Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XRuP4-4fMGjfTr4pr1LhOSUcYjc.roa
File: XRuP4-4fMGjfTr4pr1LhOSUcYjc.roa (raw, json)
Hash identifier: hvvvUZeXtAr6AbbaFlmM8T2Wj8ipgNvyriCid5cjziI=
Subject key identifier: 5D:1B:8F:E3:EE:1F:30:68:DF:4E:BE:29:AF:52:E1:39:25:1C:62:37
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01856C783448DA8E5D8C8CFD61F8822A76D2
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XRuP4-4fMGjfTr4pr1LhOSUcYjc.roa
Signing time: Sun 01 Jan 2023 08:34:55 +0000
ROA not before: Sun 01 Jan 2023 08:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198477
IP address blocks: 185.117.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:34:48:da:8e:5d:8c:8c:fd:61:f8:82:2a:76:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jan 1 08:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d1b8fe3ee1f3068df4ebe29af52e139251c6237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:55:b6:ce:42:a0:12:ce:9e:7f:87:14:11:
ce:d4:7d:4d:46:e9:c1:30:03:7c:89:ed:1c:67:03:
93:87:1d:c6:51:7b:3e:6c:2a:f7:21:1c:58:26:8f:
0f:5a:33:c2:e3:e8:41:dc:3a:a4:c7:5d:9d:9c:3a:
70:f5:e3:07:9e:67:40:3a:7c:3a:76:f8:79:7f:d1:
95:2f:53:f7:1c:a3:40:46:14:2e:d2:b1:b7:da:30:
d0:c2:88:a0:06:62:77:ea:e2:47:2d:04:00:a8:0f:
5a:a4:38:57:c2:9a:94:df:a3:e1:99:96:44:ad:a2:
df:6f:6a:06:a0:bd:cb:6b:a3:7a:e2:59:a7:a5:fe:
3b:2d:0f:a6:0e:8e:2e:50:8d:9f:bd:e0:fd:69:c0:
68:e5:6a:ad:ac:7c:22:1e:78:ea:7c:e4:ba:8d:60:
08:19:03:b3:87:68:a4:25:2d:f4:f5:ab:c7:db:e4:
77:60:45:a1:42:0d:b3:c9:23:35:8c:6e:20:6a:45:
a4:ab:c8:b9:45:15:63:cb:99:e0:68:47:8c:a6:64:
39:40:8c:f9:7b:9b:6f:79:4e:9a:43:cd:76:55:3e:
d1:08:8a:b8:11:b5:7a:f4:1b:bd:7b:98:54:8d:99:
b0:26:cc:a5:c5:cf:bb:a3:0f:8f:8e:7f:44:ce:60:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:8F:E3:EE:1F:30:68:DF:4E:BE:29:AF:52:E1:39:25:1C:62:37
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XRuP4-4fMGjfTr4pr1LhOSUcYjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0e:b4:60:26:2e:c2:c5:bc:c0:35:57:a1:bf:31:c6:9f:a6:
7c:40:9c:ed:02:6b:4d:43:33:2a:9c:95:4d:35:b9:5b:bf:72:
70:d3:c7:8c:50:cd:a9:1b:46:49:67:c7:b4:99:44:e7:94:26:
59:d4:16:7a:98:11:bf:53:b1:92:cc:2b:d6:f8:2a:15:01:04:
8f:85:49:f2:7e:62:4f:0f:1a:bf:e5:d6:8a:ef:53:58:f6:80:
4d:2c:a0:af:cc:4d:61:4f:69:61:3b:35:b1:c8:74:69:4b:1c:
d5:6d:df:30:dc:64:33:ac:05:c3:ef:34:cc:9d:b4:be:2b:6c:
0a:0f:63:50:dc:21:8b:9a:0f:66:69:8c:c9:0f:85:54:2f:ec:
c1:20:68:c9:d2:3e:20:4a:3e:89:0b:09:a7:3d:ab:d1:91:de:
c7:71:da:f6:34:05:84:5f:fe:de:13:a1:83:87:50:ba:4a:7d:
1e:6d:e3:26:af:3c:a1:fe:12:47:ff:9c:66:ef:a0:57:ef:0b:
86:69:a9:28:25:23:41:35:78:37:b8:01:f1:bf:9b:8a:5f:2d:
ea:90:c9:30:fb:46:ff:88:51:b5:ce:03:49:8a:38:bb:21:e1:
be:4a:64:12:d3:8d:f3:ee:78:16:b7:df:87:37:b9:fc:8f:f6:
6c:50:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:19 2025 by rpki-client