Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/YXjtlgxa4cCwgnKvOPV0_-hHhXk.roa
File: YXjtlgxa4cCwgnKvOPV0_-hHhXk.roa (raw, json)
Hash identifier: j3UbXfQdYKaEIcAcKYTCTRvTASy9VfDAzGM94IIzXuU=
Subject key identifier: 61:78:ED:96:0C:5A:E1:C0:B0:82:72:AF:38:F5:74:FF:E8:47:85:79
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 114A28ED
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/YXjtlgxa4cCwgnKvOPV0_-hHhXk.roa
Signing time: Sat 01 Jan 2022 00:51:50 +0000
ROA not before: Sat 01 Jan 2022 00:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197297
IP address blocks: 185.163.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290072813 (0x114a28ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jan 1 00:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6178ed960c5ae1c0b08272af38f574ffe8478579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:5e:a1:10:2a:df:ce:ff:de:e9:78:af:43:
da:24:58:08:1a:02:5b:76:11:05:e1:60:c2:9a:50:
d6:8b:95:21:e1:12:b8:f0:dd:4e:f0:97:07:bc:9c:
a7:86:62:0f:c1:d9:10:16:17:f0:53:94:5d:90:86:
ea:fc:bc:79:7b:53:18:18:64:33:d2:b1:f6:df:d5:
88:71:7c:f1:ca:e5:31:91:62:42:70:c9:92:0f:a4:
c5:0d:a7:1d:54:78:5d:ae:9f:e5:59:78:9f:74:4f:
66:c0:59:bb:49:ea:43:11:40:ff:5f:8d:8a:82:74:
f2:1f:ff:59:c9:0c:82:35:48:56:1b:93:41:f4:4b:
8f:79:f2:c9:0b:24:55:3a:24:72:0d:d6:e0:58:f9:
a5:a0:c4:e3:62:68:bc:b8:ae:ec:c0:fe:b5:be:12:
ef:c9:82:f1:35:76:bf:82:c4:20:dc:c8:01:43:2d:
e7:0a:69:e8:5b:fc:75:71:8b:60:a6:06:d6:5b:d8:
b9:8f:27:68:2d:51:f6:40:8c:03:c9:5b:7c:a9:c8:
74:58:2c:c3:79:fe:bd:7f:12:71:72:12:76:7c:da:
de:3f:e9:e5:8f:18:ab:57:8f:d6:37:5a:f7:02:ad:
d1:d1:d5:80:27:b0:0f:86:1f:17:1e:e0:4b:a0:03:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:78:ED:96:0C:5A:E1:C0:B0:82:72:AF:38:F5:74:FF:E8:47:85:79
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/YXjtlgxa4cCwgnKvOPV0_-hHhXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:78:d6:0c:18:51:b0:8c:1e:11:2f:c1:9e:5c:81:77:29:ae:
e8:15:79:15:b3:9d:c8:61:d6:ca:0c:75:13:ba:11:eb:36:a9:
07:3c:f4:88:18:54:2f:52:62:7a:09:49:38:22:e2:c3:d2:1d:
36:60:55:bf:39:81:18:ac:8c:cd:bc:43:77:e9:cc:45:2f:25:
13:fd:f5:5a:16:c6:e4:50:e3:21:7a:11:1b:d4:0e:25:48:b4:
13:bb:8f:5a:df:f2:a4:83:6b:e2:37:13:86:e6:b4:d6:0e:40:
96:c6:85:5d:0a:c4:d1:51:5c:1f:05:f1:2b:23:b1:8a:c7:2c:
f7:6e:67:ad:d5:ed:37:dc:e5:b0:38:a4:cc:cc:b3:69:47:29:
5c:3b:85:62:fb:31:95:ea:a3:38:d6:37:9d:80:5e:ef:db:ea:
b6:51:05:f5:20:d3:5e:78:93:85:ae:7a:e2:7b:47:38:41:83:
f8:c0:77:1a:1a:b9:07:ed:85:ab:25:b1:a0:a4:f9:2f:8b:bf:
d4:4a:38:88:ac:e3:ce:35:8b:c3:f5:8f:17:c4:32:7f:ab:8e:
5d:f2:7f:5c:b3:76:1b:b8:b8:34:52:26:54:9c:61:ee:59:e5:
e6:6a:17:25:d5:6d:af:c4:50:05:18:e3:e7:6e:f8:a5:f8:3c:
ce:98:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:22 2025 by rpki-client