Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/cybBHRD7KfP2Y6t6-mq543vPEoU.roa
File: cybBHRD7KfP2Y6t6-mq543vPEoU.roa (raw, json)
Hash identifier: 3Y7I3yulQLvwxavZUR+92jWcG+5Dx8aSGLzw7KJ0cl4=
Subject key identifier: 73:26:C1:1D:10:FB:29:F3:F6:63:AB:7A:FA:6A:B9:E3:7B:CF:12:85
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 01880C34DB357BF086F91DD7B2F036144173
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/cybBHRD7KfP2Y6t6-mq543vPEoU.roa
Signing time: Thu 11 May 2023 19:06:10 +0000
ROA not before: Thu 11 May 2023 19:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201558
IP address blocks: 185.69.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:34:db:35:7b:f0:86:f9:1d:d7:b2:f0:36:14:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: May 11 19:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7326c11d10fb29f3f663ab7afa6ab9e37bcf1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:1c:fb:70:ea:9a:a7:b5:07:64:f8:b3:d8:
df:4b:1d:c4:c7:7a:36:86:d3:53:92:e6:f8:eb:be:
e4:84:e2:e9:06:86:1a:0f:1a:8b:ef:2f:ec:e9:e0:
cb:7c:3b:9d:6c:9d:ae:65:21:88:6f:25:94:3a:7c:
91:57:74:9c:15:77:28:f8:6b:8d:39:0b:83:9c:d8:
2a:95:d1:df:54:09:85:86:fc:f6:90:f0:65:fe:46:
f6:0b:99:53:dd:3d:97:be:84:ed:97:e1:07:e9:5e:
1f:82:d4:55:c0:c2:3c:fe:0c:0e:11:92:7e:7a:81:
3c:5c:b1:f4:62:e1:87:b8:aa:9b:1c:81:87:5a:1c:
11:54:aa:c2:97:8e:f1:f5:3c:c3:9d:06:c8:12:57:
17:86:1e:66:f9:ec:41:53:58:24:ed:06:60:cd:24:
b5:3b:6d:ed:39:01:1e:af:5f:71:51:cd:f6:84:40:
4d:c2:73:60:ab:00:ba:d2:d5:94:d5:90:e5:b7:ab:
c6:d5:82:04:15:9d:60:51:e4:d0:68:86:7d:51:28:
09:2f:b6:14:9c:bf:1c:42:e2:64:46:63:a8:de:2d:
22:30:ca:3f:4c:be:52:58:a6:a0:07:33:7c:0e:da:
82:f2:43:71:44:9a:69:02:ea:ab:d6:ce:51:9d:ee:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:C1:1D:10:FB:29:F3:F6:63:AB:7A:FA:6A:B9:E3:7B:CF:12:85
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/cybBHRD7KfP2Y6t6-mq543vPEoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cf:7f:e8:da:e6:2f:4a:0d:bd:fc:2c:71:a9:6e:a8:79:27:
81:ef:06:73:09:ec:17:40:af:43:4f:df:7a:9e:69:08:9e:2c:
23:16:73:10:ec:1d:a3:88:33:0f:0a:6e:ec:9d:98:67:e1:40:
56:0f:60:72:37:f8:d1:6a:4e:91:4f:f8:4c:a8:20:ee:30:a5:
b9:9e:dc:e6:a8:d5:89:fe:35:37:87:6f:14:bd:af:72:f4:8e:
64:d6:bb:8c:25:ff:4c:7a:88:8d:92:f6:22:d8:48:a8:50:01:
c4:37:14:b9:0c:e8:c0:4a:55:56:aa:fd:5e:bc:fb:a1:48:83:
8a:63:1a:02:01:cd:46:1b:88:16:5d:80:cf:7e:97:f9:fc:d2:
71:91:c9:20:b6:b0:62:02:24:86:cb:31:64:d4:5c:f7:98:9b:
e0:6e:97:8d:bf:55:ac:4c:9b:c3:e7:4a:66:a2:1a:fc:3b:b9:
d0:57:38:85:fa:0d:7a:a1:41:46:6a:d6:1c:df:11:b9:00:f8:
21:5e:45:47:01:b7:af:1b:2c:52:db:6e:cf:10:c4:84:8f:06:
a0:20:f3:84:68:04:49:c6:29:b5:76:cd:30:0b:f3:90:98:67:
00:bc:fb:c4:cd:3c:08:90:be:7d:ad:38:4b:85:14:8a:5d:40:
0c:c1:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:51 2025 by rpki-client