Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa
File: S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa (raw, json)
Hash identifier: ZtBs8fdRwSfhrXAA8qEpP8iG0NFXFSyn4rxbLIrtPCc=
Subject key identifier: 4B:56:0B:2C:FE:9D:27:7A:73:74:E7:8E:FA:A5:57:E2:80:97:88:CB
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 01823B6185B291EFFB1E5D0165E3B4E02968
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa
Signing time: Tue 26 Jul 2022 16:40:23 +0000
ROA not before: Tue 26 Jul 2022 16:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212058
IP address blocks: 185.197.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:61:85:b2:91:ef:fb:1e:5d:01:65:e3:b4:e0:29:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Jul 26 16:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b560b2cfe9d277a7374e78efaa557e2809788cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:2c:bb:be:b0:f2:80:5f:bb:e1:bf:c2:3d:
6a:f0:65:d8:36:6e:64:de:bd:5a:cd:41:4b:46:d7:
8a:74:f2:f1:e7:15:63:98:29:98:b1:bd:a9:79:52:
85:52:4f:c6:61:01:4f:57:98:d0:a4:1c:25:95:7a:
08:6b:05:e3:ba:2b:9c:20:28:c2:b3:37:ab:aa:a2:
75:15:82:69:82:dd:35:7d:3b:82:a6:82:6b:41:f2:
59:86:03:8c:f4:d1:83:54:0f:90:e0:76:99:78:e6:
2c:81:cd:3f:87:15:ca:3d:69:d1:cd:f8:6e:6d:9b:
4f:1f:d1:0a:21:c4:98:9b:0f:ca:b2:af:31:c1:ee:
c5:46:58:bf:e9:bc:ab:4c:0a:79:12:8b:33:97:b9:
df:6c:01:44:b3:54:e4:09:78:da:a1:3c:3e:3c:e6:
77:7f:57:d8:d6:e1:98:86:09:42:c0:33:78:a2:2b:
06:05:b8:f3:26:31:d6:e2:6c:fd:e2:a3:1b:af:f9:
e7:cf:8d:d7:20:af:a5:4f:6c:41:a8:46:1b:11:a7:
16:ad:ed:21:c7:99:5e:87:44:a5:be:1b:cf:40:c0:
df:c3:a2:da:14:b6:3a:2a:26:68:c3:e2:f6:21:22:
dc:de:28:90:2b:1f:bb:c1:d9:aa:26:0b:6d:ff:88:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:0B:2C:FE:9D:27:7A:73:74:E7:8E:FA:A5:57:E2:80:97:88:CB
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/S1YLLP6dJ3pzdOeO-qVX4oCXiMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bd:f6:c2:fa:77:25:3e:14:0e:a6:9c:11:56:9b:bc:7a:4e:
8f:40:3b:4c:bf:9b:6e:83:2e:d3:1c:df:cf:a7:33:f3:44:d8:
35:b1:78:9c:16:fa:ea:c0:4f:b7:fb:f2:29:19:04:b4:7a:e4:
3c:2e:4e:26:22:95:82:58:19:d4:00:f6:34:84:cf:1f:97:a6:
3b:7e:88:bb:73:da:3b:00:ae:c6:f3:0b:bc:88:43:03:0a:ca:
d5:e0:7c:9c:13:f6:10:64:2f:bf:68:af:2a:db:1a:a5:7b:3f:
7c:fc:e1:6b:05:c7:e3:75:9f:6d:d3:a7:7a:76:8d:9a:ae:5e:
8a:23:be:b6:12:57:4d:7c:b7:6a:dc:a5:a5:b6:d0:e6:c2:b5:
de:20:d9:2b:13:45:53:8c:dd:b4:43:40:11:f0:56:d7:0b:b6:
52:c2:2a:7f:fd:ae:a9:d8:86:ab:da:66:b8:f9:6e:96:a9:cd:
78:c6:15:f7:d0:d6:52:d6:df:9c:99:92:98:af:9d:bd:9a:40:
7e:dd:2f:36:45:7a:b5:68:08:45:67:79:92:6f:fa:82:2e:2a:
b4:4e:c3:10:26:65:ba:92:3b:a2:e2:b3:42:d3:fb:41:f2:ba:
99:0f:1d:28:3f:8d:48:f6:0a:bc:11:f7:59:9b:5b:d9:1d:4c:
dc:3c:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:57 2025 by rpki-client