Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/B1At0D-QE9YxvxmY3sCHLM3lhSo.roa
File: B1At0D-QE9YxvxmY3sCHLM3lhSo.roa (raw, json)
Hash identifier: dP59OtWgPMrNNXR9hsESFH5WNw8kP4abRXE2B73lPnE=
Subject key identifier: 07:50:2D:D0:3F:90:13:D6:31:BF:19:98:DE:C0:87:2C:CD:E5:85:2A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0188D708E27B67A9230796DD2FBF5E77A092
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/B1At0D-QE9YxvxmY3sCHLM3lhSo.roa
Signing time: Tue 20 Jun 2023 04:21:03 +0000
ROA not before: Tue 20 Jun 2023 04:21:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 185.233.17.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:08:e2:7b:67:a9:23:07:96:dd:2f:bf:5e:77:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 20 04:21:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07502dd03f9013d631bf1998dec0872ccde5852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:52:7a:23:49:78:18:dc:34:37:d1:b2:57:
82:28:68:d1:77:bc:7c:3d:de:d2:39:e3:fe:9e:a4:
6a:4c:e6:c9:31:28:7b:a4:86:ed:9d:07:cf:a2:ea:
3c:95:02:fe:b5:0e:9b:ab:ae:21:b3:9d:b6:71:98:
ea:fa:c9:78:40:52:0c:91:c1:37:1a:42:d0:e1:28:
a0:e7:64:d8:57:62:6d:a8:bc:b8:8f:f1:d1:ed:dd:
84:80:b2:16:c5:c9:03:e6:22:57:75:13:a8:f7:79:
85:de:ce:70:a5:1d:56:c6:a2:98:bf:4e:45:4f:dc:
b3:1e:82:82:bc:51:b5:ea:a2:75:f9:2d:85:24:03:
1b:e1:6c:ea:92:68:4a:ca:9d:f9:dc:46:44:e1:50:
3c:af:35:05:9d:4b:82:cf:18:a8:60:8a:39:6f:1c:
de:53:96:b1:6d:5b:1e:96:96:a7:81:8d:0f:cb:53:
20:c8:5a:33:dd:6c:8d:c8:2a:a6:c2:5b:2f:c9:cf:
f4:db:a2:cc:68:24:ba:89:24:fa:9c:0c:6e:d5:9e:
1a:7b:42:9c:48:01:37:f0:48:4d:b6:a7:c9:bb:10:
b8:9d:09:51:34:d2:60:f3:39:1a:89:96:03:74:6c:
9e:85:4d:22:d9:da:44:d8:13:5f:bd:fd:05:d6:b6:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:2D:D0:3F:90:13:D6:31:BF:19:98:DE:C0:87:2C:CD:E5:85:2A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/B1At0D-QE9YxvxmY3sCHLM3lhSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.114.0/24
185.233.17.0/24
193.107.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8e:50:32:a8:e7:24:51:88:c0:71:a4:aa:b4:40:55:d4:c0:
89:33:3c:da:e5:6d:b9:6b:44:14:9d:a8:ee:7e:bb:00:f6:ab:
4b:22:30:a7:b9:ae:a2:79:fd:67:42:f7:4d:9b:ca:b2:04:af:
e8:61:43:dd:80:3e:db:99:a1:7e:87:d2:a4:45:86:f3:19:2e:
ea:97:cb:09:5a:d3:5c:41:85:55:de:85:30:60:71:7f:8f:aa:
98:69:37:fc:0f:41:63:10:99:a4:3e:35:9a:40:97:f1:10:e9:
be:47:42:98:d0:34:c9:b1:ed:37:70:45:f0:17:ba:76:93:77:
7a:f1:da:b3:61:d7:c7:7e:8d:f4:b5:ba:e0:c0:45:92:4f:05:
5f:ce:a7:72:67:38:c3:2d:dd:a9:fb:30:83:6d:5a:70:4f:9b:
28:2e:f9:67:c6:fc:8e:70:0d:08:18:96:a5:64:f7:c6:71:c2:
da:ba:61:3b:71:b1:6e:3c:6f:8a:37:e5:0d:5e:24:81:e1:f4:
62:a6:8d:72:01:93:3e:c6:d2:30:28:14:6c:7b:5f:db:ba:09:
19:d0:e4:ad:e0:11:53:07:00:ef:83:f0:45:87:63:6f:e2:7d:
b8:89:13:7b:7c:15:65:61:a3:8f:31:6e:95:38:03:b8:04:1c:
f2:67:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:51 2025 by rpki-client