Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/l8qdz3pcA3RU6uMYNEtym42UvTE.roa
File: l8qdz3pcA3RU6uMYNEtym42UvTE.roa (raw, json)
Hash identifier: YUY32pspcRuHH5zyfG4rsEUPwtG8eDw+oW0xyveAFTU=
Subject key identifier: 97:CA:9D:CF:7A:5C:03:74:54:EA:E3:18:34:4B:72:9B:8D:94:BD:31
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 0D090AB8
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/l8qdz3pcA3RU6uMYNEtym42UvTE.roa
Signing time: Sat 01 Jan 2022 13:54:15 +0000
ROA not before: Sat 01 Jan 2022 13:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58273
IP address blocks: 185.217.156.0/22 maxlen: 24
2a0b:cac0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218696376 (0xd090ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Jan 1 13:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97ca9dcf7a5c037454eae318344b729b8d94bd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:40:f2:1e:71:4f:df:df:ea:85:34:4b:46:
04:bd:69:cf:8b:ef:d2:dc:8c:7e:47:ad:eb:5b:f6:
ff:29:fd:0d:10:09:39:36:3e:52:79:4d:47:be:3a:
9c:33:0f:55:e5:33:7d:fc:e8:7f:77:be:47:6f:c5:
fa:6d:6f:f3:d9:b9:b0:62:fc:b8:65:36:30:f5:07:
ea:02:1c:13:b0:b3:6a:f5:89:cc:8d:b7:82:1a:33:
e9:57:a9:44:9a:ce:fc:bd:54:15:a2:b4:c5:89:a5:
0e:f1:11:69:54:a2:70:18:4d:35:51:22:5d:af:73:
e4:00:74:e9:9d:35:ec:d5:a3:aa:33:6c:5b:b2:21:
3f:8b:41:02:2d:08:50:d5:ab:91:fb:1a:5b:5c:48:
0c:bc:b9:cc:5f:92:e9:a9:7a:4f:a9:f2:d9:4c:ac:
cb:fc:d3:28:54:63:5d:a2:df:76:34:f8:5f:3f:b5:
ba:c5:c3:bc:48:01:0d:54:96:12:06:99:5f:0d:2a:
87:41:78:55:35:af:e2:a4:db:fa:6e:9d:ed:52:37:
10:77:19:67:38:2f:e2:14:b4:f2:bc:65:6b:44:9d:
88:65:e7:ae:68:13:24:3a:ac:2a:15:85:57:c0:ae:
ae:16:c2:62:7e:88:6c:9a:ba:af:6b:82:6c:2b:82:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:9D:CF:7A:5C:03:74:54:EA:E3:18:34:4B:72:9B:8D:94:BD:31
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/l8qdz3pcA3RU6uMYNEtym42UvTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.156.0/22
IPv6:
2a0b:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:e4:a8:a1:96:30:84:7a:5d:70:2d:7c:9c:20:99:20:2f:4d:
e3:2d:a7:20:9e:c6:e4:58:91:33:ad:9c:19:67:d1:3c:c7:df:
d2:7f:9b:60:7d:3b:89:37:a6:4f:21:64:ea:76:5b:61:4f:e0:
61:89:78:ae:0f:21:e3:bd:4d:18:5d:0d:80:30:f4:2c:37:2a:
85:77:76:91:e9:23:d5:72:6c:cb:de:1f:be:6f:62:bd:0e:4b:
03:d0:29:56:56:70:75:54:4f:8a:59:8f:06:bd:d6:97:65:17:
c4:36:95:3b:4f:87:9f:e9:ad:57:dc:8c:7b:94:6a:a8:0e:c0:
f7:9a:cc:65:d3:b3:05:4f:89:64:f8:eb:a7:95:b4:da:da:96:
5e:81:81:c3:f5:e8:b1:8e:5e:64:87:35:03:41:b8:3c:1c:70:
2d:32:6d:04:97:11:e9:73:71:78:f1:09:63:73:59:cc:ac:27:
c1:14:ca:80:5e:3f:cf:70:6a:2e:c0:8c:3f:03:5f:db:d4:8d:
55:1a:9b:8c:9b:8e:91:05:5a:b3:7c:0e:a9:e5:c8:1f:54:cf:
36:69:36:31:de:71:4a:f1:58:24:3d:58:18:98:ee:04:15:a7:
71:51:84:86:d4:1d:1f:d3:99:c4:81:a4:91:ff:a3:9c:f9:77:
b4:dd:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:12 2025 by rpki-client