Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BH7vlMafswIygN7rGkM54E0YjYs.roa
File: BH7vlMafswIygN7rGkM54E0YjYs.roa (raw, json)
Hash identifier: POfmtX4HvMVr/ClEUgYz2Hjd7Wb0zlDQpAqqF3BHr88=
Subject key identifier: 04:7E:EF:94:C6:9F:B3:02:32:80:DE:EB:1A:43:39:E0:4D:18:8D:8B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 018572280FCE1FB1DB2B4DBA110C69F64B94
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BH7vlMafswIygN7rGkM54E0YjYs.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200547
IP address blocks: 185.238.149.0/24 maxlen: 24
185.238.150.0/24 maxlen: 24
185.238.151.0/24 maxlen: 24
185.238.148.0/22 maxlen: 24
185.95.237.0/24 maxlen: 24
185.95.238.0/24 maxlen: 24
185.95.239.0/24 maxlen: 24
185.95.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0f:ce:1f:b1:db:2b:4d:ba:11:0c:69:f6:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=047eef94c69fb3023280deeb1a4339e04d188d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:5a:a4:83:79:2e:5f:9b:54:71:69:a5:7e:
f9:b0:18:45:b4:6d:42:eb:80:a6:f6:63:3f:ed:21:
b1:91:a9:6e:9c:07:6a:ce:b8:5a:27:bd:2e:7c:d9:
aa:34:f2:6a:7e:ed:f0:1a:80:a1:6a:97:07:5b:40:
51:ba:5e:ad:06:ed:b5:0a:dd:ee:a4:3b:e1:03:50:
4f:7f:91:f8:ac:54:c4:6f:c7:05:99:6b:a8:75:b3:
5c:ed:9d:16:60:22:6b:e7:34:6f:54:80:89:d4:e9:
b2:1f:a0:d6:e6:56:21:91:de:8c:a3:72:34:5a:53:
b3:52:ea:d5:ff:59:8a:c6:28:b8:45:79:49:2a:ad:
c5:f7:40:d5:17:d9:d2:cb:82:64:b7:56:ac:21:7f:
f8:5f:b3:1d:c6:10:c0:ba:74:c9:79:a2:c5:76:a9:
d7:a6:0a:89:e4:45:4f:f7:7a:fa:02:46:a2:ff:5a:
b3:49:d2:28:69:b4:7d:bf:06:b9:94:5e:04:ff:68:
3f:b6:a7:ae:2a:76:31:58:b2:54:19:47:b5:ab:d7:
09:a2:7e:0e:16:2f:1c:59:68:d0:cd:5f:b6:3d:3a:
99:10:fe:69:23:26:f4:d0:bc:c1:6a:99:4c:a1:d2:
17:c2:52:93:2a:78:80:71:e1:d0:50:4f:b9:48:d3:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:EF:94:C6:9F:B3:02:32:80:DE:EB:1A:43:39:E0:4D:18:8D:8B
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/BH7vlMafswIygN7rGkM54E0YjYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.236.0/22
185.238.148.0/22
Signature Algorithm: sha256WithRSAEncryption
23:9b:a6:f6:7a:96:8f:33:cc:ba:dc:ad:95:36:ea:d2:5a:e3:
34:8e:d3:15:0d:b5:77:30:e6:ad:30:5f:de:bc:84:01:c1:80:
58:e3:a5:a8:ff:86:04:1b:82:d5:18:73:88:10:87:90:0a:36:
4e:10:18:52:13:73:bd:26:8b:d2:b1:d3:5e:d5:c4:8e:2f:c4:
a9:7a:a7:22:4a:ca:7f:d5:4e:1d:00:bc:bb:8a:7d:11:35:c0:
95:bb:0c:80:c4:8c:01:68:18:87:a7:c7:6d:4d:75:89:9d:5c:
5a:22:9a:5c:6d:d8:f1:ed:f6:ec:bb:83:48:07:79:16:21:60:
9b:55:69:cd:4c:68:ff:0d:59:fa:53:bc:0e:e0:3a:45:2b:04:
12:6a:4b:e7:db:5e:cd:e6:44:1f:3b:d6:cc:4d:43:39:e2:a9:
af:e8:1b:ef:48:b2:c9:e5:f2:5c:65:ea:78:72:a4:ed:8a:37:
7c:6b:9b:6e:18:eb:de:01:6d:c9:00:e9:df:a8:cc:dc:56:72:
fc:46:a8:c9:fd:4d:2e:0f:90:f8:82:b8:83:ee:b9:57:18:be:
e5:4f:78:5d:09:65:b4:19:43:f5:79:1a:24:a7:40:68:63:22:
1a:d3:95:fe:2a:6a:ae:5b:97:63:46:27:a7:29:2a:b5:a4:5d:
11:09:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:36 2025 by rpki-client