Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/o6ueLFN7ru5BQiyMrDTp99c2PkQ.roa
File: o6ueLFN7ru5BQiyMrDTp99c2PkQ.roa (raw, json)
Hash identifier: xTudls/dWp0txx61qLR7O1nQRYHC85SQKQJCJYiteWA=
Subject key identifier: A3:AB:9E:2C:53:7B:AE:EE:41:42:2C:8C:AC:34:E9:F7:D7:36:3E:44
Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial: 01856D6F862DB4ACCFA951105976EB932652
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/o6ueLFN7ru5BQiyMrDTp99c2PkQ.roa
Signing time: Sun 01 Jan 2023 13:05:03 +0000
ROA not before: Sun 01 Jan 2023 13:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50585
IP address blocks: 185.53.84.0/22 maxlen: 22
193.105.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:86:2d:b4:ac:cf:a9:51:10:59:76:eb:93:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Validity
Not Before: Jan 1 13:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ab9e2c537baeee41422c8cac34e9f7d7363e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:7f:f4:43:c1:68:5a:c4:5b:10:a7:3e:cf:
61:b1:e5:51:0e:22:e2:e5:63:c8:6e:d0:73:c6:a0:
71:9a:81:8a:f5:99:39:ec:43:b2:94:0a:0f:d4:43:
7b:4d:9e:46:d7:cc:10:1b:b3:fb:71:6f:c1:99:ac:
93:31:e2:31:36:28:e6:ba:29:e6:a2:b5:a4:72:a1:
08:1b:3c:6c:ad:62:1e:7b:e9:cb:25:79:a7:d6:b0:
8e:4b:5a:38:07:a0:fe:14:b5:d1:86:b7:fe:93:08:
c1:8b:4c:c3:26:f1:91:5a:58:dc:a0:b8:b8:78:9b:
e9:b7:41:bb:51:af:81:89:ee:42:87:1f:89:7b:62:
2b:eb:b2:0d:ff:20:0e:7f:19:68:34:83:6b:97:85:
fc:04:7d:da:3a:56:05:9a:2d:0a:37:31:db:f0:c3:
a6:b2:0d:3f:d7:90:24:eb:d4:62:15:e5:59:34:47:
15:bf:5a:af:49:3a:6c:2c:d9:8d:0f:4d:95:03:8c:
86:9a:7d:1f:80:2c:1a:97:06:c7:6c:ba:6b:d2:63:
a8:37:a3:d1:4c:84:09:46:ca:2a:cf:1b:e3:c9:35:
06:3e:89:48:fc:8b:25:7e:54:98:b7:5b:a4:34:84:
69:df:7b:3d:8b:14:79:ed:0a:76:10:9f:3f:66:32:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:9E:2C:53:7B:AE:EE:41:42:2C:8C:AC:34:E9:F7:D7:36:3E:44
X509v3 Authority Key Identifier:
keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/o6ueLFN7ru5BQiyMrDTp99c2PkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.84.0/22
193.105.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c9:ca:ba:dc:3d:6b:79:68:d6:4c:ea:9d:38:5a:5e:45:3a:
1f:73:6a:01:1d:c4:37:cf:a8:3e:ad:5a:b5:bd:6f:a7:e8:1f:
9c:a3:1f:74:ea:01:c9:33:dd:68:dd:f2:58:af:65:7a:71:21:
01:f5:80:a2:73:21:57:fa:48:1f:0b:bf:fc:a2:4d:18:3a:d5:
05:00:56:75:9b:e9:26:ab:52:28:58:93:b0:6d:f9:cc:7c:93:
31:99:7d:6c:68:a2:fe:8d:51:0c:80:2f:5a:e2:78:f5:ed:c9:
21:eb:76:f9:26:17:06:82:62:5b:ab:aa:86:a6:1b:a1:68:0e:
ed:ba:2e:4a:88:56:77:92:b0:99:10:30:c2:af:0f:e1:2d:8c:
66:65:8a:5b:92:14:7c:d0:0f:12:fe:ff:9b:99:51:25:9e:35:
fd:ed:1e:5d:85:14:20:9d:13:88:53:7f:b9:2d:82:f6:ec:dd:
ad:ee:64:ba:d0:df:fa:66:38:85:f9:55:f6:ff:e8:f4:dc:91:
5f:d6:dd:17:fd:5d:fc:d4:bf:fb:8e:51:9d:0a:24:2e:47:cc:
e5:fb:5a:77:be:5d:f5:91:0c:4e:cb:e5:b1:b0:00:02:bb:9c:
63:65:d0:98:b3:1f:7b:70:e4:d4:7e:30:c8:f2:12:37:dc:38:
95:5a:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 03:02:08 2025 by rpki-client