Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/j1uYi-lnEN75iAwJaHx2OPWSXaA.roa
File: j1uYi-lnEN75iAwJaHx2OPWSXaA.roa (raw, json)
Hash identifier: r76fx6V6dY3hnpHesbns9k9Ywp/3xbXNTHTEoks8h8w=
Subject key identifier: 8F:5B:98:8B:E9:67:10:DE:F9:88:0C:09:68:7C:76:38:F5:92:5D:A0
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 018571DE7B92D834E95888C98D14EA6E812E
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/j1uYi-lnEN75iAwJaHx2OPWSXaA.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 185.103.216.0/22 maxlen: 24
185.245.12.0/22 maxlen: 24
185.111.190.0/23 maxlen: 24
2a02:e220::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:7b:92:d8:34:e9:58:88:c9:8d:14:ea:6e:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f5b988be96710def9880c09687c7638f5925da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:72:4d:8f:4a:4d:42:0b:2d:11:cc:de:0a:
05:7e:e1:61:e5:93:30:1e:a6:26:a5:ae:91:9e:f7:
01:ee:6a:94:ac:90:b0:3e:40:6f:4a:a5:e5:a1:7e:
ce:ea:8e:f1:45:eb:43:45:b8:66:16:be:ed:e0:18:
a8:fd:a0:c3:a1:89:86:a0:0f:ae:4a:d5:da:6e:e9:
7b:f9:60:a5:74:6a:bb:d0:78:8d:f4:dd:dd:4f:b6:
08:3e:db:37:9e:c9:13:88:40:f9:a6:18:9c:0d:ef:
ee:3a:4b:bd:68:c7:ca:ab:53:b4:e2:ea:16:cd:f7:
a1:79:40:e8:26:ae:20:e6:32:0e:05:a5:e3:03:e4:
ae:0c:c7:c8:9c:d2:bb:1c:d1:41:87:12:c5:66:2e:
59:8a:3a:e7:f2:3b:bb:f3:23:1e:1f:c1:7d:e9:14:
44:60:10:4e:0e:c0:84:4d:a2:c8:64:9d:87:68:8f:
fd:55:6a:cf:ab:37:5f:7c:62:c7:25:aa:f7:23:cd:
20:05:0c:0d:74:77:db:0c:df:5f:fd:25:8b:51:96:
2d:e3:14:9a:a0:82:30:2b:ab:2b:1b:0b:b9:ce:92:
15:26:de:43:54:90:d7:31:b3:af:d2:bd:ee:5d:2f:
f9:a6:f3:47:4a:25:37:c2:df:40:e8:88:6b:5f:9d:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:98:8B:E9:67:10:DE:F9:88:0C:09:68:7C:76:38:F5:92:5D:A0
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/j1uYi-lnEN75iAwJaHx2OPWSXaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.216.0/22
185.111.190.0/23
185.245.12.0/22
IPv6:
2a02:e220::/30
Signature Algorithm: sha256WithRSAEncryption
72:81:d6:e6:7d:66:0e:57:83:68:cf:5d:16:92:ce:da:87:03:
b4:1e:c2:46:22:57:35:f1:2b:66:3a:d3:c1:e4:03:65:3a:02:
f9:a5:8a:e5:21:f2:3e:dc:1c:4f:4e:7e:0c:df:ef:c2:d8:28:
d6:d0:40:d0:7b:c2:09:9c:7c:9c:33:a0:a7:e0:16:d1:49:f5:
7e:26:92:22:19:42:d1:85:d0:69:d3:c5:33:c6:d9:62:02:8e:
2d:ba:1e:55:ac:a9:0b:68:14:b2:f0:35:c5:52:4e:2c:56:20:
ff:60:8d:22:14:9a:6a:ea:da:26:0f:c2:45:0e:07:00:81:20:
40:c6:b4:b6:2b:88:ca:e9:b1:39:f2:a8:ad:a6:1c:67:a5:25:
69:6e:bf:73:09:3c:24:89:d0:27:e0:77:f0:9e:b1:48:1a:de:
a5:34:ea:d7:02:c4:06:51:93:35:68:ec:11:99:8f:64:f4:63:
64:38:e9:6d:37:ca:25:1d:9d:4f:26:ca:67:54:dc:b2:36:c6:
09:bf:c3:db:e0:ef:ab:eb:b8:d9:3f:61:92:69:c0:5c:08:52:
2a:b3:bc:40:9c:5e:20:66:44:52:04:40:04:9b:6f:8b:37:8f:
17:8d:8b:a0:ce:3a:53:95:51:82:5f:ec:ce:8a:3b:29:d7:b1:
9f:25:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:55 2025 by rpki-client