Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/L4ByEAU9rYG6upfxtcXaN4dDfo4.roa
File: L4ByEAU9rYG6upfxtcXaN4dDfo4.roa (raw, json)
Hash identifier: AGz1IleNmHq/Yzy+cDU7XYPCvIoSQ3vOV0gQNmxM6RE=
Subject key identifier: 2F:80:72:10:05:3D:AD:81:BA:BA:97:F1:B5:C5:DA:37:87:43:7E:8E
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 018571C301D829ADD8F7FAFCC4291DFFE133
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/L4ByEAU9rYG6upfxtcXaN4dDfo4.roa
Signing time: Mon 02 Jan 2023 09:14:43 +0000
ROA not before: Mon 02 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204739
IP address blocks: 185.242.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:01:d8:29:ad:d8:f7:fa:fc:c4:29:1d:ff:e1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: Jan 2 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f807210053dad81baba97f1b5c5da3787437e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:68:34:ce:1c:45:5f:55:11:c2:85:e3:b4:
6c:c0:d8:7e:e9:dc:4b:b2:02:52:2b:ba:35:28:d8:
b4:1a:63:21:f7:a5:cd:0d:8c:42:b1:d2:22:34:71:
cc:66:c8:64:79:43:05:95:d7:57:5d:af:44:eb:70:
7b:ac:f3:c6:96:f2:18:68:1f:5b:8f:b8:1d:82:e8:
8e:2e:4d:08:67:87:01:fd:0e:ae:5b:69:c5:f7:46:
7b:aa:2c:4f:15:36:dd:86:f7:a1:c1:c0:8a:8d:52:
d3:18:b9:8c:8b:88:88:1a:0e:ac:72:f0:fc:4d:9e:
4a:53:d3:ef:f0:8d:ec:10:04:ef:8c:13:06:d2:96:
3d:8f:0b:37:9d:ff:5e:50:97:88:16:db:8a:31:77:
d4:72:4a:de:b4:92:15:e5:54:21:6b:7e:80:fc:5c:
10:92:2e:56:e5:96:73:8d:4a:41:9b:61:79:f3:2d:
5a:7d:bc:54:d4:df:a2:53:1a:17:ba:a8:80:e0:1a:
ff:88:5e:57:6a:62:38:3c:cf:11:03:b2:43:1b:a4:
01:0d:76:31:0a:73:db:5d:49:0f:71:ab:8d:31:c8:
80:54:53:04:69:4d:22:b6:b9:68:fd:6d:90:7e:58:
5c:72:fd:a9:b6:84:39:49:44:bd:10:8c:f4:aa:3f:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:72:10:05:3D:AD:81:BA:BA:97:F1:B5:C5:DA:37:87:43:7E:8E
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/L4ByEAU9rYG6upfxtcXaN4dDfo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:0f:00:a9:fe:56:ba:46:6c:e1:40:b3:52:8d:1a:45:c8:0c:
16:95:fe:53:61:0b:94:9b:e8:37:50:30:9f:15:92:01:de:e3:
44:23:49:28:d6:05:e7:a7:9a:57:49:09:c7:40:15:5b:15:b9:
b6:51:02:ad:29:e7:7d:35:68:b3:83:5c:1e:8a:b5:a3:e2:a9:
f5:46:4a:e3:bc:f0:b0:44:8e:a9:87:60:f9:7b:c8:43:34:c8:
14:98:f3:29:2c:bb:98:30:ec:47:d5:ed:35:2e:db:1a:14:e7:
12:39:0b:02:85:94:2e:25:f6:b7:95:00:8a:97:3c:e7:bd:84:
98:8f:a9:a5:9d:db:f2:34:70:9b:16:99:4c:a5:6e:ae:d8:16:
96:2c:c9:fe:d6:d3:ca:a4:c9:52:dc:f6:49:83:9b:00:66:7c:
69:8e:f6:6f:6e:1b:b0:9e:d9:9c:78:eb:c3:2d:cd:83:8e:c8:
f7:1c:a8:4f:e6:f4:44:2c:61:ae:1d:5c:57:82:49:20:7f:3a:
e2:27:a2:b6:d1:63:ae:bc:a3:e5:a0:d5:db:56:e2:d8:db:de:
57:49:d3:de:3b:ad:cc:7e:9f:f3:98:50:76:bb:c3:d7:b9:8b:
6e:d7:24:8f:c3:9b:2d:95:d6:9c:1b:b2:2c:23:8a:3e:96:30:
ba:ea:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:57 2025 by rpki-client