Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/T9uteztTf2wcBPEdgGkM_1QFd8g.roa
File: T9uteztTf2wcBPEdgGkM_1QFd8g.roa (raw, json)
Hash identifier: aecq/yRJU20wHiv9/P/IkK1gbPNyPHLs4c4Jom8+VUo=
Subject key identifier: 4F:DB:AD:7B:3B:53:7F:6C:1C:04:F1:1D:80:69:0C:FF:54:05:77:C8
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 03AE0AD8
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/T9uteztTf2wcBPEdgGkM_1QFd8g.roa
Signing time: Sat 01 Jan 2022 12:58:20 +0000
ROA not before: Sat 01 Jan 2022 12:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44243
IP address blocks: 185.178.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61737688 (0x3ae0ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 1 12:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fdbad7b3b537f6c1c04f11d80690cff540577c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:71:5f:9e:a0:c2:fd:43:c7:6f:2b:81:69:
b7:14:52:8f:77:1d:6a:3b:3e:11:c5:ec:60:13:2e:
31:d7:57:19:6d:ee:bc:fd:5e:23:05:0d:a0:7f:55:
89:9d:b5:2c:aa:17:a3:88:02:ec:f3:7d:09:cd:29:
e1:89:88:5d:02:3d:30:ee:55:05:32:8a:22:09:97:
ea:6d:c6:bc:03:f3:1e:d5:99:73:e1:1e:d3:ea:be:
a8:3d:2a:1a:6c:34:2c:84:45:fc:3a:0e:8e:c8:47:
37:4f:61:96:7a:83:e1:a3:fc:bb:02:e9:6a:a1:c8:
c9:64:52:d9:2d:bb:fb:4e:60:c1:18:9e:2d:10:41:
e1:bd:63:0b:b7:34:f1:80:6c:c5:b6:0d:dc:18:11:
77:58:41:ef:e1:f4:cf:6a:2c:d2:42:3e:f8:2c:4e:
d9:a8:f0:8c:d1:82:8a:06:8b:78:52:3f:8f:fa:36:
17:3f:99:ac:a0:27:04:33:14:6b:47:7b:7e:02:53:
93:dc:f3:ef:53:c5:ea:0d:d0:71:44:5b:6d:32:0b:
da:26:74:ea:a0:91:4f:ec:8f:9b:f6:0b:59:02:73:
b4:16:e8:a5:c3:34:46:46:4c:41:56:36:60:42:30:
84:95:ff:2d:fb:fb:76:62:4e:4d:93:d8:b6:b5:40:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:AD:7B:3B:53:7F:6C:1C:04:F1:1D:80:69:0C:FF:54:05:77:C8
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/T9uteztTf2wcBPEdgGkM_1QFd8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.104.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d3:2e:93:43:46:76:90:86:23:4c:d9:3b:d7:70:e8:fc:2e:
c1:8c:58:bc:0e:bd:e2:91:a3:97:3f:d4:74:95:71:8b:e6:36:
e0:e5:16:50:59:4e:41:20:cf:5e:11:d8:98:df:37:8f:d2:a3:
1c:d3:d9:6b:77:a9:c2:d9:96:89:4b:6d:f8:dc:e3:5e:2c:9a:
42:fb:77:5f:18:a1:50:ee:e0:63:18:b5:ae:82:f0:87:1b:4b:
a4:a5:6b:f6:ab:84:60:83:e1:76:25:a6:fa:da:a6:d2:43:28:
8f:91:2a:1b:2f:5d:9b:3e:e2:df:4a:a2:af:f4:28:aa:be:30:
cf:93:1c:c8:6a:25:d4:78:51:ca:ea:07:20:05:59:6b:52:aa:
41:47:d8:09:37:6a:9f:a5:0c:2c:82:b4:91:96:10:48:85:4f:
d3:11:f8:a0:a2:62:05:22:47:0c:23:34:ca:b7:80:19:04:3d:
cb:93:42:f6:e2:b4:0b:71:61:a1:83:6d:ec:63:e1:c6:d4:6c:
60:a5:69:8e:f9:de:61:49:3b:9b:9a:a0:f5:a5:47:7b:d0:23:
1e:fa:30:99:3d:cf:fd:b4:af:41:88:18:55:aa:1f:cb:f5:53:
98:60:d3:74:47:f1:96:0a:26:01:11:05:ed:7a:56:2b:6b:4e:
37:85:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:58 2025 by rpki-client