Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/QmkXwMPAoGZSgIwPVPicA8KkSek.roa
File: QmkXwMPAoGZSgIwPVPicA8KkSek.roa (raw, json)
Hash identifier: sAOp9M33x1XyO+oSrmy69pXd0LyVnJ/Vjfh8xZy+FkY=
Subject key identifier: 42:69:17:C0:C3:C0:A0:66:52:80:8C:0F:54:F8:9C:03:C2:A4:49:E9
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0185706734A58F5BC98976C58F3DAB033556
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/QmkXwMPAoGZSgIwPVPicA8KkSek.roa
Signing time: Mon 02 Jan 2023 02:54:49 +0000
ROA not before: Mon 02 Jan 2023 02:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201346
IP address blocks: 185.77.132.0/24 maxlen: 24
185.77.135.0/24 maxlen: 24
185.77.133.0/24 maxlen: 24
185.77.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:34:a5:8f:5b:c9:89:76:c5:8f:3d:ab:03:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jan 2 02:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=426917c0c3c0a06652808c0f54f89c03c2a449e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:fb:24:45:90:c0:2d:86:47:ed:42:ed:02:
a1:f2:51:0c:c9:06:1a:ed:c5:10:5f:5c:5b:fe:14:
20:a2:d8:bf:38:b7:e6:e5:07:8d:4f:5d:cc:31:17:
df:e4:f3:5c:bb:6b:ca:cd:ae:fb:1a:20:fa:8e:dc:
92:5b:47:73:e5:10:89:31:d7:e6:2b:2e:11:3c:aa:
fd:c0:f4:0e:8a:46:eb:7c:7d:81:b3:19:ba:ab:f0:
3b:5b:59:99:16:fb:4d:39:a5:5b:b2:fd:3c:84:ec:
7a:00:46:1e:c7:d7:3c:14:0c:70:6b:7c:87:3e:16:
1a:8e:91:23:7b:d2:ac:8f:02:bf:8b:ac:d9:d6:74:
a1:65:3b:b0:a7:d3:44:f9:a5:ef:e4:c0:6d:c3:f1:
e1:f2:5c:8a:6b:5f:a1:7f:25:15:cd:2b:5b:5e:eb:
4f:8b:e0:c2:08:1e:d4:1a:b4:de:bd:0d:74:f8:b3:
6f:33:ef:92:3e:0a:d1:f3:0f:9f:7d:ea:04:32:da:
57:59:f5:70:16:12:a6:bb:b2:f2:e5:c7:53:73:4d:
cf:ee:9f:db:d5:98:1b:01:ad:b7:f0:b8:2d:05:c3:
74:39:72:b8:b9:b3:a0:56:51:3e:c9:e0:c5:70:35:
1f:6e:78:c1:66:2e:7b:76:d0:ea:ce:0e:c8:3f:f9:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:17:C0:C3:C0:A0:66:52:80:8C:0F:54:F8:9C:03:C2:A4:49:E9
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/QmkXwMPAoGZSgIwPVPicA8KkSek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
18:bc:ff:68:28:a7:60:29:f2:2e:9b:a4:43:e8:0c:bb:36:5a:
f6:a0:f3:c2:db:1e:13:da:d6:2e:fc:ce:52:83:67:01:bf:4d:
14:76:8a:64:bd:23:16:57:8e:1a:15:71:ab:8d:d9:68:5d:6a:
bd:25:f8:f8:77:ea:b4:d3:dd:d7:19:47:02:1e:a7:b3:17:47:
4c:3f:67:86:72:cc:0b:cb:c4:f5:7c:f3:bf:4b:62:1a:9f:c0:
86:57:5d:a9:8b:9a:6c:53:cf:0f:63:ec:c3:a3:bb:ac:b5:c2:
c2:bb:e8:80:36:d9:61:2d:aa:96:d5:d7:8b:af:52:83:40:2b:
a7:4d:1f:8a:4f:1f:84:a3:67:c8:57:3c:63:99:97:da:e2:82:
5a:7c:3a:7a:b2:82:7e:40:df:f4:8e:eb:32:37:80:90:97:a2:
15:0d:b3:2c:2c:a6:c6:54:34:c6:f3:8d:cd:86:f6:84:6e:7e:
72:cf:07:44:1e:ea:93:4c:1c:e6:f0:82:7c:f7:e8:e4:35:2d:
1a:ec:fa:bc:6f:4f:d4:27:99:9a:c7:52:d8:66:f4:76:c6:94:
4e:1f:60:03:8f:7d:53:29:41:87:89:2c:74:ce:d7:c2:8f:1f:
74:36:4b:ec:ff:0e:24:3c:cd:dc:80:1f:6b:84:7f:83:e1:bf:
79:bc:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:13 2025 by rpki-client