Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/hDEW4aVXCRyzVrBeVFXPQdji5Rw.roa
File: hDEW4aVXCRyzVrBeVFXPQdji5Rw.roa (raw, json)
Hash identifier: KZFqZOKjLP+kEaBmTzDj4FqwSu8kvUKcYEcoVaoKEn0=
Subject key identifier: 84:31:16:E1:A5:57:09:1C:B3:56:B0:5E:54:55:CF:41:D8:E2:E5:1C
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 018572C38C7405FDFBE873E1EC601B6557A8
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/hDEW4aVXCRyzVrBeVFXPQdji5Rw.roa
Signing time: Mon 02 Jan 2023 13:54:56 +0000
ROA not before: Mon 02 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211413
IP address blocks: 185.253.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:8c:74:05:fd:fb:e8:73:e1:ec:60:1b:65:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Jan 2 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=843116e1a557091cb356b05e5455cf41d8e2e51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:b8:82:53:60:57:23:22:4d:38:86:5b:4d:
af:cc:db:e4:09:f7:7b:78:ea:91:7b:79:2b:1e:bd:
18:8a:bf:30:68:e2:ec:95:20:84:c3:7b:72:a5:36:
0d:7a:21:78:85:f6:76:7f:41:00:c8:27:4f:4d:64:
98:35:04:45:52:4b:d4:d0:12:00:50:62:39:58:ad:
a6:0b:f8:34:f9:64:f7:a4:4a:e7:01:8d:73:e3:1d:
7b:64:63:bf:d5:36:83:e6:b3:4e:10:79:ce:d7:9e:
6c:08:22:20:94:82:96:84:ba:56:1c:30:44:85:60:
8a:97:ad:ac:6a:71:67:ea:c1:a5:61:6e:18:c8:67:
7f:cc:16:63:77:fe:0e:fd:68:b2:7f:54:e3:77:b8:
7a:e6:36:54:b3:fa:35:56:f0:50:de:72:3d:c7:10:
9d:9a:2d:f1:48:67:d7:b1:d7:05:6d:64:82:58:b8:
2d:c7:12:12:18:1b:96:cc:47:cf:35:3e:24:68:4e:
e8:34:ec:31:66:a8:a1:3d:42:33:89:53:20:b5:5e:
cc:ca:0e:b4:d7:4c:33:48:d4:c0:6d:60:29:bc:ca:
b0:c2:61:6f:62:dd:20:11:da:b1:b0:97:c7:26:26:
5d:b9:3c:40:81:08:32:97:75:de:18:ab:69:42:9f:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:16:E1:A5:57:09:1C:B3:56:B0:5E:54:55:CF:41:D8:E2:E5:1C
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/hDEW4aVXCRyzVrBeVFXPQdji5Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b4:3b:e9:d0:53:e7:15:67:51:08:cf:0c:21:82:b1:9d:37:
0e:26:36:7e:c7:78:c3:12:0b:a2:02:8e:f9:58:e7:30:08:26:
30:5c:9e:3d:bc:69:37:ec:92:1a:cb:7a:70:a3:a6:98:3e:27:
0c:e9:e5:3a:7c:44:5c:01:2f:f6:91:de:ee:ee:80:ca:fe:cd:
4a:88:2e:90:51:70:03:57:8f:be:7b:76:12:63:fc:86:b5:6c:
2b:b5:53:d0:04:31:fb:f6:29:cf:d9:89:8d:8f:5e:53:e0:46:
53:4d:17:0d:63:db:0c:f7:8e:b3:f9:43:44:f0:7b:0f:97:23:
bd:31:a4:78:42:63:f5:5d:96:dd:81:00:09:24:96:7d:69:b4:
d1:a8:82:f7:60:e8:c1:6a:7b:01:83:da:f2:bb:39:a9:5e:55:
73:c7:50:0d:af:14:cd:97:58:48:9b:93:d9:24:5e:90:76:47:
b0:05:e3:72:24:da:5f:6f:99:db:b3:fa:1f:93:78:19:23:4b:
a0:d9:c3:a1:bb:c9:1b:2b:3f:9c:24:73:18:42:bc:96:56:cc:
88:14:6a:be:9b:c8:5a:77:3b:d5:17:ac:64:2d:c0:cf:4f:26:
33:dc:fa:32:99:66:49:ab:2f:d8:7d:16:df:f4:f7:4d:d6:24:
5b:06:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:39 2025 by rpki-client