Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gAhURqZeKCrpTWcUtV0HfyZX51U.roa
File: gAhURqZeKCrpTWcUtV0HfyZX51U.roa (raw, json)
Hash identifier: FU3qJb/qpA2XfaVnhpXMNp7HIHLsaKlbtGqF7UK7+X4=
Subject key identifier: 80:08:54:46:A6:5E:28:2A:E9:4D:67:14:B5:5D:07:7F:26:57:E7:55
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01856EF001ED338564817C3E33B917F05EA5
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gAhURqZeKCrpTWcUtV0HfyZX51U.roa
Signing time: Sun 01 Jan 2023 20:05:00 +0000
ROA not before: Sun 01 Jan 2023 20:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41697
IP address blocks: 85.132.240.0/24 maxlen: 24
85.132.250.0/24 maxlen: 24
69.94.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f0:01:ed:33:85:64:81:7c:3e:33:b9:17:f0:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 1 20:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80085446a65e282ae94d6714b55d077f2657e755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:8b:af:0d:a8:d3:63:68:a1:3f:7a:c6:27:
3a:10:44:38:2f:3c:d8:e4:b3:95:3e:d1:26:a1:99:
a4:96:83:00:8d:77:9f:24:a8:f0:51:2b:0b:87:79:
e7:c0:83:9d:d4:fd:96:69:dc:5d:c8:13:98:fb:d3:
3e:3e:54:e4:4a:3b:f5:55:98:d3:d3:15:f1:e4:28:
fd:f0:cd:bf:4d:87:4e:cc:ad:69:4f:4c:99:46:6e:
89:de:e6:91:94:22:b4:35:4f:25:3c:25:4a:f6:30:
fe:ce:31:4d:11:16:0d:80:64:f0:eb:cc:0d:90:51:
c1:76:b5:9e:53:e8:73:f4:aa:43:c6:2f:9d:2b:83:
d7:c7:e4:24:e9:02:87:7a:25:22:93:ae:51:ee:8e:
a7:8c:51:1f:40:2f:58:f6:71:d2:f7:dd:d3:9c:3b:
74:f9:6e:72:8d:98:74:37:d0:86:cd:af:e3:16:bf:
f7:9a:bb:f6:93:8b:3d:c6:fb:42:36:1a:92:ad:81:
8b:6f:d7:a1:a8:26:68:9a:36:f1:c6:b5:66:c8:94:
40:dd:4a:7f:85:56:13:a3:98:39:63:dd:08:21:01:
d5:b6:85:58:b8:fb:9c:2b:2c:a9:b3:4f:07:4f:31:
27:a6:2a:72:d0:ca:84:91:fe:3f:55:a9:6b:cb:1e:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:54:46:A6:5E:28:2A:E9:4D:67:14:B5:5D:07:7F:26:57:E7:55
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gAhURqZeKCrpTWcUtV0HfyZX51U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.94.125.0/24
85.132.240.0/24
85.132.250.0/24
Signature Algorithm: sha256WithRSAEncryption
11:68:71:1b:dd:b5:4c:6f:0d:df:8b:35:61:77:cc:2e:f1:b3:
db:aa:d7:d2:01:c1:9c:c7:2f:bc:bd:4f:9a:4f:9b:c0:4a:4c:
5a:a1:a7:27:ed:07:ed:d7:f9:7b:0d:9d:10:1f:ba:81:7d:23:
2d:da:6e:ae:45:da:d4:3b:92:65:b4:0a:1f:bb:ca:63:32:b5:
04:91:0a:6d:1a:a4:7f:62:77:3b:46:8e:8c:42:e4:00:c7:74:
eb:ba:d2:74:40:ff:ca:5b:b5:de:03:b8:5a:00:a3:a0:d7:87:
76:f0:c9:10:f8:f1:aa:ed:b7:96:45:ab:e8:fd:2c:a5:a0:3b:
6a:15:ba:4e:3c:54:f7:7b:e5:23:a5:c6:79:74:42:a0:72:4d:
c3:7f:79:9f:27:ca:0c:d4:c1:9f:7a:95:55:9a:f5:66:d0:9a:
a3:75:b8:8c:c5:68:6e:7f:6d:92:cf:e4:1e:d9:86:a0:99:78:
26:d3:be:55:81:4c:60:7e:16:be:29:a4:c5:60:47:04:74:d8:
f0:57:3b:71:f0:6c:6a:db:86:7e:42:4b:49:30:f9:fa:04:a4:
cb:2c:63:4c:aa:8b:58:ab:b7:1d:ac:7d:7f:f6:07:89:de:3a:
3f:14:ce:f9:67:aa:73:0b:8e:08:41:0b:6b:44:24:8b:f2:1b:
a2:3f:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:06 2025 by rpki-client