Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/vLYMjTCWSBt6nplCZO-SUapaCPM.roa
File: vLYMjTCWSBt6nplCZO-SUapaCPM.roa (raw, json)
Hash identifier: Uj9sbJYXqXC1gp0lkunIlhSd3pataXKqEtCkeu7qD8M=
Subject key identifier: BC:B6:0C:8D:30:96:48:1B:7A:9E:99:42:64:EF:92:51:AA:5A:08:F3
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 018572A7F3A35D2C1F5D926F1B02B0B4F81A
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/vLYMjTCWSBt6nplCZO-SUapaCPM.roa
Signing time: Mon 02 Jan 2023 13:24:47 +0000
ROA not before: Mon 02 Jan 2023 13:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.93.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f3:a3:5d:2c:1f:5d:92:6f:1b:02:b0:b4:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 2 13:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb60c8d3096481b7a9e994264ef9251aa5a08f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:c1:09:30:12:64:be:a0:d5:49:78:40:7a:
62:18:9e:af:42:84:5e:84:23:32:1d:8b:b3:3b:1e:
be:d5:fa:bd:55:ef:de:9a:3e:ab:09:2f:ee:62:d3:
fe:62:a1:3f:84:b4:81:77:cd:e4:28:11:d4:9b:42:
da:fe:1b:18:b8:b5:97:16:e4:7b:97:12:c4:7d:e1:
0b:ef:b4:d1:b6:58:5b:94:9c:1e:23:f3:04:84:26:
41:fa:6e:c9:1b:51:eb:10:78:11:d8:a6:8c:36:d5:
db:68:ac:92:e4:e2:96:de:ad:a2:19:dd:86:22:ba:
1a:6f:30:23:62:05:84:44:05:a0:ec:0f:b0:9a:f8:
b5:0f:a5:2b:7a:da:b2:e7:98:40:71:62:a3:b8:8f:
97:ac:5b:bc:3d:04:8e:f7:15:27:8b:ea:81:11:57:
97:c5:67:7c:e0:49:9c:fa:93:f8:95:d1:e3:50:95:
3f:e2:c4:69:bd:a5:d0:6b:04:01:9f:f4:29:1c:be:
63:ef:84:d7:f9:e8:a4:91:93:a9:57:da:58:18:1a:
ab:43:b1:29:62:f5:2f:ee:49:26:f0:df:5e:e9:87:
dd:40:2e:17:1f:a3:fc:44:8e:69:c4:29:32:a1:67:
9e:c6:e9:fc:19:73:a4:8e:3a:fc:ad:7a:e7:f9:ee:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:0C:8D:30:96:48:1B:7A:9E:99:42:64:EF:92:51:AA:5A:08:F3
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/vLYMjTCWSBt6nplCZO-SUapaCPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.213.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:04:fb:b7:ae:60:ae:85:5f:96:d2:9b:ab:38:c9:42:95:
c9:c4:0a:70:76:2b:64:74:36:9a:0d:8c:ff:64:e9:0c:6f:af:
d2:3e:95:11:e8:06:ae:d1:34:90:88:8a:3b:e1:37:c0:0b:5b:
71:d9:d8:25:a0:bf:73:c8:58:96:ea:42:a1:d3:d6:94:ee:4d:
f0:e2:4f:b0:da:07:a5:d4:da:91:cb:b5:9e:b6:0d:fc:65:43:
c2:96:50:8f:7e:8e:72:0a:6f:9a:f7:2d:af:b3:5f:b2:04:3b:
9d:c2:ad:fe:77:b0:fe:58:94:33:f9:c7:03:c0:42:8d:e3:18:
c4:d5:85:b0:cf:3c:2f:21:29:d6:ae:66:fe:63:74:14:5d:81:
b1:69:33:d5:e5:1a:e3:7f:50:af:77:25:90:d8:9e:e8:5b:fd:
b0:6b:9b:3c:7b:33:11:90:06:e9:e0:33:0f:33:e8:76:10:0e:
c3:ba:e6:ec:ba:26:f2:55:f1:4d:5c:bb:cf:ee:c1:33:29:09:
8a:54:ff:1c:90:66:c4:2c:c0:a4:b6:3a:53:e6:df:63:87:73:
54:24:55:ec:38:8a:ff:66:bc:b5:f3:3a:09:42:6b:1a:4f:87:
a8:79:fd:fb:f0:79:79:e8:c7:b6:91:c2:56:f2:61:b8:7e:ed:
eb:ae:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:05 2025 by rpki-client