Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/_7JQtUGQrfWLTiUvXHkwBRdBeOU.roa
File: _7JQtUGQrfWLTiUvXHkwBRdBeOU.roa (raw, json)
Hash identifier: xjK6Uee8RCAXpV6jhhW4rAPsdpPIvZ3wtG8/vG1fZLY=
Subject key identifier: FF:B2:50:B5:41:90:AD:F5:8B:4E:25:2F:5C:79:30:05:17:41:78:E5
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 01856F42D349654D0CDA96403357496BA649
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/_7JQtUGQrfWLTiUvXHkwBRdBeOU.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204204
IP address blocks: 185.142.17.0/24 maxlen: 24
185.142.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d3:49:65:4d:0c:da:96:40:33:57:49:6b:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffb250b54190adf58b4e252f5c793005174178e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:e2:fb:3a:85:9b:8c:5d:ae:d1:92:d1:81:
33:f6:c5:a1:07:f0:cf:22:b9:4b:d5:49:9a:31:2a:
9c:24:de:81:15:23:9b:62:73:7a:78:da:d9:35:0d:
cb:1b:bd:1f:95:5d:40:4c:f8:a6:be:e9:06:16:d8:
db:81:7f:f1:28:76:fe:c0:06:b6:97:9e:fe:82:2e:
54:59:3c:52:f2:45:19:ec:27:51:1f:cf:41:fe:e1:
f3:b7:70:cd:39:cb:23:cf:62:f2:6c:4e:c8:9a:cd:
30:7a:92:ca:8a:85:47:61:12:f9:ff:83:f3:5a:34:
c6:66:88:22:9a:b7:c4:ac:7f:40:c6:71:8a:f7:3d:
2a:db:b7:36:7b:a8:a1:f8:f1:5b:4b:94:0b:01:9c:
50:dc:f6:97:ac:62:7f:bf:2e:72:b8:aa:26:69:14:
a5:57:d0:3e:38:21:ef:39:58:66:9d:f1:c0:66:d5:
f6:db:30:db:26:57:a1:53:ec:1b:cf:db:0b:2c:b5:
e4:62:89:71:d2:57:7c:92:89:89:a3:2d:74:fb:76:
ac:39:d8:d1:35:e9:6a:21:45:0f:1e:b0:e3:8e:c2:
05:c0:93:c8:5b:9c:63:e6:f9:aa:32:81:84:76:b1:
3e:1d:26:f9:e2:b4:37:67:4b:62:ad:15:ef:ae:58:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:50:B5:41:90:AD:F5:8B:4E:25:2F:5C:79:30:05:17:41:78:E5
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/_7JQtUGQrfWLTiUvXHkwBRdBeOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.17.0-185.142.18.255
Signature Algorithm: sha256WithRSAEncryption
7e:73:eb:ed:e4:e3:ef:6a:7f:bc:f5:7d:99:53:a0:83:fe:e4:
f5:30:6e:29:40:58:ad:cf:9b:80:68:74:5b:e7:2b:af:28:5c:
92:99:60:56:52:15:8f:7c:b9:7b:93:90:aa:86:1b:11:d6:28:
39:9f:38:c7:66:27:6d:14:a1:6f:b2:af:d7:d9:e9:2b:18:25:
9e:ae:56:eb:4c:71:ac:bf:dd:4d:d6:6e:83:75:26:cb:91:4c:
35:30:de:40:6e:12:8f:69:2a:d0:5c:6a:dc:67:da:46:2a:9f:
5f:95:67:b9:b0:3e:e0:28:66:30:8f:a2:da:2f:c0:f7:34:28:
2b:57:fe:7a:25:2e:39:01:29:ed:5a:46:22:59:38:53:1c:8a:
37:1a:db:ec:d1:2b:6f:8a:07:f0:d1:ae:1f:51:53:ea:c7:ea:
36:8c:00:b3:18:d3:74:36:ef:4b:ac:ae:b6:f5:d5:92:dc:93:
0b:c0:f2:07:79:25:10:f5:3a:4a:d3:3d:f4:6b:ce:84:09:c3:
16:54:1f:f9:b2:ae:7e:46:98:f3:3f:69:fe:d2:6d:e4:7a:b0:
db:2e:3c:91:5b:db:9b:50:1b:37:4d:57:fa:7a:c0:30:98:46:
73:a7:ac:0c:3c:9b:13:fc:c8:74:30:23:ec:6d:1c:03:4a:18:
67:5d:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:18 2025 by rpki-client