Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/1tZs0Y641G5VFpTtr3PmF7d_1Yg.roa
File: 1tZs0Y641G5VFpTtr3PmF7d_1Yg.roa (raw, json)
Hash identifier: TqZVQRmUTIP7qjEDZa1EOyF0IQFVEqzCEIebDIawXgk=
Subject key identifier: D6:D6:6C:D1:8E:B8:D4:6E:55:16:94:ED:AF:73:E6:17:B7:7F:D5:88
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01857295C66855EB4DC7AD466A2FEEA6146B
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/1tZs0Y641G5VFpTtr3PmF7d_1Yg.roa
Signing time: Mon 02 Jan 2023 13:04:56 +0000
ROA not before: Mon 02 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 185.164.254.0/24 maxlen: 24
185.164.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c6:68:55:eb:4d:c7:ad:46:6a:2f:ee:a6:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 2 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d66cd18eb8d46e551694edaf73e617b77fd588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:39:20:5f:a2:54:99:ac:49:93:a9:3a:41:
2a:92:d7:85:df:94:52:8e:b6:2e:4a:87:97:19:62:
55:1d:a7:da:63:fc:3a:26:0f:9f:ec:42:37:c2:cf:
0e:69:cb:c1:ec:bb:f6:56:48:dd:e4:9a:88:40:52:
0d:a1:b8:44:cf:00:ea:44:ad:a2:94:28:e8:6f:62:
6e:ec:21:63:1b:b3:76:63:7f:98:3d:cd:59:c8:7b:
fa:05:27:9c:14:26:11:de:1c:40:33:35:ff:7a:69:
6a:42:14:3d:2e:c6:c4:a2:2e:80:6e:b7:bf:b4:b0:
33:63:c7:c4:1f:da:7a:b3:24:66:97:95:08:87:56:
d7:ec:9e:f3:d0:e2:94:13:27:a8:e7:1e:8d:1d:1d:
0f:ba:e6:ff:6f:b3:31:17:1b:d6:f4:d0:04:8c:94:
d7:7c:d1:7f:84:a5:ae:12:c1:dc:61:ce:3f:69:97:
bc:07:b8:e4:5f:38:45:64:75:81:81:de:7e:fd:80:
02:25:48:0a:f6:84:2e:01:7c:85:d8:06:bd:d9:78:
11:9f:45:46:72:83:6e:f7:70:b5:59:52:46:4e:ec:
1a:fe:97:5c:5d:a8:7a:2b:d6:f7:75:8a:06:6d:26:
1a:94:20:b7:53:8d:85:7e:ec:8a:5c:0c:d3:ad:30:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:6C:D1:8E:B8:D4:6E:55:16:94:ED:AF:73:E6:17:B7:7F:D5:88
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/1tZs0Y641G5VFpTtr3PmF7d_1Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a6:d2:dc:b4:b0:37:0a:b5:ac:a9:8f:b6:0f:0d:d0:fa:c9:
f7:06:8c:8f:25:8a:77:32:5a:b4:ab:35:28:a1:00:85:bd:fe:
49:8d:04:c2:bf:29:c6:d1:b1:5a:6a:a1:d6:ea:8c:4e:39:4e:
9c:5c:17:f3:8d:8f:dd:ae:42:a8:cc:00:ab:43:d9:a7:99:fc:
ff:c2:e2:45:45:e3:23:df:fd:06:b7:d4:6c:3e:ba:9f:19:7b:
d9:b7:0f:65:11:42:2c:9c:81:6c:9a:5f:b4:e8:d5:4a:62:16:
76:ba:46:ce:d3:8e:da:23:4f:db:43:cb:1e:c0:98:e1:ef:31:
df:a4:a1:87:92:80:6b:2c:c6:9e:36:30:5c:f9:69:43:8d:e3:
cc:9c:4c:43:26:ef:c6:17:69:25:0b:ba:90:90:b8:3d:07:b2:
c6:ee:9f:45:06:e3:bc:6e:12:3f:6d:a5:62:a0:c4:27:06:b1:
13:27:cc:df:4e:1c:7c:7f:d2:40:3e:68:00:e2:a1:ea:50:e9:
24:e4:c4:3a:ee:ae:ce:27:05:3c:ad:f2:bc:6b:9c:10:2f:ea:
4f:b8:fb:50:40:fd:cb:f1:cd:b0:4f:9c:6f:39:15:37:3e:85:
db:03:1b:7e:06:05:40:95:21:9f:17:ac:e9:3e:c0:2b:56:80:
13:6c:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:45 2025 by rpki-client