Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/PdAM2fZyZ9CoTMhJpqzdENzd0z8.roa
File: PdAM2fZyZ9CoTMhJpqzdENzd0z8.roa (raw, json)
Hash identifier: DKyJ9dv0VFimAn/pvcMgyYEMnbQjhEdBUUN6sxLGDXQ=
Subject key identifier: 3D:D0:0C:D9:F6:72:67:D0:A8:4C:C8:49:A6:AC:DD:10:DC:DD:D3:3F
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 763709
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/PdAM2fZyZ9CoTMhJpqzdENzd0z8.roa
Signing time: Sat 01 Jan 2022 01:53:55 +0000
ROA not before: Sat 01 Jan 2022 01:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206169
IP address blocks: 185.194.152.0/24 maxlen: 24
185.194.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7747337 (0x763709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Jan 1 01:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dd00cd9f67267d0a84cc849a6acdd10dcddd33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:ae:72:6d:f9:9b:b1:28:5c:fb:0a:c2:cb:
a2:b3:72:6c:6b:5d:11:97:58:b4:80:30:ae:57:0d:
80:90:98:72:e3:8e:9e:c1:28:45:fd:16:f0:65:1a:
35:35:53:e8:76:95:b4:58:4c:44:ae:2e:43:b3:78:
84:8c:b6:0b:ca:6e:0e:fe:6b:3e:ae:d5:5d:64:de:
5c:27:fc:50:49:d8:08:fa:73:6a:28:3c:f9:ad:ee:
b3:65:59:4d:c1:28:f1:34:60:e6:15:39:ef:a2:35:
67:c6:4b:ff:fe:58:ce:a2:bf:74:3e:e3:d1:46:be:
93:db:02:cc:7f:fb:30:4a:10:01:53:81:a7:03:39:
60:84:db:32:01:4b:39:fe:fa:af:4a:a7:5b:08:fb:
ef:42:84:a3:2f:f4:5d:0a:e8:4b:12:8e:08:b2:8b:
2c:31:60:6a:e4:ba:64:9c:fa:91:3a:f6:89:ac:58:
f4:a4:f7:0c:c6:1b:18:c7:7b:f7:d7:80:f8:33:ac:
91:17:59:55:d3:d6:a2:bc:df:16:27:c2:a4:8e:ca:
97:48:6b:48:6c:62:11:76:ff:a5:42:ec:d5:db:6b:
d9:3c:ef:a6:c2:cf:cb:aa:a4:15:4c:5c:12:32:bb:
a2:6f:7c:97:ed:87:b3:4e:e4:29:26:76:b2:56:a3:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:0C:D9:F6:72:67:D0:A8:4C:C8:49:A6:AC:DD:10:DC:DD:D3:3F
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/PdAM2fZyZ9CoTMhJpqzdENzd0z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.152.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:11:66:1c:8a:d8:17:50:05:b1:41:f1:79:79:f7:2c:18:a2:
86:10:38:fc:da:2b:1f:4e:f2:6a:11:78:7c:49:a3:7d:f6:7a:
68:b8:23:c3:8a:92:f7:6e:11:c8:a3:72:e4:fe:8c:f0:d6:92:
d7:94:ce:fd:87:b0:27:92:54:50:63:dc:db:23:00:68:a2:3c:
ab:96:0b:e7:cf:48:24:3a:52:24:45:ad:a6:a3:4b:94:8b:18:
07:65:11:f1:67:d6:49:8b:25:a8:93:e6:ee:7a:1f:d4:5a:41:
56:75:de:76:6a:67:84:37:71:59:5e:18:08:dc:29:4c:66:1d:
43:89:c4:40:a3:f2:5d:02:1f:d4:65:93:85:ac:29:f7:54:a4:
60:47:ad:84:d9:0b:d2:79:aa:73:1a:61:24:a3:03:25:e3:d3:
37:bd:f9:8c:19:e4:0b:51:c8:15:0a:f4:f1:c8:d7:8b:c0:5c:
28:22:a2:3d:35:2e:8c:5d:a3:1e:42:35:e9:24:0d:23:fe:09:
09:c4:ec:1a:bb:9d:81:56:b8:c1:3d:22:90:9e:cf:20:0f:7c:
e3:59:19:60:4b:84:2d:8d:96:e5:b9:a9:4f:cd:f1:ec:e4:27:
37:3b:24:24:f0:d1:6b:55:5a:ab:cb:6a:3f:31:42:e8:19:34:
c6:6b:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:15:25 2025 by rpki-client