Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/i0HDxoPKK-ahKVEJ1uGDlHln7bE.roa
File: i0HDxoPKK-ahKVEJ1uGDlHln7bE.roa (raw, json)
Hash identifier: b9l8b3m6iMfdbpBqwe33AD6igwZmu8FJQiU/l3GOVWE=
Subject key identifier: 8B:41:C3:C6:83:CA:2B:E6:A1:29:51:09:D6:E1:83:94:79:67:ED:B1
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 01385A38
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/i0HDxoPKK-ahKVEJ1uGDlHln7bE.roa
Signing time: Sat 01 Jan 2022 12:03:45 +0000
ROA not before: Sat 01 Jan 2022 12:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3352
IP address blocks: 185.214.168.0/22 maxlen: 22
185.193.172.0/23 maxlen: 23
185.193.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20470328 (0x1385a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 1 12:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b41c3c683ca2be6a1295109d6e183947967edb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:9f:07:ca:c4:c1:ca:88:9f:3a:17:b2:be:
dc:25:07:dd:b1:3f:ba:a9:92:d9:9f:e8:4c:02:b9:
a2:5e:12:65:2e:7c:e1:1e:d1:36:cf:d5:2f:b6:91:
4c:91:c9:f7:2a:3f:cb:fd:19:41:ce:d7:f0:d4:ca:
a9:82:bd:0b:0c:61:34:0f:7b:d0:7e:26:37:a8:14:
bb:7a:b3:a8:81:41:09:75:c6:4a:65:e6:55:a0:76:
e7:bd:ba:d0:8e:bc:2c:62:9f:e8:db:84:f1:0a:88:
6e:8d:93:2b:b5:4f:29:7b:16:3e:54:21:32:9d:11:
5f:02:ec:66:14:dd:78:e1:1a:62:a9:b4:be:8c:7a:
ee:07:cf:8d:92:7e:16:ac:7f:9f:15:44:78:44:4d:
25:a2:06:3b:22:2b:dd:90:22:59:04:c6:5b:b4:42:
2c:d9:d9:cc:92:a2:e9:4e:b4:3a:37:75:51:03:e1:
c1:42:72:37:4e:17:4e:1b:e6:97:7a:0a:49:d7:c7:
19:a2:8c:bd:fe:5a:08:22:81:6f:8f:62:46:c2:5d:
1c:26:96:c8:ec:0c:e1:59:ac:df:30:63:15:54:17:
0f:71:38:bb:71:9d:ac:e0:44:e4:a4:98:37:b6:bb:
88:3d:e6:6c:d3:cf:c3:96:8a:e5:28:32:d9:61:58:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:C3:C6:83:CA:2B:E6:A1:29:51:09:D6:E1:83:94:79:67:ED:B1
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/i0HDxoPKK-ahKVEJ1uGDlHln7bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.172.0/22
185.214.168.0/22
Signature Algorithm: sha256WithRSAEncryption
53:90:3b:ad:00:49:d1:c8:ff:78:d1:24:47:f1:f3:d2:4d:6e:
66:71:60:2c:42:fb:63:56:30:2f:7a:c1:cc:05:33:ce:1d:a3:
f5:68:7d:85:e2:15:fe:46:c1:c9:1b:f7:40:a8:4f:38:0b:bf:
4c:58:19:b8:40:94:f6:a8:81:ea:d5:1c:42:76:f4:09:3a:5c:
7a:8b:36:83:a5:39:52:4d:b7:22:73:ca:84:ac:b4:3f:f5:22:
be:d9:b1:0e:4f:c8:b8:0d:6f:19:ea:25:f1:ab:fb:e7:ec:e8:
c4:15:c7:e8:c7:b0:88:a7:81:da:ac:ef:af:cf:21:5e:1a:3c:
a0:68:ad:b2:ae:e4:a3:4d:fc:51:e3:c5:2c:51:bf:60:31:35:
3f:2e:f0:da:02:ef:cb:0b:79:a7:3f:a8:5c:cc:02:ec:85:6f:
bd:a7:09:f7:34:f2:9e:94:ed:35:90:3c:6d:c1:20:04:fc:d7:
89:97:22:60:a3:e2:fd:42:be:1f:de:76:3b:a4:fb:a0:a4:75:
e3:42:64:f6:96:6d:7f:67:6e:03:d6:4d:aa:e8:5d:74:1d:99:
cd:79:db:b1:42:18:57:fd:18:47:84:8d:6d:53:ff:36:d7:0b:
6f:09:d1:61:f5:4c:70:ac:4a:5a:04:ee:9f:c3:b3:91:07:23:
65:3d:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:12 2025 by rpki-client