Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/uFNMsxlNBnu9cMijiuV7Drm6nS8.roa
File: uFNMsxlNBnu9cMijiuV7Drm6nS8.roa (raw, json)
Hash identifier: 7J19KQBQGrnUodQF/NfImg2YSlUA/1+lXP3Zf2rgHrg=
Subject key identifier: B8:53:4C:B3:19:4D:06:7B:BD:70:C8:A3:8A:E5:7B:0E:B9:BA:9D:2F
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01856ED4EFFBC7A270A8866592485C61CF7C
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/uFNMsxlNBnu9cMijiuV7Drm6nS8.roa
Signing time: Sun 01 Jan 2023 19:35:26 +0000
ROA not before: Sun 01 Jan 2023 19:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57761
IP address blocks: 185.27.219.0/24 maxlen: 24
185.27.216.0/24 maxlen: 24
185.27.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ef:fb:c7:a2:70:a8:86:65:92:48:5c:61:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jan 1 19:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8534cb3194d067bbd70c8a38ae57b0eb9ba9d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:16:1f:3a:7d:30:f0:e0:6d:88:77:79:56:
84:bf:3e:dc:12:f3:45:a8:5d:fe:98:f4:bb:bb:b4:
d5:75:ac:9b:a7:f9:56:51:27:ca:cb:6c:9b:2a:5e:
ee:46:12:35:f2:ad:24:08:0c:63:c5:bc:6b:51:ee:
d8:65:e8:db:7c:f6:95:42:39:a1:b2:bd:1e:28:09:
a0:83:7d:7c:47:c8:ee:f3:b7:d9:d6:5a:cc:b0:83:
c4:d3:25:61:40:6e:5e:8c:74:c4:bc:d1:f2:99:5e:
31:e7:34:8d:3c:ff:f9:9a:5d:5a:6a:b0:17:75:04:
81:64:b0:4b:fb:d6:3d:3d:2e:d3:a0:af:e4:27:9c:
ce:fb:06:f1:4f:64:c7:37:b3:2d:ad:ad:74:02:95:
e3:29:16:e5:f0:54:93:5c:04:f3:98:a6:91:1a:55:
d8:42:ef:a3:ee:70:4a:63:16:a4:16:a0:7a:ac:68:
f1:b4:a1:63:6b:a1:61:3a:70:b9:f7:b3:0b:9a:f3:
08:4e:18:3e:41:72:2c:5d:4e:9a:e7:73:e4:23:b0:
89:52:83:df:c3:7f:ce:aa:a6:d8:34:5c:1e:dd:d6:
71:b2:9e:89:bb:e6:2a:38:42:e8:63:99:78:49:f1:
0e:d8:36:2f:af:ad:d9:06:62:56:23:a2:d7:bd:d5:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:4C:B3:19:4D:06:7B:BD:70:C8:A3:8A:E5:7B:0E:B9:BA:9D:2F
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/uFNMsxlNBnu9cMijiuV7Drm6nS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.216.0/23
185.27.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c0:18:ed:b1:06:0c:1a:86:8e:99:8a:bc:c2:9e:ae:ab:c2:
8d:ca:c8:f9:2b:30:6d:d9:45:d2:6f:89:f7:46:8d:a3:1e:a1:
43:f9:b9:d6:ff:c4:ef:ed:16:e5:85:df:85:b3:0a:c8:e4:07:
5e:dc:6f:57:fc:6b:68:be:b4:df:0c:89:14:60:c1:90:07:24:
09:5a:19:2e:c0:7e:7f:64:6c:5c:24:a7:14:d5:4f:fa:8b:47:
52:57:b0:ad:13:8c:55:5e:a5:37:d6:d4:73:f1:b3:42:b1:69:
8c:5d:a2:55:5d:46:78:27:cd:41:e0:63:16:2b:07:59:d3:a5:
ce:3c:0e:8b:cc:a8:63:51:0c:08:6f:01:a6:ed:8c:56:10:4d:
53:2d:7f:d9:d9:8a:49:4f:36:42:08:c9:de:1e:fb:2a:04:b0:
68:72:58:7d:97:d9:af:9e:19:b4:96:5c:00:ce:a5:c3:d6:0d:
c2:c1:f7:bb:7d:7f:c8:27:81:8f:44:37:f4:56:09:cf:a8:52:
75:a4:cd:bb:15:e8:e7:8b:1b:31:fe:67:21:bb:dd:18:01:ff:
c8:dd:f2:d9:80:aa:fa:4e:58:1d:b0:bc:53:7d:3f:af:c2:67:
82:47:e6:d5:cf:f8:e5:dc:19:ef:a9:76:11:a7:7c:ea:1c:5e:
a3:0c:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:11 2025 by rpki-client