Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/L251QbewWhe07cuSwwsoTjjnwJo.roa
File: L251QbewWhe07cuSwwsoTjjnwJo.roa (raw, json)
Hash identifier: 6UD2vpS9OoIk4ZnP37QQVQ/jZACvDAIHlJB+aUOjWsQ=
Subject key identifier: 2F:6E:75:41:B7:B0:5A:17:B4:ED:CB:92:C3:0B:28:4E:38:E7:C0:9A
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01856FC279A77F3E5FE4DC8AB99D76D63209
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/L251QbewWhe07cuSwwsoTjjnwJo.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202907
IP address blocks: 185.150.144.0/22 maxlen: 22
2a07:7140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:79:a7:7f:3e:5f:e4:dc:8a:b9:9d:76:d6:32:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6e7541b7b05a17b4edcb92c30b284e38e7c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:51:31:92:72:d7:fd:88:ed:33:6f:cf:d7:
3c:8f:d2:98:d9:ec:86:3e:2c:b2:9f:ad:00:ca:7f:
55:3a:09:fb:40:11:56:d6:6a:42:87:c7:fd:b3:d3:
38:91:93:93:18:d6:04:95:33:ca:40:01:1c:d1:30:
d2:09:10:70:ae:59:b1:85:82:01:4f:e8:29:97:0b:
05:a7:c8:85:29:04:e7:51:e7:da:18:d2:b8:36:a7:
78:76:15:6a:02:13:4b:62:86:8e:c8:03:0d:d6:e6:
f9:4e:55:c6:71:00:58:77:ab:e7:7c:f4:1b:e1:dc:
60:d1:b3:4a:05:79:4f:86:6a:f0:cb:55:8f:7e:a8:
d8:cc:d9:19:13:d9:3b:19:b0:d3:4b:fd:42:44:09:
c9:83:ab:05:f8:7d:c2:dc:0a:a6:55:fe:55:7d:1d:
b8:bc:0c:b3:b5:6a:0d:57:31:f5:4f:65:b3:94:c1:
18:2e:0e:dc:e1:3e:1a:27:ce:83:e4:71:20:81:6c:
7b:1d:86:8d:f4:63:77:4c:d4:0b:60:35:87:67:72:
32:dd:d8:91:c6:a6:ab:ba:68:df:86:58:0c:a7:7c:
13:e2:e0:11:e0:45:b6:11:8c:5d:3a:b1:1b:50:3b:
24:2d:c1:c2:72:2f:ef:dc:55:16:4d:fc:99:4d:31:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:75:41:B7:B0:5A:17:B4:ED:CB:92:C3:0B:28:4E:38:E7:C0:9A
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/L251QbewWhe07cuSwwsoTjjnwJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.144.0/22
IPv6:
2a07:7140::/29
Signature Algorithm: sha256WithRSAEncryption
46:f3:26:fb:a8:83:6e:fb:09:e5:c1:92:bd:2e:0a:1a:9f:be:
b0:c3:0f:4b:60:f8:4f:84:ec:48:63:36:2b:b3:90:2e:dd:4b:
ba:37:f0:74:18:73:70:aa:a4:03:5f:4b:35:73:83:fd:19:42:
f6:c1:70:c4:f8:c1:97:79:70:61:7e:f8:6d:46:7c:32:92:98:
56:32:dd:60:3d:0c:02:2a:16:c5:f2:0f:f0:6f:48:93:cb:61:
57:e9:90:4a:fb:99:c6:52:d6:54:78:c4:34:65:0b:19:4d:ab:
ba:6a:15:2d:73:93:d4:18:88:14:b5:52:c6:af:27:69:0c:63:
1a:99:a5:dc:51:05:ff:5f:19:4e:fc:6e:fe:19:31:67:bd:4b:
48:10:cb:f1:1e:ad:be:2b:2f:08:ee:88:13:a8:ec:ad:26:a2:
5e:4c:11:97:f5:de:97:db:44:4c:c6:74:77:5e:e7:52:aa:45:
d4:30:36:33:46:97:f4:8c:b8:4e:14:21:85:2d:4a:4b:63:d6:
9d:8d:7c:b1:52:03:d6:26:5c:a8:ba:6e:f4:e1:99:c6:c0:54:
74:a5:59:94:c3:12:62:c9:af:ba:0f:05:3f:6b:a9:5d:92:f8:
d0:e6:99:20:6d:8d:ad:6e:63:09:e1:fe:41:a1:3b:34:68:79:
15:80:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:00 2025 by rpki-client