Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/PTc7nJ_eaFT0ri0daWQ8hg-WHz0.roa
File: PTc7nJ_eaFT0ri0daWQ8hg-WHz0.roa (raw, json)
Hash identifier: 5+L+5giKpjKmhymUz8ZvpQD4py1tS4Vlka8oPxa9JUg=
Subject key identifier: 3D:37:3B:9C:9F:DE:68:54:F4:AE:2D:1D:69:64:3C:86:0F:96:1F:3D
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 0185723A071A37C705582CEF7248C21EAA56
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/PTc7nJ_eaFT0ri0daWQ8hg-WHz0.roa
Signing time: Mon 02 Jan 2023 11:24:43 +0000
ROA not before: Mon 02 Jan 2023 11:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204638
IP address blocks: 185.75.58.0/24 maxlen: 24
185.75.57.0/24 maxlen: 24
185.75.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:07:1a:37:c7:05:58:2c:ef:72:48:c2:1e:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Jan 2 11:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d373b9c9fde6854f4ae2d1d69643c860f961f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:27:d0:71:a8:bc:1f:70:48:4f:67:bc:81:
65:f5:54:39:2a:0d:51:ea:ae:f8:87:b6:54:b4:47:
c7:b2:fb:51:c4:3e:b1:ae:2b:7e:0f:ec:a8:14:7a:
43:b4:60:9a:bb:96:3c:3d:33:00:ee:48:f1:c8:f2:
54:27:ab:e9:a2:cc:32:d6:83:48:7e:4a:ce:9d:01:
7f:9e:12:16:20:d8:49:aa:3d:5a:00:b0:20:df:5d:
9b:9f:e2:5d:40:43:6e:70:7a:0a:9e:80:a7:7f:2e:
25:e7:b5:eb:af:5d:08:29:61:96:ae:d6:01:ec:00:
60:c9:67:56:10:92:35:e7:7f:e2:10:d5:34:b3:fd:
af:39:5f:65:79:4f:82:2b:cb:11:65:3e:a5:77:ec:
a5:6a:84:2b:db:8c:b3:f5:43:0c:cc:dd:8a:d4:23:
14:85:5a:b1:c1:88:12:27:5a:91:7f:86:5f:11:f1:
df:78:52:d3:c9:b0:47:34:df:0d:a0:a4:30:b5:50:
d3:de:db:57:cd:ef:df:c9:f9:08:7f:de:f7:e8:8a:
20:8b:b1:ff:7b:ac:b8:7b:13:21:81:2c:72:02:f5:
10:e6:90:55:39:9c:c0:c8:cc:b0:b4:2c:fa:cd:5d:
f5:9e:5e:fb:88:b8:3c:d8:bf:ab:7b:a1:b2:df:d0:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:3B:9C:9F:DE:68:54:F4:AE:2D:1D:69:64:3C:86:0F:96:1F:3D
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/PTc7nJ_eaFT0ri0daWQ8hg-WHz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.56.0-185.75.58.255
Signature Algorithm: sha256WithRSAEncryption
98:6c:58:d8:02:4c:a1:1f:10:ae:a5:28:92:43:1d:6c:39:3f:
70:53:b1:03:f5:9b:b4:47:ed:96:71:45:68:0e:d9:49:71:ab:
9b:5c:fc:fe:e3:62:36:f1:43:89:67:d2:4f:6a:7e:c1:45:04:
96:c2:6b:52:20:f4:e2:a9:4e:c3:17:b9:a2:23:ea:fc:d3:f2:
22:19:58:a4:ff:f3:58:62:63:a9:fa:55:4b:27:77:ae:e5:a7:
ac:df:d6:08:c3:d7:7a:e3:70:e6:f8:59:d0:06:f7:40:6d:28:
fb:f8:a6:13:f2:0a:de:5a:ec:48:7a:f4:8f:bf:b3:dc:48:2e:
8a:fa:62:7f:4c:c3:84:a4:62:70:2d:d8:df:02:4f:4d:34:71:
0b:00:84:33:65:67:8f:78:7f:1e:06:ec:38:37:d0:01:76:8f:
96:f5:8f:4d:19:eb:f6:e9:b1:61:b4:83:63:da:f6:c1:a5:fc:
92:ef:ef:e8:62:33:55:f7:25:b6:08:29:c0:85:91:12:1c:59:
9e:b2:28:4d:92:13:5e:cd:eb:2c:d4:72:29:80:ec:b2:f4:bb:
db:f6:89:65:0f:42:4e:f7:e6:71:06:f2:bd:f2:26:4c:68:8d:
2f:da:9a:04:c5:4c:1e:1b:40:df:25:99:6f:eb:f8:b2:b4:c2:
d9:d6:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:50 2025 by rpki-client