Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/Z54h4OBdIa7sFpaLAZx2Pi-GOPg.roa
File: Z54h4OBdIa7sFpaLAZx2Pi-GOPg.roa (raw, json)
Hash identifier: gKEmaWWDIgrNew4TLzGv3HphcGsFKepNFzIhoBF62PQ=
Subject key identifier: 67:9E:21:E0:E0:5D:21:AE:EC:16:96:8B:01:9C:76:3E:2F:86:38:F8
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 0185715569FC88209C53CF1E1F0F031A814D
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/Z54h4OBdIa7sFpaLAZx2Pi-GOPg.roa
Signing time: Mon 02 Jan 2023 07:15:01 +0000
ROA not before: Mon 02 Jan 2023 07:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207446
IP address blocks: 185.143.20.0/22 maxlen: 24
185.143.20.0/24 maxlen: 24
185.143.21.0/24 maxlen: 24
185.143.23.0/24 maxlen: 24
185.143.22.0/24 maxlen: 24
2a07:1e01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:69:fc:88:20:9c:53:cf:1e:1f:0f:03:1a:81:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Jan 2 07:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=679e21e0e05d21aeec16968b019c763e2f8638f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:f7:52:12:f8:c5:4a:b1:34:a9:18:32:48:
38:64:c0:b7:cf:53:07:8a:ae:9c:4f:9d:73:4b:06:
ca:43:07:b2:4f:76:69:a4:9a:1e:90:56:fe:5a:71:
51:bd:8a:79:d2:df:f9:cf:11:87:8a:d6:b8:21:c1:
66:5c:20:72:a0:47:a0:0a:b3:f2:63:2c:ac:2e:f4:
f8:70:33:62:b7:09:0e:21:78:8f:fe:61:d2:e8:f7:
dc:17:c6:1b:fd:84:94:3c:0a:6a:6c:9b:32:a9:9d:
17:0e:7c:d1:60:6f:12:a1:cb:4f:3d:64:3e:87:f5:
3a:1a:b5:9c:38:ed:06:bc:1c:93:93:4d:d6:a8:21:
be:62:a7:70:c7:c1:86:81:b8:a1:fc:bb:c3:3b:c3:
a3:71:9d:fa:34:ac:13:e6:03:f6:65:d1:d1:6f:92:
60:c5:2d:26:62:f7:ed:47:d9:2c:3a:6e:aa:84:c9:
53:b3:2d:93:b9:7a:01:cb:c5:f2:33:2f:11:21:be:
5a:cb:6b:4a:ab:62:2a:2f:7e:8f:47:a2:8b:32:f1:
5e:c0:c3:3f:03:ea:d2:98:fe:ee:ff:71:eb:ef:3d:
cc:f9:dd:d1:c5:fa:6d:0f:74:c6:2a:34:a5:9f:d5:
ac:b7:b5:bd:83:f0:11:54:6d:ef:5d:e9:70:76:ab:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:21:E0:E0:5D:21:AE:EC:16:96:8B:01:9C:76:3E:2F:86:38:F8
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/Z54h4OBdIa7sFpaLAZx2Pi-GOPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.20.0/22
IPv6:
2a07:1e01::/32
Signature Algorithm: sha256WithRSAEncryption
38:60:1f:4e:cd:0a:a5:ee:98:3a:97:65:54:bc:0e:d7:93:12:
da:96:70:52:1c:8a:0d:85:d9:16:b7:38:e6:18:32:60:b9:8e:
1f:46:e5:d0:6f:2e:bc:69:7e:1e:c9:56:f8:06:8e:ed:81:6a:
3f:f1:86:80:cf:35:49:85:98:df:a1:5d:b5:de:df:a0:de:d2:
21:4a:25:9f:04:4e:60:18:3d:de:6d:29:1c:06:c0:ba:19:cb:
dc:ed:63:ba:9f:25:33:e2:f6:25:6a:44:9e:5b:ed:f1:aa:78:
16:e9:43:5f:c6:14:db:37:1a:24:05:98:11:76:95:38:00:6d:
91:cd:47:a3:c3:5f:99:22:d4:a9:e8:7d:62:4d:8a:60:2c:3b:
93:ed:4f:da:93:64:c7:98:21:b2:af:b1:ea:a4:7f:3d:bb:51:
16:ca:21:90:1e:af:c1:14:26:4a:c2:4a:ac:45:30:ad:da:06:
f5:84:13:84:86:85:01:06:c1:78:bd:f4:71:08:83:c2:b0:fc:
2f:d5:d9:b7:83:39:55:1e:11:e8:ab:e8:1e:eb:b5:d0:aa:f2:
82:f3:ca:cc:54:5c:66:59:8f:6e:91:3f:ed:f6:95:9e:77:8f:
52:9e:56:e3:b5:82:07:30:26:19:4f:6c:a3:29:8c:02:8f:12:
d0:3d:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:40 2025 by rpki-client