Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/SIllBLrn-otZQlU1lJ3Ze27DjvE.roa
File: SIllBLrn-otZQlU1lJ3Ze27DjvE.roa (raw, json)
Hash identifier: QwVPBKTyItfl/3OvB1orm4uvBk5/RhRkXqg7Ipy1YhE=
Subject key identifier: 48:89:65:04:BA:E7:FA:8B:59:42:55:35:94:9D:D9:7B:6E:C3:8E:F1
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 01856E1D30924FC64610A2C43C1B788DFA9A
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/SIllBLrn-otZQlU1lJ3Ze27DjvE.roa
Signing time: Sun 01 Jan 2023 16:14:44 +0000
ROA not before: Sun 01 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136162
IP address blocks: 185.175.100.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:30:92:4f:c6:46:10:a2:c4:3c:1b:78:8d:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Jan 1 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48896504bae7fa8b59425535949dd97b6ec38ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:9b:72:ab:df:5a:2a:d3:60:af:a1:c4:4c:
98:60:9a:f9:72:ba:70:47:a5:34:77:44:77:16:f1:
d5:44:03:c8:15:99:c7:18:2f:29:fa:ae:64:10:e7:
7c:68:6c:78:fa:c1:53:6f:73:c0:28:7e:35:14:04:
4d:eb:ec:1b:e4:dd:b7:1d:6c:5a:c4:f1:ac:87:80:
0b:0d:c4:f1:eb:c6:c2:0d:f0:cf:80:69:f1:45:1e:
9d:0f:41:31:31:da:c9:52:53:f7:2a:95:4d:b6:10:
3f:c5:43:57:7d:96:f4:14:f1:21:e4:22:05:52:3a:
99:98:2a:0e:72:b4:f2:3d:62:b0:f1:29:c2:08:b8:
d6:11:05:2a:91:d5:28:88:07:14:c8:6c:d0:ed:60:
5b:f7:32:30:e0:76:a7:af:4a:6f:41:3b:25:13:91:
96:ce:84:42:bc:df:6e:7a:64:e4:b4:47:a2:f0:11:
f9:06:c9:89:ad:d3:03:80:89:d6:2c:e5:f4:84:16:
8f:b2:10:ef:d0:9a:9f:8d:ae:e8:76:91:7d:c5:e4:
a4:c5:48:87:34:47:61:b4:37:03:d4:9e:da:9e:ca:
3a:e8:65:66:53:9d:25:42:d7:b4:ec:c2:7f:c5:76:
27:05:75:e1:50:f3:60:3c:7c:1c:8d:a5:dc:60:41:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:65:04:BA:E7:FA:8B:59:42:55:35:94:9D:D9:7B:6E:C3:8E:F1
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/SIllBLrn-otZQlU1lJ3Ze27DjvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
72:67:ca:71:0f:5f:d9:27:76:af:c2:4a:16:69:9e:5e:0a:6a:
70:2d:01:01:b4:53:64:46:47:61:5e:80:a2:22:ec:ee:53:70:
9c:01:e0:b6:f5:98:e0:c6:93:7e:8d:d5:1d:0c:91:ed:34:5a:
2e:4b:0c:e0:67:06:a3:5b:ac:4f:56:02:b6:57:6e:e2:0d:e7:
89:b7:fb:c5:d7:b5:85:b6:90:b8:a7:1e:b2:33:c6:23:55:c2:
cd:d0:c5:87:19:fa:00:4d:aa:42:64:62:51:3b:42:1c:d8:61:
1a:86:d2:d8:6e:2f:ed:47:09:09:dc:61:59:23:5d:8d:3f:c5:
f8:c7:8c:b6:f2:69:ca:62:31:01:67:a2:66:4b:e8:e3:c9:dd:
aa:85:98:df:d6:b7:a7:06:9a:c7:ca:95:60:6d:9e:f5:d1:17:
24:b4:09:1c:1f:1b:d2:34:8f:85:04:41:b3:48:ca:bd:cb:28:
32:79:1e:e6:4e:82:f6:94:98:f3:ed:a8:72:99:ec:75:ba:cc:
8d:12:68:b2:10:07:d4:19:c5:d3:6a:f7:48:31:9f:bb:ed:13:
11:e1:a8:a1:72:40:c0:cc:6e:04:3f:7b:67:d1:f8:d7:2a:f1:
e7:9a:72:c8:9c:bf:5f:71:f3:72:af:19:c4:fd:90:c5:a9:41:
f1:40:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:25 2025 by rpki-client