Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa
File: lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa (raw, json)
Hash identifier: m/qye8N/b8UkYc4ykxg305LQwnyq6lXpAgNeu+aA4g4=
Subject key identifier: 94:D0:84:9B:EE:C0:E5:95:F2:17:BA:FE:3C:C9:54:49:B1:1F:6F:AA
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 060E28E5
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa
Signing time: Sat 01 Jan 2022 08:59:12 +0000
ROA not before: Sat 01 Jan 2022 08:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.73.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101591269 (0x60e28e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jan 1 08:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94d0849beec0e595f217bafe3cc95449b11f6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:7b:a1:00:a2:f7:0a:70:4b:3f:64:9d:ea:
3d:15:ab:0e:c2:9c:ce:70:58:8f:be:7b:05:e4:42:
f2:55:55:60:7c:21:94:32:22:d5:93:08:2d:05:04:
84:53:1a:22:d8:ca:b3:5b:60:5c:25:a7:bf:2c:fc:
28:a7:6d:26:3f:6d:21:28:16:d3:2b:d3:3a:70:d3:
85:cc:a2:7d:94:2a:9a:6e:e6:2e:79:32:62:e8:5c:
87:64:eb:10:5b:2a:42:b7:63:f0:ae:86:04:e9:3b:
1b:9b:69:70:6a:85:65:8a:1f:da:01:e1:a6:ba:98:
2d:dd:2a:8e:07:7d:08:59:e6:a6:30:24:8d:80:ed:
17:91:71:1e:b4:1b:80:22:81:4a:15:7b:b8:1f:30:
0e:91:cb:41:ec:db:54:c1:42:d5:d2:e3:28:da:8f:
f0:c9:b5:2c:07:23:cd:23:22:cd:80:0a:cc:eb:28:
f2:26:27:99:d2:ea:98:0e:ca:33:37:01:5d:0c:de:
c5:36:68:aa:93:7c:ca:ce:01:72:4a:76:1d:f4:f3:
f3:69:0c:1f:3f:0a:c4:73:b8:84:ca:3a:a6:13:be:
0c:88:12:2b:e7:dd:dd:73:5e:8b:5f:72:21:25:b2:
f0:d7:9a:fb:b4:70:3b:46:cd:1e:94:dc:56:b0:72:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:84:9B:EE:C0:E5:95:F2:17:BA:FE:3C:C9:54:49:B1:1F:6F:AA
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/lNCEm-7A5ZXyF7r-PMlUSbEfb6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.224.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2b:f0:05:82:25:cd:c7:b4:83:f4:00:91:ac:90:e1:ae:3d:
27:e4:4c:75:bd:ee:62:35:c4:c7:83:70:9f:9b:21:68:08:f7:
2a:5b:f5:0d:07:07:cd:11:84:bb:2a:8c:83:54:4a:59:52:d3:
ae:85:c5:0a:97:89:8d:a1:16:6a:55:e1:ac:6f:53:11:7b:f2:
1d:67:fc:a6:29:45:06:37:63:db:4a:06:19:0c:d4:b6:57:25:
63:48:b9:13:ed:d5:da:d6:60:a4:e9:15:80:ec:9a:39:82:5a:
d7:f7:b3:3f:84:5b:c0:3f:de:f1:4a:73:59:3d:01:67:ee:4c:
a3:7c:08:15:da:53:73:31:06:d8:0f:14:b1:b5:29:75:c7:25:
0d:6f:1f:35:75:90:f8:e0:70:82:03:d9:fc:54:fa:de:ea:77:
c6:24:10:3e:69:ff:b6:b5:68:de:34:4c:d2:53:d6:ea:63:c9:
d1:98:4c:69:11:5e:70:ea:92:b4:91:b8:17:bf:31:c2:01:82:
17:c9:73:59:7b:e8:88:a6:0c:40:b8:cd:6a:3d:03:0d:bb:c7:
bb:b3:93:96:7f:9e:59:2a:4f:6e:61:14:32:ab:0f:e1:70:7e:
08:70:7c:78:f8:8b:db:b0:95:cf:5b:09:2c:a5:8a:cf:05:d8:
39:08:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:50 2025 by rpki-client