Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1Skw9fpJxXGHVL5nVcVOf9HAbXI.roa
File: 1Skw9fpJxXGHVL5nVcVOf9HAbXI.roa (raw, json)
Hash identifier: IfBVFkGraPLq17bgxnLor9/Is3iZb5ANv4bFFUwC1hU=
Subject key identifier: D5:29:30:F5:FA:49:C5:71:87:54:BE:67:55:C5:4E:7F:D1:C0:6D:72
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10AB5B9F
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1Skw9fpJxXGHVL5nVcVOf9HAbXI.roa
Signing time: Sat 01 Jan 2022 13:00:41 +0000
ROA not before: Sat 01 Jan 2022 13:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211406
IP address blocks: 185.62.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279665567 (0x10ab5b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d52930f5fa49c5718754be6755c54e7fd1c06d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:1c:2f:77:05:90:34:7c:c6:78:bd:75:2b:
a9:ba:13:69:40:d7:84:1c:65:b4:a2:d7:2c:e8:0d:
85:f8:ac:ef:b2:07:94:9a:25:70:b5:e0:f6:c8:10:
c7:7b:fb:33:68:c3:44:3b:85:74:46:c6:1d:bb:43:
14:96:9a:7a:01:66:74:40:df:96:60:d6:20:81:c8:
eb:9b:4d:73:0b:c2:34:25:ba:fb:22:b8:e3:10:15:
a9:53:d0:95:48:ea:ae:20:0d:1a:4b:88:2e:3f:73:
8d:cc:e7:83:b8:f1:8e:30:a1:22:e4:68:03:c3:91:
95:83:9e:38:db:a3:a9:63:3a:78:06:c5:36:30:51:
56:0e:05:74:8d:d6:10:a7:a2:7c:d0:41:da:35:27:
d1:d5:be:da:3f:17:91:0f:b2:f1:d3:dd:53:74:16:
41:4c:b9:b0:e6:67:42:f5:f9:b5:09:09:5b:1f:1b:
89:7a:a3:f2:ab:81:58:01:81:43:74:b3:68:80:53:
aa:7f:af:42:f0:c1:dc:1c:e3:c3:10:55:73:80:3e:
20:f5:45:37:21:95:aa:08:5a:3c:3e:f2:d6:ee:04:
89:a3:d4:6f:db:5d:28:a4:4e:ce:95:1d:15:7b:f0:
ea:60:57:f9:18:6e:d0:60:09:6d:0a:e8:dd:d4:40:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:30:F5:FA:49:C5:71:87:54:BE:67:55:C5:4E:7F:D1:C0:6D:72
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1Skw9fpJxXGHVL5nVcVOf9HAbXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.101.0/24
Signature Algorithm: sha256WithRSAEncryption
41:11:fd:aa:4c:89:06:8a:23:07:04:01:bf:54:71:2f:49:cb:
26:83:f8:6d:d2:20:b4:28:52:12:74:cd:99:d5:5f:a8:85:f3:
c8:68:93:7d:9e:4e:21:56:f6:49:30:f5:23:b9:ca:22:77:7c:
0f:e5:6f:35:6f:13:f2:d6:9d:96:e0:88:9e:a6:d6:96:a8:56:
a6:78:1e:26:d0:72:8a:f1:ae:64:b2:9f:91:b2:f0:ec:4c:5e:
7a:8e:6a:80:cd:00:3b:41:3b:80:49:b4:7c:34:4c:b5:45:36:
f7:af:a0:84:5a:b0:26:67:95:74:81:6b:81:b4:06:9a:89:27:
83:96:70:e5:8c:34:e6:ca:bf:23:f4:94:07:1f:e6:57:22:b5:
6f:33:fb:24:17:20:6c:a4:fc:ee:04:50:a9:64:60:fe:df:c7:
8a:31:6d:f5:86:c3:92:ed:84:1b:f7:45:09:9b:1a:4d:d6:9a:
b8:71:d6:2f:06:a9:36:d1:04:89:4d:fa:0f:3e:81:ec:36:a0:
76:74:0c:86:cf:1e:bb:49:7a:d1:e7:ad:38:70:a4:fc:46:13:
33:64:40:92:6c:ee:09:d8:3a:2f:1b:da:66:f4:71:92:bb:0f:
78:b5:a4:39:9d:a0:15:1c:1b:64:8f:cc:e6:47:a1:1a:da:c1:
66:a3:84:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:34 2025 by rpki-client