82:60:5a:
bb:07:d2:f8:22:68:ff:45:e0:27:84:85:c2:45:89:
56:ff:55:36:6a:f1:79:0f:7c:d6:97:38:6f:6c:4b:
e0:0a:66:ef:c1:79:52:0d:d4:bf:42:55:b1:54:4c:
fa:cc:ac:bd:5a:48:4e:8c:03:91:5d:24:8d:23:78:
1c:19:78:aa:b2:26:b4:ec:fb:8c:59:a2:a1:78:4e:
ca:e7:1c:84:ef:dc:7a:2e:7f:7a:7d:42:8e:6c:c5:
42:fe:96:f2:9e:b4:2d:c7:91:60:d5:c2:44:14:3e:
a5:e4:54:7a:ad:8b:80:7f:a6:bd:85:23:da:e8:1b:
0f:02:8c:f6:28:e3:50:82:43:c1:ce:20:b5:da:46:
e4:ae:15:cb:84:c4:93:15:d7:dc:49:a1:27:76:bd:
34:11:34:6d:a4:3a:90:67:00:4f:9d:cf:71:b5:48:
99:1b:79:06:68:38:5e:af:ac:1a:39:e9:c5:81:62:
af:ea:ee:86:49:83:f1:71:28:1b:22:6b:e9:09:7c:
90:24:b1:ae:12:ac:f3:25:7e:ef:07:6a:6c:87:d3:
df:3a:fe:f4:c1:e3:05:92:98:46:23:b1:22:b3:25:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:1B:06:88:B8:3A:D9:11:93:72:57:FF:DC:79:51:95:4A:B5:07
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jV8bBoi4OtkRk3JX_9x5UZVKtQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
185.210.232.0/24
185.218.101.0/24
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c7:76:25:ae:54:46:ab:78:82:02:14:0e:d0:c8:77:b8:3b:
fe:66:a5:19:ae:0f:c0:76:90:06:e4:8e:d3:30:59:ac:5c:e5:
28:41:9d:d8:7f:53:47:8f:a1:1d:46:32:82:dd:30:89:4e:4e:
b0:db:d7:22:f5:0b:75:db:12:02:27:0c:98:2d:e0:4e:85:7e:
89:f7:cf:8a:29:6a:54:e5:51:c8:1e:01:36:45:c6:e2:ec:55:
37:c7:36:33:c9:38:a6:0e:ab:d7:92:c1:d4:a3:b0:2c:11:6e:
70:c6:6c:1f:27:03:1d:95:1d:69:a8:bc:f8:33:e9:ed:ab:19:
3a:22:df:93:4a:b1:f6:a2:3d:12:eb:d7:f9:09:7b:5a:e9:8c:
9f:cb:8c:eb:3a:30:c0:16:c6:95:1e:70:9b:2b:9f:d9:9a:b0:
ff:c4:4a:df:bf:ec:e2:69:0a:ff:de:3e:42:e7:25:9d:bf:c7:
16:a8:ba:10:87:90:c1:b1:71:57:5b:e9:aa:ba:ee:ad:ff:61:
1f:b2:37:de:fa:e2:2e:c3:ad:ff:39:e7:0f:e1:ca:c5:e2:2b:
27:e2:29:6e:14:60:33:3e:ba:7c:6e:ed:a0:34:c2:b7:66:12:
ff:c3:00:e8:87:39:b1:2f:1b:74:76:16:a5:47:30:db:3c:8c:
dc:22:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:56 2025 by rpki-client