Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SYb2p0AVi0Aq3kVgosFOapZc_E0.roa
File: SYb2p0AVi0Aq3kVgosFOapZc_E0.roa (raw, json)
Hash identifier: eLbWC3ea/FqJ/G6IKP9HyC3YeFPLvHU77EhXdu/KWwg=
Subject key identifier: 49:86:F6:A7:40:15:8B:40:2A:DE:45:60:A2:C1:4E:6A:96:5C:FC:4D
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 03253D32
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SYb2p0AVi0Aq3kVgosFOapZc_E0.roa
Signing time: Sat 01 Jan 2022 10:03:30 +0000
ROA not before: Sat 01 Jan 2022 10:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.186.212.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52772146 (0x3253d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 1 10:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4986f6a740158b402ade4560a2c14e6a965cfc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:29:32:48:54:e0:1d:90:e4:f8:de:4c:f6:
47:60:7a:7e:91:16:d8:71:54:b0:19:76:03:fc:39:
01:c5:d8:65:f8:4f:40:3c:e8:73:5f:f5:00:06:a8:
e6:8e:65:70:36:e3:00:13:76:a6:34:44:2d:3f:83:
a7:12:b7:3d:cf:2d:4a:57:9e:c3:81:61:7b:48:60:
27:73:13:cd:81:8b:e9:9a:dc:00:26:8f:f1:87:cb:
97:a6:29:73:06:bc:7b:f4:db:f7:44:86:af:38:e7:
22:b7:d2:46:a4:ef:1b:83:47:a3:61:55:21:8b:b4:
02:d9:0d:9c:be:24:39:9e:83:c6:4c:ea:65:04:e0:
30:e2:e7:e3:f0:84:d6:3e:d7:ee:93:c1:b9:c1:a8:
92:71:c0:36:c6:7d:ff:fa:da:fc:ed:48:93:c2:6b:
b3:0f:db:eb:79:4f:aa:64:7a:24:62:2e:92:44:5e:
59:ce:ce:91:bc:f3:de:6f:45:b1:3f:48:a5:41:2e:
ba:dc:20:95:54:e5:38:46:3e:1a:81:3e:8b:34:59:
07:4a:43:86:64:c8:f4:37:73:75:da:c4:19:16:b6:
56:bb:b6:1c:c0:b2:14:9a:31:57:ad:30:17:ef:53:
58:72:9f:9e:b9:05:77:21:02:b7:97:a6:93:43:04:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:F6:A7:40:15:8B:40:2A:DE:45:60:A2:C1:4E:6A:96:5C:FC:4D
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SYb2p0AVi0Aq3kVgosFOapZc_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/24
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
2d:28:75:12:24:26:88:bd:8a:f2:42:d3:fc:2a:56:50:06:71:
23:66:a0:df:25:ae:82:12:73:19:35:38:8c:88:57:bc:d6:c0:
a8:fb:3f:8a:54:c4:93:67:98:80:41:48:b3:7c:f7:2a:ec:1c:
9a:f5:3c:ec:54:a4:69:55:41:b2:6a:63:61:a8:0b:eb:e4:ec:
60:e0:52:59:47:31:da:96:52:d0:cf:a1:00:36:92:05:8c:af:
82:aa:a0:11:af:94:30:5f:48:d2:19:c6:be:dd:26:f1:c2:bd:
78:54:53:65:b9:39:18:20:e2:aa:27:ee:b3:89:80:d2:c9:e4:
bd:0e:c6:cb:3c:6a:54:43:cc:16:9c:d8:b9:ab:ac:fb:42:35:
e9:cc:a9:40:de:2e:f7:46:36:c8:69:d3:57:02:e9:f7:cc:3a:
3f:91:36:82:56:95:5c:20:dd:c0:a6:c2:74:c7:4f:80:78:e9:
17:b0:15:33:5a:c9:53:52:96:a2:13:c5:fd:38:4a:58:41:cc:
04:6a:d8:94:59:60:b7:8e:25:da:51:fa:c5:e2:46:88:50:e0:
9f:79:19:6d:46:02:17:0a:17:34:71:64:53:3b:a4:a2:ef:40:
3f:87:6a:6d:28:5d:6c:49:79:14:6b:06:1a:ad:1c:4b:f0:bd:
dc:1c:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:44 2025 by rpki-client