Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/DefKn6dFMf1f20YsurCt-B91Mtk.roa
File: DefKn6dFMf1f20YsurCt-B91Mtk.roa (raw, json)
Hash identifier: ff/1IkL419uQ+0AnViUqromrRRJ+jX+3xdksYi8zRjE=
Subject key identifier: 0D:E7:CA:9F:A7:45:31:FD:5F:DB:46:2C:BA:B0:AD:F8:1F:75:32:D9
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 0185730CADC86207357D2FE277A523C96C53
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/DefKn6dFMf1f20YsurCt-B91Mtk.roa
Signing time: Mon 02 Jan 2023 15:14:48 +0000
ROA not before: Mon 02 Jan 2023 15:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203946
IP address blocks: 185.117.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:ad:c8:62:07:35:7d:2f:e2:77:a5:23:c9:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jan 2 15:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de7ca9fa74531fd5fdb462cbab0adf81f7532d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:22:e7:c0:70:e8:51:bb:7d:07:c9:fe:fe:
92:d5:9b:c8:2d:6f:93:81:e3:cc:b0:18:b6:e7:cb:
d2:28:b0:47:b2:8e:58:31:6e:e6:61:77:2e:f4:c0:
1e:cc:f1:b8:08:77:02:4f:fc:33:c2:11:69:31:66:
f2:bd:fb:5d:ed:51:d4:72:57:cc:b2:f1:3a:cd:48:
00:1f:bf:f1:c2:b5:34:01:f5:30:f6:1e:8d:20:86:
17:35:e9:04:dd:e2:f2:3b:31:f0:f1:cd:1d:d1:33:
7d:08:e4:e1:e3:80:3d:31:af:a7:18:fb:26:0d:10:
57:41:b1:00:c5:4b:e1:b1:ba:05:a4:80:26:f9:f5:
c2:df:93:73:87:37:61:1f:6a:2f:38:9d:f6:c5:88:
ac:41:a4:51:f1:4f:e5:06:37:b0:0c:98:74:d1:fc:
45:cf:c7:3b:58:c9:87:66:71:a0:63:a1:ce:54:3c:
db:18:80:0d:ae:32:78:17:51:d1:45:c0:63:5d:e7:
c3:b6:40:59:e8:d2:c8:b3:f6:e6:c4:7c:07:33:bd:
d1:93:3d:91:6d:41:c0:8b:ed:16:2f:10:3c:78:10:
89:ef:3d:8b:42:53:1d:09:8e:e1:17:cd:81:08:d7:
b5:78:d5:6a:3c:1d:32:dd:ab:c4:e1:4d:1c:90:cc:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:CA:9F:A7:45:31:FD:5F:DB:46:2C:BA:B0:AD:F8:1F:75:32:D9
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/DefKn6dFMf1f20YsurCt-B91Mtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.133.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5f:e7:95:63:a9:f9:a5:7f:1a:b3:68:50:fc:2c:d0:b7:9f:
8d:2b:73:b8:d3:ed:ab:bc:84:2e:49:1b:23:2e:33:bf:8f:e2:
52:f3:79:d5:d7:c9:4b:44:81:d4:f8:65:65:77:25:d6:ce:79:
21:e2:1c:9b:e0:d8:2d:29:39:75:e3:a6:aa:03:c1:56:20:7f:
1c:51:c9:0b:f5:28:6a:9b:3f:9a:fc:5e:b7:5a:bd:d9:ab:f2:
68:53:61:c0:2c:67:69:a8:2c:42:30:b7:5c:db:cf:7d:da:a0:
62:b2:5e:be:b7:f3:ef:45:fe:9f:23:54:05:3d:d1:01:fc:a9:
2d:37:b0:61:c3:c8:b2:9e:1a:d2:bc:60:09:94:b6:64:21:93:
77:61:d4:6e:e1:2e:f5:dc:e4:a5:7d:0d:c5:85:4b:ea:53:3b:
d6:20:27:0c:fb:2e:19:29:5f:56:c7:6e:0e:ec:1a:d9:30:55:
1e:e1:79:c8:a3:a4:04:25:3c:e1:46:15:89:d9:c8:78:5b:4e:
ac:c1:f5:79:ca:0b:ea:b2:0a:4a:be:85:4b:d2:5c:79:2d:9c:
d3:7a:ed:e8:30:25:a8:ad:f5:f7:2c:fb:bc:94:ed:2f:6f:ee:
64:0c:cb:ff:65:8e:54:d5:53:e1:be:8c:08:0c:b5:ae:48:0f:
2c:ec:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:36 2025 by rpki-client