Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/rN1oc84EDV6qwQ9rKmUfnCwaze0.roa
File: rN1oc84EDV6qwQ9rKmUfnCwaze0.roa (raw, json)
Hash identifier: fO+jhgekD6ZrSsyv+Ipjxggv2vpJOMIPI6yp84MbHRk=
Subject key identifier: AC:DD:68:73:CE:04:0D:5E:AA:C1:0F:6B:2A:65:1F:9C:2C:1A:CD:ED
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 018B6B40526B686A46550428E37EAFCDC975
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/rN1oc84EDV6qwQ9rKmUfnCwaze0.roa
Signing time: Thu 26 Oct 2023 09:10:59 +0000
ROA not before: Thu 26 Oct 2023 09:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207013
IP address blocks: 185.168.177.0/24 maxlen: 24
185.168.176.0/24 maxlen: 24
185.168.179.0/24 maxlen: 24
185.168.178.0/24 maxlen: 24
2a0b:ffc0::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:40:52:6b:68:6a:46:55:04:28:e3:7e:af:cd:c9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Oct 26 09:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acdd6873ce040d5eaac10f6b2a651f9c2c1acded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:0b:5e:39:6e:04:e9:13:37:ca:f0:9d:c4:
ce:16:8b:e2:c1:03:84:38:68:f4:45:3c:0f:c7:2d:
12:9b:3c:74:c6:49:6e:01:80:f4:1a:cf:6f:37:14:
0a:8d:f6:8e:61:63:35:bf:62:1c:77:1c:b1:4d:60:
dd:b2:fb:4b:e3:f7:43:9c:41:f7:b7:6a:15:d3:87:
77:90:79:61:00:5a:01:dc:73:1c:bf:c9:33:7e:d0:
ea:f1:59:6d:f9:b0:ff:b8:91:0e:96:87:fd:87:21:
b8:7e:ae:f6:0b:d9:99:b0:45:5e:fa:66:f1:84:82:
5e:8a:49:d2:2e:a2:8c:d9:1b:73:12:00:3b:33:55:
73:2e:2c:a6:16:7d:63:7a:95:3e:27:d9:7f:40:4f:
53:2d:c5:30:a0:f2:19:6c:91:59:74:81:cf:54:24:
7b:0b:ff:38:1e:42:c4:10:f4:cf:3c:ea:c6:50:d8:
fc:43:fc:37:93:6e:76:16:ef:84:95:af:b7:74:57:
ba:49:4f:2b:93:ef:66:96:7a:0a:80:75:7c:ab:da:
f7:59:7a:04:0f:63:f3:8b:2a:b1:a5:60:00:68:e5:
28:14:6e:24:bf:0c:3a:8c:11:75:ee:f1:80:b9:79:
10:d3:0a:d9:72:0e:c8:40:3d:e3:98:80:de:d7:a0:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:68:73:CE:04:0D:5E:AA:C1:0F:6B:2A:65:1F:9C:2C:1A:CD:ED
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/rN1oc84EDV6qwQ9rKmUfnCwaze0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.176.0/22
IPv6:
2a0b:ffc0::/40
Signature Algorithm: sha256WithRSAEncryption
41:18:d5:92:6c:38:cd:3f:d1:53:36:40:d3:e5:6e:15:76:77:
6e:79:05:9b:d6:b9:c9:f3:68:51:6c:c4:a3:4e:1e:19:cc:42:
e4:4c:88:e9:2c:6c:8b:10:7a:48:4f:e8:f1:14:3f:ec:39:b2:
6b:41:ec:26:dd:ad:a8:da:d9:16:d2:01:63:23:12:f4:45:c1:
66:76:23:4b:fc:8e:39:93:0d:19:38:06:e7:c6:36:ad:3f:b2:
bb:ac:54:34:68:4c:67:f0:a0:61:94:1b:b4:4e:7c:f8:7f:28:
1d:e1:90:0d:53:b5:37:59:69:ee:a5:b9:c7:4f:b1:3d:a7:97:
7a:98:d4:9a:dc:23:78:e7:e5:6a:7a:71:b4:1a:12:88:7b:13:
ff:f9:b3:99:c5:2e:8d:aa:72:7d:ba:f3:e7:39:b8:6e:93:c6:
78:b3:09:d9:67:53:92:6e:32:9d:5f:92:a8:43:09:95:fc:3e:
78:b9:7e:9b:2b:6e:e4:4e:c0:9a:bb:c3:3b:70:5d:82:8b:50:
46:ff:6f:c3:49:64:33:d8:21:a1:dd:fb:7b:d9:0c:7d:ac:6b:
01:fe:c5:99:b7:e6:99:2d:1c:05:4f:43:6a:79:b2:b3:af:47:
48:88:ea:03:5d:1d:19:0f:f4:b8:f1:b9:9f:c3:a2:3e:ab:b6:
bb:6e:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:23 2025 by rpki-client