Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/aeJ5unxddgzeGmPWnJtpu-yCsSg.roa
File: aeJ5unxddgzeGmPWnJtpu-yCsSg.roa (raw, json)
Hash identifier: Cco3Dw0WE/yYav79pN8R328XXJo8RV1kV62XtVROwLw=
Subject key identifier: 69:E2:79:BA:7C:5D:76:0C:DE:1A:63:D6:9C:9B:69:BB:EC:82:B1:28
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189B6B6774F24115274924BC8A29B728F42
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/aeJ5unxddgzeGmPWnJtpu-yCsSg.roa
Signing time: Wed 02 Aug 2023 14:45:58 +0000
ROA not before: Wed 02 Aug 2023 14:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.188.141.0/24 maxlen: 24
185.188.140.0/22 maxlen: 22
185.121.224.0/22 maxlen: 22
185.121.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:b6:77:4f:24:11:52:74:92:4b:c8:a2:9b:72:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 2 14:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e279ba7c5d760cde1a63d69c9b69bbec82b128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:16:2d:ca:cc:84:34:a9:5b:64:e9:20:93:
ae:b8:46:39:7a:89:12:98:a5:db:af:14:de:93:ed:
31:f0:f3:a6:4e:d6:53:5d:df:7e:cc:fa:36:a7:b8:
f6:f5:c9:cc:ca:a9:ec:90:95:58:c8:f2:40:eb:73:
a6:c4:c3:ef:26:ea:12:f4:99:ac:06:26:20:a8:9c:
1d:78:7a:38:bd:7f:72:a0:59:0d:4f:98:3e:e3:8d:
d8:83:ba:c9:e7:dc:b4:31:27:ec:72:15:a8:06:fb:
4c:7f:5a:8d:f5:70:aa:53:90:58:31:4f:54:e2:52:
db:0d:da:6b:5f:1c:a0:b4:73:42:03:83:b6:2f:4f:
cf:55:4f:46:02:89:e9:44:6c:63:c2:8d:9e:cf:df:
ee:57:09:a6:99:76:39:ab:f6:49:e1:b4:c4:96:91:
47:37:6c:88:99:f6:6b:0e:c9:24:a1:cb:40:56:e6:
24:c3:66:13:3b:4c:cc:09:b7:de:53:91:05:8c:73:
15:21:85:7e:99:d6:0f:3c:4c:49:49:8a:7f:3f:60:
9b:9c:53:60:af:a4:92:fe:6d:81:34:00:29:16:3f:
bc:32:46:26:b2:2b:f0:3d:45:3b:53:91:18:ea:a3:
fd:07:aa:e4:0c:04:63:ef:18:1e:89:9b:7a:33:10:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:79:BA:7C:5D:76:0C:DE:1A:63:D6:9C:9B:69:BB:EC:82:B1:28
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/aeJ5unxddgzeGmPWnJtpu-yCsSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/22
185.188.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:ae:e0:9d:45:50:01:b9:ce:25:82:c7:5d:6e:e4:15:17:06:
65:d6:3d:61:5c:84:84:d9:60:f6:da:20:39:98:91:5b:d5:d5:
e3:43:4e:37:65:39:c2:01:f4:8b:b4:0c:b7:9c:86:55:07:6e:
05:27:65:19:fc:8b:dd:45:1d:04:92:7a:a7:29:ea:17:43:c7:
33:19:70:a1:f8:d3:3b:29:c3:e8:34:7c:01:65:1b:19:6a:12:
ba:71:d7:50:9e:34:cf:b2:a2:c8:61:9a:f9:05:69:16:17:a3:
3c:3f:da:6c:4b:d2:6e:a2:40:89:6f:7b:43:c7:10:8b:53:63:
4a:e9:73:0a:b0:82:fb:a4:7f:42:2f:92:2e:19:6b:03:20:50:
5f:20:ff:6d:4c:b5:ba:2c:6d:72:12:3a:be:61:46:28:a9:01:
89:37:49:63:a5:1b:49:3f:d6:91:cf:5f:e6:a5:3b:bc:ff:70:
31:c5:5c:87:2c:54:4a:07:6c:25:14:72:62:60:07:88:7f:ae:
98:6f:61:65:f8:d6:d8:ed:92:25:9c:57:f6:48:df:fc:97:c2:
e6:18:d4:71:e5:23:ec:12:a2:1b:98:77:fb:07:3c:26:26:53:
80:c0:16:3d:77:42:b6:9d:1a:fa:31:3f:13:08:d7:45:92:a1:
f3:79:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:35:49 2025 by rpki-client