Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/T41VPWaWbVJTCPhrOIFixo18Azk.roa
File: T41VPWaWbVJTCPhrOIFixo18Azk.roa (raw, json)
Hash identifier: v6lAM8ePtZLcmUnLDDi1+MmF8zWj9UyJJgxHbV1BIMg=
Subject key identifier: 4F:8D:55:3D:66:96:6D:52:53:08:F8:6B:38:81:62:C6:8D:7C:03:39
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 0189B7C91EC575FE766718905D305705158F
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/T41VPWaWbVJTCPhrOIFixo18Azk.roa
Signing time: Wed 02 Aug 2023 19:45:58 +0000
ROA not before: Wed 02 Aug 2023 19:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202124
IP address blocks: 185.235.46.0/24 maxlen: 24
185.235.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:c9:1e:c5:75:fe:76:67:18:90:5d:30:57:05:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Aug 2 19:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8d553d66966d525308f86b388162c68d7c0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:07:35:cb:28:b5:5d:7f:30:f9:93:bc:3b:
0c:44:e0:94:f3:09:38:57:4e:9c:75:27:11:e7:01:
7d:54:39:7a:30:bc:9c:56:13:f1:a5:77:74:3c:14:
b2:f6:0f:aa:17:45:de:42:4f:14:0a:63:8b:9c:92:
f9:87:ce:5e:45:dd:78:09:5a:14:be:55:5d:74:8b:
46:4c:ca:4c:99:65:7f:5b:bf:75:e2:c9:0a:01:2f:
99:20:f8:4f:64:6c:d4:b0:fd:ff:4f:c9:70:b8:30:
07:54:94:a9:10:f0:12:a0:08:ba:1a:1d:58:67:50:
ea:3c:1a:4a:a3:4b:fc:23:13:dc:55:cf:ca:0a:c4:
26:e9:a5:9e:50:58:7d:16:e6:ea:b8:eb:e2:8b:72:
44:89:c1:26:8e:43:5a:92:93:84:15:92:d5:23:f3:
3a:8f:1d:a2:4e:7a:e1:10:8d:ef:9a:5a:14:b5:96:
99:2b:a0:b4:e3:8f:35:10:eb:a9:c0:d1:a8:c0:7c:
04:0f:a1:83:2f:fb:db:25:db:73:b3:b9:be:54:a7:
cb:9c:ca:bf:5c:4a:77:e0:43:ed:a6:8f:fb:f7:8a:
8b:ed:17:52:42:a1:9b:38:fa:26:82:c4:a1:d8:d1:
f8:89:12:95:07:00:12:15:8e:de:b8:8f:13:f0:cd:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:55:3D:66:96:6D:52:53:08:F8:6B:38:81:62:C6:8D:7C:03:39
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/T41VPWaWbVJTCPhrOIFixo18Azk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.46.0/23
Signature Algorithm: sha256WithRSAEncryption
73:a8:3f:89:3d:f8:bc:11:e1:9e:36:9e:68:45:01:a7:fb:f7:
3c:2f:78:3b:d8:8e:ea:54:1e:76:3a:dd:67:db:97:88:d8:67:
d9:f2:21:c6:10:15:2b:dd:5c:ae:5d:23:ca:82:fb:cb:4b:e2:
de:ce:f0:be:20:c7:cb:a8:95:d3:80:3d:ed:36:bf:c6:1d:43:
f0:f7:43:bd:bf:15:0c:25:ea:20:b4:af:45:44:b5:69:39:b5:
37:77:d3:72:47:73:32:ea:75:18:51:34:23:24:9b:ee:8a:f3:
7f:eb:67:61:d4:c1:a7:2e:32:2c:49:c3:fd:ac:26:74:9c:06:
c8:9e:03:84:26:b6:bc:f4:3e:75:27:c2:a4:ca:b0:48:35:af:
86:ad:2f:d3:02:24:e8:81:e3:20:9f:63:76:a1:73:15:00:0b:
58:4b:f3:18:8f:7e:81:1e:f5:dd:34:5d:3f:2d:87:ff:c9:79:
a1:dd:46:b4:cc:73:5a:f4:6d:60:38:4c:4b:10:f1:5e:d2:2d:
d4:f7:60:81:00:e7:60:06:51:f8:98:3c:cf:20:7f:8b:cc:b3:
5a:c9:57:fe:07:7d:80:9c:ae:1c:1f:27:53:12:77:25:80:1f:
01:fd:c2:63:e2:68:be:49:a7:44:7d:57:e1:1d:9c:5c:a0:7e:
31:b9:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:37 2025 by rpki-client