Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/Duu-fvpmg-wB1bhdPGVchqi-3OI.roa
File: Duu-fvpmg-wB1bhdPGVchqi-3OI.roa (raw, json)
Hash identifier: F22jiXlS1T/KS1xryxTSlIc5GJ7YYzNFxt6qynMITME=
Subject key identifier: 0E:EB:BE:7E:FA:66:83:EC:01:D5:B8:5D:3C:65:5C:86:A8:BE:DC:E2
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 03B44F6A
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/Duu-fvpmg-wB1bhdPGVchqi-3OI.roa
Signing time: Sat 01 Jan 2022 15:03:52 +0000
ROA not before: Sat 01 Jan 2022 15:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202672
IP address blocks: 185.157.182.0/24 maxlen: 24
185.157.181.0/24 maxlen: 24
185.157.180.0/24 maxlen: 24
185.157.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62148458 (0x3b44f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Jan 1 15:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eebbe7efa6683ec01d5b85d3c655c86a8bedce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:72:03:e7:ca:e3:ab:fc:71:a6:63:93:94:
44:8e:f1:83:93:d6:1a:c4:81:ed:03:68:5a:f8:c9:
46:69:59:6e:17:40:a8:3d:39:e5:31:ab:45:1e:08:
e9:2c:49:5d:73:a9:45:62:4c:d0:5c:5c:7b:34:a5:
01:05:bf:aa:7d:24:c1:94:7c:9a:72:9a:20:fe:cb:
6f:d6:8f:55:98:be:a5:5c:10:32:30:e1:77:41:18:
e8:c6:65:80:98:cb:cc:2e:82:b3:cf:65:03:c4:d9:
24:51:8f:af:9f:5b:42:36:9c:34:4d:a3:17:59:a7:
46:d9:6d:d8:bb:c2:a2:51:c1:15:90:0e:1d:38:d0:
96:46:98:1a:59:66:ed:f9:80:ea:b9:e5:89:7b:ab:
f2:75:26:d9:10:60:92:d1:c7:ba:41:c3:9e:70:ce:
4f:5f:5d:51:40:64:62:ba:c6:86:97:22:8c:cd:b8:
38:74:ea:a7:98:de:ff:0e:19:ba:86:7a:7f:d2:fb:
ba:c3:57:7f:56:7b:45:09:88:2e:4f:89:b7:aa:f1:
b9:40:21:e9:cb:30:bb:d2:d7:69:37:78:3d:5a:f6:
61:35:c1:d5:8a:ce:51:ac:ad:9a:e3:69:6f:2c:ca:
3b:ba:67:bd:e8:f0:db:1a:d3:54:9c:ae:2f:7d:e6:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:BE:7E:FA:66:83:EC:01:D5:B8:5D:3C:65:5C:86:A8:BE:DC:E2
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/Duu-fvpmg-wB1bhdPGVchqi-3OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:ae:2b:30:7a:bc:82:3b:c4:40:2f:c4:bc:c5:3c:69:d0:0b:
0f:c3:f4:86:b4:fa:8d:12:b8:ac:1e:1e:36:48:06:d6:b6:62:
5d:5c:89:5b:33:9e:f2:e5:a7:b4:6c:3d:22:f9:14:4e:c4:9a:
36:0a:44:83:96:d4:c8:27:27:b9:14:d8:8d:e9:15:c3:36:e9:
00:49:35:c4:a4:81:77:bd:0f:e3:cb:2d:20:0a:02:60:2a:39:
94:5a:a4:ba:6d:bf:50:9e:bd:cb:f9:6e:8b:36:54:68:99:e0:
47:0c:a1:11:61:73:2a:75:d1:d7:fa:4e:ba:a4:d2:a7:ab:e9:
bc:ad:56:3a:f4:99:d1:88:e6:f2:22:2a:b1:c1:02:d0:62:a0:
dc:6d:13:41:a2:80:06:05:b0:18:02:36:cd:7c:f7:81:85:7f:
c1:ba:62:de:2a:8f:2c:85:9d:72:08:74:0b:f0:b6:55:d1:fb:
9a:9c:b4:05:85:a3:51:3f:1b:17:c8:bb:81:56:d3:83:05:b5:
f6:06:f3:a1:bd:56:e8:ee:2f:3a:9e:dc:22:8e:52:bf:69:e8:
b7:79:35:b7:53:44:6d:98:d9:a5:c2:ac:8d:bd:4a:a5:07:7e:
3c:97:71:cf:6d:46:81:fa:dc:db:1d:d2:69:67:19:5b:14:f9:
d9:52:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:06:55 2025 by rpki-client