Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/CArMdX5Cw6lgnd60Ej78jAaM_PM.roa
File: CArMdX5Cw6lgnd60Ej78jAaM_PM.roa (raw, json)
Hash identifier: oB+9DVWtk2JqHi1SrrZlWyXYpuht8It0RVukUxZUE88=
Subject key identifier: 08:0A:CC:75:7E:42:C3:A9:60:9D:DE:B4:12:3E:FC:8C:06:8C:FC:F3
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01856F8B86B21735E1836BA4E8125C2CC1E1
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/CArMdX5Cw6lgnd60Ej78jAaM_PM.roa
Signing time: Sun 01 Jan 2023 22:54:53 +0000
ROA not before: Sun 01 Jan 2023 22:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.84.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:86:b2:17:35:e1:83:6b:a4:e8:12:5c:2c:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jan 1 22:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=080acc757e42c3a9609ddeb4123efc8c068cfcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:6c:f5:b2:90:04:d1:ae:40:96:65:8a:84:
a8:61:61:8f:09:cf:48:1c:70:4f:b6:13:4f:2f:85:
a1:96:9a:72:60:3d:58:a4:56:05:e1:12:65:33:3e:
4a:40:84:bc:18:11:b3:47:2e:89:b6:42:59:2e:05:
93:fa:47:fa:98:db:91:b7:07:4a:bb:d8:15:41:e3:
b9:89:f7:c4:2e:ed:37:6e:38:f4:cc:70:5f:c2:3e:
74:92:2a:f8:d6:d2:c1:1a:b4:a0:8e:8b:bb:0b:17:
77:eb:f3:fd:40:99:cf:11:0f:84:13:9e:f3:81:6c:
8e:a5:53:62:c4:25:e7:95:35:d1:72:80:bc:bb:0d:
c1:28:19:c7:c1:24:2a:09:b2:d8:ce:00:8f:e5:9b:
e3:02:40:11:c2:3e:f3:81:25:c5:3f:d4:27:52:60:
bb:6f:f0:07:61:b5:e6:98:d2:c0:4f:e5:2a:0d:79:
5f:19:85:0c:16:b7:64:2f:7a:5f:d3:c1:99:fb:ee:
b6:c2:34:08:c2:f5:08:67:f6:90:df:26:a6:fc:1b:
21:b7:3e:e4:ce:42:d3:ab:23:34:69:a4:d5:43:b0:
92:a9:3f:2e:d1:6e:a4:4f:0d:52:6b:d8:b5:d7:fd:
c2:a2:76:2f:aa:8e:0b:99:d6:26:32:f0:ec:5b:77:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:CC:75:7E:42:C3:A9:60:9D:DE:B4:12:3E:FC:8C:06:8C:FC:F3
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/CArMdX5Cw6lgnd60Ej78jAaM_PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.124.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d3:c5:a8:8b:b7:e2:8f:b7:8f:61:20:23:68:3e:b6:57:af:
e4:44:37:6d:19:2a:72:e6:1e:cd:f1:0a:80:79:ee:cb:c7:52:
1f:98:34:5e:b1:13:d9:45:7a:b8:09:95:c4:84:71:18:fd:c1:
39:13:6b:49:01:5c:7c:b4:f9:bc:83:44:22:1e:06:41:0e:db:
c0:31:a4:04:7d:7c:b4:37:6e:b0:9c:e0:cc:84:23:53:2f:5c:
3d:f0:3d:fb:2a:9f:80:23:44:d0:cd:6f:81:9d:ee:79:b9:a3:
2b:35:25:77:9c:6c:22:2a:c5:0f:a8:d3:d4:0a:89:c0:8a:dc:
8f:f5:cb:34:70:c9:dd:9c:04:3d:fa:39:8a:36:fd:9b:06:0b:
51:50:d6:80:09:13:af:29:cd:b2:9f:78:e7:47:47:40:ff:6b:
b7:4e:e8:6e:f9:cb:09:f4:9b:fe:89:6e:da:23:7e:b4:23:7d:
be:e3:f3:1d:3f:1b:65:77:3a:f0:58:66:e9:6b:1d:fe:93:e4:
9b:48:37:fb:79:71:3f:46:15:47:44:1b:7b:1a:1f:4a:13:20:
24:86:ee:7a:5f:1b:a9:42:47:12:05:d1:da:8b:96:e1:0d:db:
e6:a4:81:3d:79:9e:9e:98:27:cd:c1:02:a4:78:af:8e:d0:9e:
0d:55:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:27 2025 by rpki-client