Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/NFxBv4B1kb0fZ9JFT1j3ZEfLhC0.roa
File: NFxBv4B1kb0fZ9JFT1j3ZEfLhC0.roa (raw, json)
Hash identifier: UcOagnEOQOMmGqXZ9xEtM3FTLRwFk4e5qAVnuscHbQ4=
Subject key identifier: 34:5C:41:BF:80:75:91:BD:1F:67:D2:45:4F:58:F7:64:47:CB:84:2D
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 018570F08308CB0B2AA4D4F3493B8C3E4870
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/NFxBv4B1kb0fZ9JFT1j3ZEfLhC0.roa
Signing time: Mon 02 Jan 2023 05:24:48 +0000
ROA not before: Mon 02 Jan 2023 05:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209620
IP address blocks: 185.184.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:83:08:cb:0b:2a:a4:d4:f3:49:3b:8c:3e:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jan 2 05:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345c41bf807591bd1f67d2454f58f76447cb842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b1:be:06:8c:89:a8:46:fe:f9:60:44:84:88:
4d:c3:05:db:da:f1:05:72:b0:90:76:29:dd:4d:29:
4b:cd:a2:5b:ca:8f:cb:c4:f7:a3:86:55:9d:be:7a:
7e:cf:f0:50:64:d0:17:fa:37:80:31:28:8c:30:6e:
22:24:8a:f0:5f:2b:ae:e4:20:4b:6e:a3:c5:54:1e:
57:b7:74:4b:9d:f8:2e:e2:0b:65:ed:fd:79:41:2d:
dc:69:cd:31:9e:21:36:27:b9:54:4a:df:af:2a:fb:
95:96:f8:ca:26:01:9f:19:19:76:3c:29:2a:5b:24:
7b:bd:e6:31:9d:cc:b5:e1:6a:d5:52:a3:9e:79:1f:
61:ce:00:2c:b5:17:52:ea:0e:59:f0:ec:5d:3c:55:
5e:70:8f:52:aa:02:fe:99:a1:0a:25:cf:97:b0:ff:
d1:8e:ab:a6:a2:d5:95:cf:c8:7c:14:c3:b0:1e:60:
28:9d:ef:f7:c4:46:48:b8:ae:25:9f:f4:fc:43:b6:
0d:64:c1:f4:7d:b2:a7:3e:7d:7c:91:08:5a:d9:8f:
a0:6d:5f:4b:8d:8a:cf:8d:22:92:eb:6a:1a:22:ec:
bc:d4:1d:73:d2:46:50:83:d6:3d:94:33:87:66:b9:
f0:32:a6:1d:c1:fd:bf:9b:b8:ab:ae:84:2a:c9:29:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:41:BF:80:75:91:BD:1F:67:D2:45:4F:58:F7:64:47:CB:84:2D
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/NFxBv4B1kb0fZ9JFT1j3ZEfLhC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.213.0/24
Signature Algorithm: sha256WithRSAEncryption
97:78:17:52:fa:e3:1b:80:9b:53:00:1c:13:91:01:04:ef:9f:
36:aa:d1:22:cd:9d:a7:59:27:07:69:a7:f9:b0:01:a4:67:d3:
a9:f5:c6:ca:4c:8e:6c:c3:69:15:a4:bc:1d:9d:c9:99:a3:c6:
1b:d3:f6:e6:ce:e7:90:24:93:d8:9c:85:d0:6c:e6:ba:de:a1:
07:fc:9c:aa:da:a2:34:f6:89:62:b0:bf:bd:1f:ef:f1:c8:7e:
0a:8c:4e:ee:aa:9b:5e:2c:6b:fd:c7:72:01:26:b9:0b:35:b1:
25:8a:89:8d:34:ff:00:34:ff:7f:51:a3:44:cb:72:32:dc:9a:
ef:3d:41:51:d2:f7:7a:b3:7d:5e:e9:7b:33:f0:d9:3a:22:e2:
1d:20:fa:b7:80:0b:e6:45:ba:ce:cb:35:ab:49:11:cc:eb:8f:
2d:36:f7:47:6c:b4:b1:9f:ef:44:04:eb:78:84:5f:be:db:36:
be:ba:d8:ab:f5:06:f0:b3:e3:08:5b:96:09:4c:4b:b9:10:ce:
e0:bb:d9:9c:38:cb:18:8a:5d:a3:89:2e:5a:a5:c1:81:13:fe:
78:02:3f:2e:d4:58:ee:c2:4b:3b:97:b5:a5:62:be:72:9b:82:
89:0a:a4:1d:49:68:dd:9b:b0:fa:9f:99:a9:f2:30:87:9a:e4:
05:82:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:26 2025 by rpki-client