Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/R-yM--90xpt1Jx8pgSo17bST_1A.roa
File: R-yM--90xpt1Jx8pgSo17bST_1A.roa (raw, json)
Hash identifier: nlZARHn8lvpesj3+QVTN44pzpRbXKnk3wDyV2l/FTwI=
Subject key identifier: 47:EC:8C:FB:EF:74:C6:9B:75:27:1F:29:81:2A:35:ED:B4:93:FF:50
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01876FC537D67FA6F3204058ADA6CCB65B3A
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/R-yM--90xpt1Jx8pgSo17bST_1A.roa
Signing time: Tue 11 Apr 2023 10:03:28 +0000
ROA not before: Tue 11 Apr 2023 10:03:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 185.84.183.0/24 maxlen: 24
185.84.182.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:c5:37:d6:7f:a6:f3:20:40:58:ad:a6:cc:b6:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 11 10:03:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47ec8cfbef74c69b75271f29812a35edb493ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:e2:5a:ec:d3:98:eb:58:79:a8:f2:35:41:
60:b7:5c:02:90:41:2a:1f:7f:8f:ce:7c:d2:06:40:
a7:19:07:2b:d7:73:c4:9d:b4:e5:4e:20:e1:9b:9f:
00:84:1c:d1:07:8b:7a:e5:78:ab:43:84:02:65:43:
12:89:51:07:22:e9:df:26:4c:3f:0c:67:48:0e:fd:
87:0b:8c:9a:ed:75:61:b8:cf:0b:71:61:a3:39:c2:
32:81:86:20:67:40:84:23:f3:6f:95:a1:af:f8:e6:
45:7c:1a:01:86:fa:62:83:b2:b6:92:ba:e4:99:d9:
df:5e:36:58:77:54:7f:c9:0a:4c:83:0a:36:fa:01:
42:04:ad:2c:3c:11:12:7a:a7:cc:63:ca:b0:1c:bc:
9e:79:c1:86:33:18:ad:b7:6c:44:70:5b:7c:1d:ec:
21:75:98:c6:3d:1c:15:f5:17:6c:51:17:f2:51:1b:
7a:46:45:71:1a:96:d5:2e:b6:1f:b7:73:02:a3:cf:
60:65:0d:81:3c:90:72:76:5e:9c:8b:27:7f:d7:a6:
01:67:3a:58:f5:2a:70:82:d6:27:13:79:00:73:cd:
e3:0b:ce:c5:fc:b6:3c:b4:b8:7c:a1:11:41:dd:28:
37:6a:2d:4b:db:2e:04:c8:ae:47:90:9f:0c:8e:2a:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:8C:FB:EF:74:C6:9B:75:27:1F:29:81:2A:35:ED:B4:93:FF:50
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/R-yM--90xpt1Jx8pgSo17bST_1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e1:2d:97:1f:4c:8e:5b:d1:4c:fd:4e:db:48:f7:5c:c6:7e:
f9:f9:1c:13:6b:2b:2d:26:5d:92:ed:51:b4:b0:2d:ed:e1:c5:
94:c4:99:27:7f:b5:7b:e5:86:f5:41:7e:ba:ce:1e:d8:a5:fd:
da:26:fb:87:77:92:c3:d0:5e:e8:c4:b5:77:12:ea:ae:a3:aa:
24:32:4e:4d:44:62:3c:f9:95:f8:27:e4:73:8f:6a:98:16:c3:
11:f5:b6:a8:d1:c0:2f:b2:b8:92:41:8e:9a:53:ab:f4:5d:17:
d5:6b:54:54:31:fc:74:3b:a2:5e:9b:6a:fa:6d:a6:b6:3d:b8:
20:b1:a1:78:bb:63:4e:05:fd:98:6f:0d:55:8a:49:84:83:1c:
04:d3:0c:64:3e:65:a4:9e:e5:ac:d0:0e:b5:d6:8e:e8:e1:ba:
3b:7a:03:70:2d:7c:4b:58:2f:1a:54:c8:20:5e:f6:a0:5e:23:
60:95:a8:0e:b6:00:cc:22:30:d5:1d:b8:cf:32:1c:86:2d:c8:
11:79:12:c8:a7:2a:82:b3:6d:02:ce:cd:ad:59:d9:3e:6e:04:
e7:cb:4e:b7:62:4a:38:01:e5:6b:6a:02:09:58:0e:37:3e:f8:
33:3c:54:d4:03:a4:74:30:d6:e5:b9:36:68:9b:55:67:b5:45:
0f:66:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:14 2025 by rpki-client