Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/dKr1JNMzi432KOr5VON2l1VZiys.roa
File: dKr1JNMzi432KOr5VON2l1VZiys.roa (raw, json)
Hash identifier: Rn/gAqIAHaUFx+uf+kPlEaK9DimjYSu4/rh957teY9E=
Subject key identifier: 74:AA:F5:24:D3:33:8B:8D:F6:28:EA:F9:54:E3:76:97:55:59:8B:2B
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 0183F9F870E047AEE471FDC87A98287F6FDF
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/dKr1JNMzi432KOr5VON2l1VZiys.roa
Signing time: Fri 21 Oct 2022 09:55:51 +0000
ROA not before: Fri 21 Oct 2022 09:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60845
IP address blocks: 185.113.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f8:70:e0:47:ae:e4:71:fd:c8:7a:98:28:7f:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Oct 21 09:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74aaf524d3338b8df628eaf954e3769755598b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:b8:05:a4:0a:2b:b1:76:fd:ed:7f:be:fd:
79:30:0d:37:15:81:1a:1b:20:d5:42:6b:56:9c:a8:
e0:d2:e7:77:9f:bd:61:d6:f8:bc:c2:18:f4:da:da:
89:6b:51:aa:5e:a9:02:a0:b3:8a:54:f3:f4:e8:89:
e9:8d:0c:65:7d:6a:a3:85:53:21:4c:ff:f5:ff:ba:
02:4a:6c:e4:8e:09:cf:79:b4:8a:13:ed:cc:da:7f:
2d:ef:d4:4c:77:cf:40:fd:c3:43:f5:f1:e9:21:af:
a8:fe:be:1b:86:68:fd:1a:3f:07:71:85:70:28:cd:
6a:dc:ce:6a:2c:d9:2f:5b:9c:d4:b6:6a:50:44:a6:
a0:5c:b7:d4:bc:d9:30:6f:0c:fe:c7:df:fc:25:7c:
21:22:bb:df:56:86:24:90:ed:c6:f3:0a:fd:ad:50:
cd:c9:c2:01:3d:7b:e2:19:45:14:f0:41:b6:2e:29:
67:b5:22:99:eb:16:52:00:95:c3:fe:ab:c8:6c:c0:
d6:45:ad:66:e3:6b:29:be:0e:f2:50:d2:6d:ab:72:
b2:11:53:36:24:68:83:ed:fe:f2:65:18:5f:41:40:
54:94:35:48:82:d5:80:4d:84:47:a4:72:89:42:b5:
f2:70:d6:d1:90:2d:97:77:05:4e:3b:8e:38:41:37:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:F5:24:D3:33:8B:8D:F6:28:EA:F9:54:E3:76:97:55:59:8B:2B
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/dKr1JNMzi432KOr5VON2l1VZiys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
45:88:91:0d:06:a6:17:0c:3e:82:1e:56:f7:81:1a:6e:cb:c8:
45:30:fe:ca:4c:fe:c7:f3:fa:41:ad:b8:98:8d:90:05:bb:bf:
93:0b:03:43:c1:fe:4d:0f:aa:a1:fc:ad:7f:c7:d3:8b:1d:2a:
60:56:8a:58:a8:4a:d6:bb:4d:30:b9:32:59:2a:f2:64:58:fb:
1d:2f:29:d8:ec:cb:76:0d:08:ad:1c:ee:f8:e6:8a:3e:50:86:
99:b5:c7:ef:70:8c:b9:43:57:21:a6:e0:f2:f0:6c:a9:15:1f:
81:d8:fe:e0:dd:59:11:e1:be:07:45:27:a3:0f:23:21:c4:71:
42:77:b5:95:6c:86:23:e9:b6:7b:c5:4d:e3:5d:d8:4c:ca:b3:
61:e6:4d:f7:e5:6c:f6:b3:33:84:5f:73:49:a5:18:c8:6c:e2:
a3:ae:dc:3e:97:8e:bb:6a:7f:11:a2:68:6b:e5:f2:b4:6c:d0:
36:33:31:cd:13:87:d9:ff:71:17:0c:6f:ce:50:1f:a3:b5:b7:
aa:b4:91:ab:67:ea:cc:81:3a:4d:51:6f:2d:28:cb:32:f0:97:
29:ea:64:d6:16:45:4d:50:36:3e:38:b8:7f:c0:7d:b2:76:a8:
7a:e5:1c:c2:fa:e2:ec:7a:d7:88:6d:f5:6d:c9:56:8d:79:52:
6a:dd:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:19 2025 by rpki-client