Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/CEyOPWTuzqntyt63gVwMJwBUp98.roa
File: CEyOPWTuzqntyt63gVwMJwBUp98.roa (raw, json)
Hash identifier: Uf3VuonRoAacmhAUHNlQ1fvaxUOmfhQZ6ePWEW4sRzw=
Subject key identifier: 08:4C:8E:3D:64:EE:CE:A9:ED:CA:DE:B7:81:5C:0C:27:00:54:A7:DF
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 01856BA592CB889FB19906741ACD582B003A
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/CEyOPWTuzqntyt63gVwMJwBUp98.roa
Signing time: Sun 01 Jan 2023 04:44:51 +0000
ROA not before: Sun 01 Jan 2023 04:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39378
IP address blocks: 185.197.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:92:cb:88:9f:b1:99:06:74:1a:cd:58:2b:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 1 04:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084c8e3d64eecea9edcadeb7815c0c270054a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:fe:dc:ff:2f:2c:c6:20:c6:54:a2:18:cb:
28:f2:43:e3:8c:6d:28:9f:8b:1f:e4:88:81:17:1f:
9d:67:75:82:eb:22:8b:d8:ca:20:5c:b6:b8:94:bc:
17:36:de:ed:cb:44:b7:53:20:6d:e8:8b:c5:e2:de:
a3:7b:49:a6:0c:5a:86:f1:3e:6f:66:9e:ae:d0:fe:
91:f5:a1:9b:68:53:2e:af:0c:ac:74:88:6f:1f:8b:
40:21:14:92:21:1a:e9:2a:52:0d:d8:2a:40:01:09:
fe:de:d4:ca:61:85:4c:e7:d2:fd:ea:57:e4:98:d0:
15:01:82:57:1e:85:63:a5:bc:7d:39:fc:6e:55:26:
d3:d1:a7:ae:34:5a:2b:60:4a:41:fa:85:07:cb:6f:
60:de:ce:1d:50:d0:37:db:16:43:ca:53:87:b1:0b:
9b:14:1f:95:a2:7b:9d:01:21:36:c9:62:ce:c0:17:
02:a3:9f:3f:c3:26:6d:b1:82:cf:84:3b:a5:d4:20:
66:3c:4b:dc:92:ce:14:42:21:eb:3d:75:2b:11:c1:
7c:98:70:62:19:b7:09:47:d1:26:78:d9:bc:94:25:
bd:a3:92:12:28:8f:49:87:0d:42:91:1f:2e:48:91:
b8:82:e7:80:5d:5b:77:44:30:5c:06:0f:3b:6e:5a:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:8E:3D:64:EE:CE:A9:ED:CA:DE:B7:81:5C:0C:27:00:54:A7:DF
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/CEyOPWTuzqntyt63gVwMJwBUp98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:96:69:82:71:30:68:e0:2f:f8:f7:f8:d0:a9:32:42:05:f1:
1c:9b:27:af:0d:17:64:66:a5:1c:45:1e:74:8c:9a:82:04:90:
03:62:ee:30:43:87:27:41:be:9f:83:14:5b:77:02:9d:29:09:
4b:58:53:31:e2:04:5b:ef:e5:82:48:0d:2d:04:10:f1:c6:9f:
93:0d:7b:33:03:f4:40:90:d4:8e:3b:1d:da:94:e4:b7:2d:72:
72:1b:b0:9c:a2:95:43:a7:ee:c3:77:81:88:6a:18:0d:91:96:
de:0c:31:11:f8:3f:1d:78:b0:9b:60:9f:d5:f2:c6:3b:45:f1:
ef:fd:c5:02:50:8d:10:b4:dc:c9:20:1d:21:db:ad:5f:d7:5c:
91:e6:da:72:d9:e5:dc:76:6e:7d:9c:23:0d:f0:1f:a3:34:9b:
bb:62:9a:5e:39:ca:c6:b7:4e:89:87:e7:af:5e:e7:9c:d4:19:
0e:09:15:d5:4b:b0:dd:5b:1a:e1:0c:bf:b3:82:55:41:05:11:
51:cf:1b:92:e3:ca:b5:f0:c6:61:81:8f:2f:77:7a:de:e1:98:
d6:5c:82:71:52:22:c2:07:63:4f:da:15:fb:be:86:10:75:82:
fd:3b:20:58:6a:e4:0a:ca:67:e4:fe:e0:c9:a5:df:3a:4a:e4:
09:4c:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:19 2025 by rpki-client