Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G1swFxqtnKRvnFTUssgq7FwGBAQ.roa
File: G1swFxqtnKRvnFTUssgq7FwGBAQ.roa (raw, json)
Hash identifier: sDo4aukD7XJFYQBULy40DgSw+bmYlHLULBaCxcDqdFw=
Subject key identifier: 1B:5B:30:17:1A:AD:9C:A4:6F:9C:54:D4:B2:C8:2A:EC:5C:06:04:04
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018A9BB0CE2E88BDF1C2DFEB1C67D9C8E45C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G1swFxqtnKRvnFTUssgq7FwGBAQ.roa
Signing time: Sat 16 Sep 2023 01:52:50 +0000
ROA not before: Sat 16 Sep 2023 01:52:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 185.243.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9b:b0:ce:2e:88:bd:f1:c2:df:eb:1c:67:d9:c8:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 16 01:52:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5b30171aad9ca46f9c54d4b2c82aec5c060404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:7c:0b:bd:49:29:d8:31:cc:b9:4d:8e:b3:
5d:50:7d:bb:13:55:95:38:18:16:ce:96:69:6e:89:
f3:8b:06:ac:c1:24:8f:de:53:30:1d:df:16:ae:dc:
ac:49:07:a1:6d:ec:49:95:af:75:33:9b:24:50:c6:
d0:ab:cd:ee:04:47:ec:c1:54:46:4c:41:f5:6e:5c:
27:4c:73:72:db:1e:74:da:9e:9b:00:a7:56:1f:88:
46:fa:1a:6f:b6:23:88:8a:2f:09:e4:43:ac:b1:43:
41:f7:62:b3:4c:53:bb:d8:e1:51:d5:ff:21:30:27:
45:58:ac:83:c9:f3:6b:bc:50:b7:0b:14:28:c6:62:
52:22:d4:37:f9:1d:15:c7:45:b9:ca:92:c3:3f:17:
c8:3a:be:0a:5d:5c:d5:d1:b5:24:12:0c:c3:13:8b:
c4:9b:a3:5d:e6:3b:5f:cc:65:26:8c:da:10:b4:18:
39:df:9a:fc:47:5b:f8:81:10:17:ed:fc:87:78:12:
ed:13:00:cf:b4:b1:67:5e:4f:89:7b:6d:73:5a:b1:
11:5f:50:e0:e2:ec:5a:dc:5a:93:fb:d3:01:d5:d9:
f5:30:76:45:2a:84:7a:4c:0d:47:70:6e:50:6c:df:
c3:58:29:44:b5:c2:be:aa:a5:8e:6f:1d:ad:9c:37:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:30:17:1A:AD:9C:A4:6F:9C:54:D4:B2:C8:2A:EC:5C:06:04:04
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G1swFxqtnKRvnFTUssgq7FwGBAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.4.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1b:47:38:5b:23:bf:8f:f5:32:91:32:81:ce:b1:34:51:06:
c1:34:7e:26:91:6c:c5:5d:ea:52:bc:65:fd:4d:53:45:0a:c1:
bb:ac:6c:f6:72:a3:73:6d:50:95:4f:af:1b:33:45:93:b4:76:
c4:35:60:ea:8c:02:b2:67:6e:14:cb:84:2b:1a:7c:fb:d6:bd:
ff:85:25:8b:80:61:b4:a9:8d:22:60:7c:fe:47:1e:ff:95:d2:
69:5e:3d:55:44:4e:29:30:bd:8d:5f:37:a9:5b:89:07:05:b9:
8c:ba:43:f3:ae:7f:48:e9:d9:ce:10:8b:57:8f:d7:2a:09:46:
b7:25:df:cf:94:6f:75:c5:11:89:4a:c5:f6:39:f2:93:c7:eb:
b8:de:bd:40:cb:7c:b5:c2:58:7d:c0:e2:23:a5:c1:da:3f:fe:
3b:43:aa:74:7a:ac:ed:ba:7d:0b:13:70:55:dd:6a:ee:ec:ff:
73:32:a3:40:a0:fa:9c:a4:7a:6f:db:bc:8a:16:c8:56:35:0d:
c9:3a:9c:bd:7e:18:f2:14:71:ee:e1:8e:6a:69:56:85:1b:e5:
51:98:6e:87:59:4b:cb:19:bc:46:38:58:75:54:6f:31:bb:11:
34:3f:72:bc:2d:ea:05:e9:13:cb:6a:a5:06:c4:a1:f2:ca:81:
a5:f6:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:16 2025 by rpki-client