Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Ccy4dT-fn_ATWXhbviDiqPy4UBk.roa
File: Ccy4dT-fn_ATWXhbviDiqPy4UBk.roa (raw, json)
Hash identifier: uKRtm7xtGkzAl+de0CTtBhGgX+1PO9I0RXMDu+FUxVY=
Subject key identifier: 09:CC:B8:75:3F:9F:9F:F0:13:59:78:5B:BE:20:E2:A8:FC:B8:50:19
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 062FF704
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Ccy4dT-fn_ATWXhbviDiqPy4UBk.roa
Signing time: Fri 22 Apr 2022 09:58:17 +0000
ROA not before: Fri 22 Apr 2022 09:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204176
IP address blocks: 185.112.63.0/24 maxlen: 24
185.112.62.0/24 maxlen: 24
185.112.61.0/24 maxlen: 24
185.112.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103806724 (0x62ff704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Apr 22 09:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09ccb8753f9f9ff01359785bbe20e2a8fcb85019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:be:01:87:4f:15:59:ea:7d:40:90:14:42:
0e:7a:d8:3d:b3:b0:73:6a:b1:bd:50:ce:d5:67:b1:
be:9c:ba:11:91:18:40:65:01:e7:eb:b5:db:9f:ef:
84:56:d5:c1:b6:5f:96:85:48:38:fd:94:fb:56:76:
4f:6a:fd:57:2e:64:d4:7d:40:55:d2:06:ec:a9:a3:
c9:12:17:a9:08:06:20:c5:2d:1b:ed:9c:32:aa:7f:
f7:1d:f1:d0:8b:82:ad:ad:e2:02:1c:83:0b:9e:ac:
dd:36:7f:e7:42:5d:82:11:2f:2b:cc:4b:8b:9c:1f:
3f:02:70:ae:ec:d1:05:de:a0:13:01:85:27:d4:d0:
35:83:f0:fe:c7:27:6a:28:2d:c7:9a:2f:5d:84:4c:
9a:7d:3a:cc:e6:5b:97:6c:66:1c:37:ce:2e:a0:97:
18:e2:e7:74:1a:5e:53:26:3d:3d:f2:96:d6:05:db:
42:f0:35:02:0e:4c:01:3e:c1:64:47:94:a4:73:4e:
1d:10:2d:92:13:3e:80:7a:51:78:0a:f5:e5:1c:8e:
a8:d9:c4:e3:7d:1c:44:72:d2:ae:5d:7e:fa:c3:76:
32:08:cb:a1:03:48:c6:39:d6:5c:30:19:63:84:af:
46:ac:a3:a0:9d:92:1e:2e:49:8f:7c:71:5d:e7:76:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:B8:75:3F:9F:9F:F0:13:59:78:5B:BE:20:E2:A8:FC:B8:50:19
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Ccy4dT-fn_ATWXhbviDiqPy4UBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.60.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c4:42:2c:72:8e:66:11:0b:61:12:92:e9:9b:a0:36:45:45:
44:e7:1f:95:fd:40:42:4a:31:9f:53:d5:e9:5a:fa:22:3b:08:
58:95:f0:bb:7d:0b:f1:09:a1:10:08:89:a1:5f:7a:0f:5b:e6:
c3:28:ed:ae:83:30:b8:f6:76:91:57:97:32:04:de:64:7f:40:
3b:e1:ff:0f:a8:14:a6:1f:2b:56:c3:09:2e:75:7e:cc:29:7a:
ad:46:69:b3:f7:7f:e7:1d:6a:9c:ca:59:bc:7d:eb:d8:60:bd:
b3:ea:40:80:a8:40:73:99:28:a9:64:44:c5:5e:50:0f:fc:26:
60:bc:39:0c:9e:b8:8c:2e:ef:65:d4:49:f5:fc:c0:92:07:47:
77:41:be:0b:e8:c3:1e:e8:14:e5:9d:ff:de:df:76:a5:b4:0d:
33:b0:53:41:b1:8f:d5:c6:c2:61:74:f0:19:b0:3c:62:4b:b2:
2c:fa:3b:a8:85:b7:d4:73:fa:c7:e9:4b:d7:2b:7c:77:01:f2:
52:1e:2f:f0:b8:63:91:fb:db:6d:93:ba:92:88:0e:97:38:ea:
73:a4:55:e2:fc:83:e6:03:7a:3e:46:d8:9a:0c:56:41:6a:8d:
92:e2:5a:e0:53:e9:da:90:b6:ae:d0:55:7f:de:86:3f:c1:e9:
18:7c:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:24:47 2025 by rpki-client