Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/1-soIQhzIBlVM9auiQmsxU9YbWxo.roa
File: 1-soIQhzIBlVM9auiQmsxU9YbWxo.roa (raw, json)
Hash identifier: phiHbtSfwFDJ8QXHYN/YN81CxoEoFeY9czvNxA3yuYg=
Subject key identifier: FA:CA:08:42:1C:C8:06:55:4C:F5:AB:A2:42:6B:31:53:D6:1B:5B:1A
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 018571553EC19D3886CD6B0EA1A59D2407FD
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/1-soIQhzIBlVM9auiQmsxU9YbWxo.roa
Signing time: Mon 02 Jan 2023 07:14:50 +0000
ROA not before: Mon 02 Jan 2023 07:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64414
IP address blocks: 185.166.112.0/24 maxlen: 24
185.166.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:3e:c1:9d:38:86:cd:6b:0e:a1:a5:9d:24:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jan 2 07:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faca08421cc806554cf5aba2426b3153d61b5b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:e3:15:1b:43:0c:f0:a5:70:23:30:44:23:
95:78:fc:29:e3:71:a9:09:bf:50:ca:16:d4:0a:9c:
0d:ec:0c:65:68:01:96:18:bd:20:94:1c:25:06:3e:
8c:1a:6b:cf:d7:56:fa:45:42:6f:74:61:5f:b1:34:
fd:86:16:43:d5:78:06:d8:ae:dd:b6:64:45:ac:6f:
92:c9:d3:a6:20:43:2f:3a:97:d2:fc:24:9b:30:ba:
84:39:a9:e0:fa:49:6f:d3:ed:db:40:69:08:68:74:
6b:40:66:0a:3b:b3:b4:cf:be:88:42:a2:01:4d:38:
de:c3:d2:c7:21:4b:17:fc:bc:5f:6a:78:ac:23:1b:
58:d5:f4:b4:94:4d:1f:bd:5f:82:00:4f:ed:6d:ac:
34:eb:c5:2e:3f:3d:79:d7:0a:2c:5c:0d:5b:03:a7:
44:81:b2:8c:4b:f0:f9:4f:6f:58:f9:89:d8:33:ce:
e2:bf:10:69:b4:6c:aa:5e:0f:c4:f6:71:b1:d8:91:
a9:d9:60:60:2c:ee:13:87:f0:b8:63:81:77:1a:da:
4f:90:00:34:9e:8e:a9:38:5d:2e:d0:46:0e:46:06:
2d:7a:e2:e7:df:51:a4:56:18:fd:89:81:40:d7:0c:
ac:61:19:ce:6d:11:26:8e:be:df:18:af:99:6f:f2:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:08:42:1C:C8:06:55:4C:F5:AB:A2:42:6B:31:53:D6:1B:5B:1A
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/1-soIQhzIBlVM9auiQmsxU9YbWxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.112.0/24
185.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2e:8d:1a:8a:9e:bd:44:89:c6:8b:88:ef:bc:c0:94:2a:19:
43:fc:c6:9f:1c:5a:5f:1e:69:3e:61:75:92:f4:8b:91:00:0f:
17:b9:4f:67:f9:b7:8b:ac:1b:7f:c1:f3:10:dd:4c:a5:00:ac:
f4:6e:98:c5:bb:35:e6:3a:dd:9b:88:2b:d9:e0:cb:fe:e0:35:
f3:3f:51:ec:e0:00:e2:af:7b:6a:3b:b5:fa:20:6a:2d:03:dc:
40:ea:0c:00:c5:1d:2c:e2:47:2b:54:7e:a4:b0:ab:6e:b7:44:
c9:a1:eb:fa:5f:ce:d0:da:7c:87:e9:25:70:28:04:a1:54:83:
f8:77:66:67:5b:0d:f8:76:e5:d0:7a:5e:82:48:f9:7f:3b:15:
06:71:30:52:39:c8:f1:84:3a:5a:81:a8:a3:79:79:ad:d1:06:
aa:fc:a1:f2:8d:9a:6e:1b:67:a8:6b:9e:b3:f2:f6:2f:60:e0:
ba:2b:24:50:ef:a7:4b:d0:ea:fa:fd:d9:9a:25:cd:5a:81:4d:
26:45:47:88:1d:9f:65:37:5a:83:e8:62:6c:5f:a4:9e:1b:8b:
a5:c3:e0:0c:23:ad:23:6e:d5:1c:e8:dc:eb:f9:7f:9d:8b:08:
2c:77:4d:9f:fa:ad:f9:b5:c5:65:92:9d:b9:ce:c4:e2:4b:b9:
21:fa:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:10 2025 by rpki-client