Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/pELzxPvkSRbvhkxlZuvv8WYndFE.roa
File: pELzxPvkSRbvhkxlZuvv8WYndFE.roa (raw, json)
Hash identifier: NB5kaSRNmFCuzo8hJrD/2oZ57QVwctEzlQdMlrqc+20=
Subject key identifier: A4:42:F3:C4:FB:E4:49:16:EF:86:4C:65:66:EB:EF:F1:66:27:74:51
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 0187FACE1246B57DAE7C173EFED3EAF7C247
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/pELzxPvkSRbvhkxlZuvv8WYndFE.roa
Signing time: Mon 08 May 2023 10:00:21 +0000
ROA not before: Mon 08 May 2023 10:00:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 185.252.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:ce:12:46:b5:7d:ae:7c:17:3e:fe:d3:ea:f7:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: May 8 10:00:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a442f3c4fbe44916ef864c6566ebeff166277451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:68:9e:59:80:78:0b:0b:d3:7d:8d:0b:be:
94:6e:7a:a7:4c:42:cc:3d:23:43:0b:c1:a7:a6:b1:
e9:c1:1d:3d:c4:42:4c:c9:6f:86:a7:89:d5:3e:18:
c0:e2:8b:da:9e:e6:c2:51:03:06:6b:00:bd:b1:84:
a0:56:4d:2b:b2:97:2b:de:b5:bb:f6:5f:4a:e4:d2:
cb:81:21:fa:03:e3:81:c6:2e:5a:1c:17:28:5a:f4:
7c:37:eb:cc:e1:88:70:a1:55:44:0c:79:6e:a5:85:
9c:bb:d1:ba:20:b0:07:a0:fc:e3:97:44:ab:0a:3d:
5a:ce:44:31:f6:1d:59:e0:7f:47:06:86:a7:54:e5:
33:29:94:a2:29:64:8b:bb:e2:85:da:de:2a:43:cb:
1a:4a:3f:5f:d8:c5:34:a8:25:d6:b0:82:04:a7:f8:
66:5d:46:8e:a7:22:90:a7:10:ee:8c:9c:06:90:9e:
23:3b:78:64:f5:86:7e:91:28:e5:ff:7d:f9:a1:ad:
23:48:1a:17:8c:f4:ce:79:26:4f:5e:07:31:0a:39:
80:44:64:8a:41:2f:91:cb:da:41:f9:59:c1:cd:77:
de:f7:88:d6:02:cc:1d:02:d1:da:1d:0a:ce:a2:52:
43:3d:e2:67:ba:16:e6:c7:7f:fe:54:f5:d8:c2:79:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:F3:C4:FB:E4:49:16:EF:86:4C:65:66:EB:EF:F1:66:27:74:51
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/pELzxPvkSRbvhkxlZuvv8WYndFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.86.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e5:19:97:45:e5:fd:23:83:a5:ae:24:89:c2:5f:00:d3:7b:
c3:01:f0:40:a5:d2:4c:dc:99:e4:f9:24:34:93:ab:60:08:25:
5a:3f:d9:9f:99:7a:31:03:e4:73:ce:7d:7c:47:0e:8b:f9:4b:
6d:9c:4f:80:60:1b:13:35:c0:ae:4d:b7:03:8f:6c:00:fe:be:
b2:f6:e0:eb:b7:13:6e:51:f3:a1:57:19:15:c1:7b:ee:3a:a5:
a5:af:5e:90:0a:62:8c:94:c8:9c:ad:fa:c1:d4:a3:34:87:26:
b8:a3:70:67:d2:b6:a4:9f:76:74:2a:9a:6f:09:df:5d:32:49:
d6:ba:8e:5c:95:18:55:ad:ea:a2:b7:ea:fb:80:93:93:17:02:
11:02:14:5b:c7:3a:cb:9a:31:0c:91:fa:db:12:fd:2e:6a:02:
7e:ec:31:bd:ea:65:35:d0:9a:fc:e0:42:ed:d2:5f:2b:0a:74:
56:d4:0b:db:5d:76:43:b3:ac:99:21:33:33:ea:10:f0:05:9b:
01:b3:e9:d4:f2:d8:04:75:e9:2f:60:b5:f3:e5:23:bd:4c:1d:
4b:d5:2a:f4:64:b2:9b:65:13:06:57:9f:25:74:13:02:3a:10:
bd:48:1a:79:b9:7e:82:52:4f:1a:77:27:ce:9f:78:32:b8:77:
c2:dc:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:36 2025 by rpki-client