Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/C7GSUBUfiURgc-OsHOuwAis6xPY.roa
File: C7GSUBUfiURgc-OsHOuwAis6xPY.roa (raw, json)
Hash identifier: R1zgnMJvFlTJ1utkJaZwjcBLwcakomViMUBBA/IfjOA=
Subject key identifier: 0B:B1:92:50:15:1F:89:44:60:73:E3:AC:1C:EB:B0:02:2B:3A:C4:F6
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 02CC49A4
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/C7GSUBUfiURgc-OsHOuwAis6xPY.roa
Signing time: Tue 28 Jun 2022 07:21:02 +0000
ROA not before: Tue 28 Jun 2022 07:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205334
IP address blocks: 185.193.172.0/24 maxlen: 24
185.193.175.0/24 maxlen: 24
185.193.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46942628 (0x2cc49a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jun 28 07:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bb19250151f89446073e3ac1cebb0022b3ac4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:88:03:f9:75:92:da:76:c8:8d:f8:83:9f:
ec:98:50:fe:8a:81:98:36:ef:4a:44:62:9e:8a:13:
e6:97:cf:a2:20:b0:f3:2e:b7:5c:a7:58:3d:68:14:
db:b6:db:74:19:57:c4:ab:4f:56:c4:11:d9:82:ef:
2e:85:4d:77:82:27:93:e2:1d:15:4e:18:0d:06:6c:
f0:6c:1d:bd:37:38:81:00:88:ea:9b:48:ca:f3:81:
60:f1:d9:79:7b:d7:69:c7:f5:7f:c4:d7:d4:f6:b8:
2f:45:1c:8c:57:6a:94:9e:ad:7c:0b:ff:d5:59:04:
b7:51:05:c0:bb:41:dc:f1:ea:0f:1d:26:5d:71:06:
75:f1:8a:61:2f:65:46:9d:34:3a:7c:61:79:50:06:
90:05:cd:e9:37:42:f2:6e:d3:39:8f:42:53:8f:37:
f5:96:b2:9d:7d:da:f6:68:82:71:cd:6e:d9:37:ee:
c8:76:30:44:12:bf:d3:12:ae:7c:f8:21:d5:fc:87:
5d:30:23:a3:d8:45:e2:a3:98:9f:95:5f:eb:18:95:
b6:f8:4c:f9:ab:e8:41:04:02:76:2b:13:2a:0a:57:
0c:5e:b0:bc:bb:42:99:f3:de:0f:98:93:5a:6a:1f:
6f:01:be:f0:fa:db:72:4e:09:0b:81:ac:e0:cd:93:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:92:50:15:1F:89:44:60:73:E3:AC:1C:EB:B0:02:2B:3A:C4:F6
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/C7GSUBUfiURgc-OsHOuwAis6xPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.172.0/24
185.193.174.0/23
Signature Algorithm: sha256WithRSAEncryption
14:79:62:a9:32:d7:3b:59:db:f0:68:8e:cc:83:29:b7:57:8f:
10:1e:21:47:32:7d:49:88:11:6b:94:cb:f9:a5:10:7b:80:4b:
96:54:e0:01:17:7a:9d:80:49:b9:4d:f7:5a:50:df:c7:bd:05:
91:a1:eb:47:d6:39:78:e5:a9:4a:c7:21:1f:f6:13:54:09:5c:
00:b1:f1:83:b0:eb:75:51:ae:04:b5:3c:92:ce:d4:02:0d:6e:
eb:ef:5a:19:3b:7e:bb:62:5d:74:f1:90:26:8f:00:6b:41:81:
f4:e6:c7:3d:97:7b:07:5a:19:47:ff:fd:0b:74:9d:8d:d0:79:
37:af:1a:93:d1:07:08:51:8e:7c:c5:f3:94:c6:4f:0e:c5:b0:
06:e7:39:9a:41:06:95:35:55:1b:50:2d:51:a3:57:57:72:ff:
d6:07:64:42:c1:5c:8a:45:47:6b:ab:64:98:68:ab:55:4b:ae:
1a:c7:f5:9a:06:ee:07:44:12:e8:46:a5:2e:6d:6c:ae:d8:ea:
4e:6d:e7:b7:85:f8:03:37:0d:70:5c:63:26:67:2a:e6:19:3a:
bf:0e:a2:2d:94:ac:89:b8:7b:fe:fe:f2:f9:34:20:54:80:fc:
d6:cc:41:d7:2b:e9:46:09:44:7d:1e:20:ee:98:6a:ad:9c:f7:
8d:7f:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:50 2025 by rpki-client