Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/9sqO8r4inuWnU8iG4_ZlBgad6XM.roa
File: 9sqO8r4inuWnU8iG4_ZlBgad6XM.roa (raw, json)
Hash identifier: 20AAeobdtW9Db+DcZt4/4Peq6GsjEI5yzsUX9rh1Nhk=
Subject key identifier: F6:CA:8E:F2:BE:22:9E:E5:A7:53:C8:86:E3:F6:65:06:06:9D:E9:73
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01856B9C82D0679B0B61E9D1AB1A1C1FC2EB
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/9sqO8r4inuWnU8iG4_ZlBgad6XM.roa
Signing time: Sun 01 Jan 2023 04:34:57 +0000
ROA not before: Sun 01 Jan 2023 04:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 185.67.101.0/24 maxlen: 24
185.132.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:82:d0:67:9b:0b:61:e9:d1:ab:1a:1c:1f:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 1 04:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6ca8ef2be229ee5a753c886e3f66506069de973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:3f:ef:9a:57:22:c0:ab:4a:9a:83:39:0c:
c4:cc:3c:2a:2d:16:cf:8f:41:bf:62:34:fb:6d:25:
97:10:7a:99:f3:0b:83:41:c6:89:e4:70:57:3e:d1:
65:ab:cf:47:e4:c0:74:37:be:5e:07:2d:bd:83:1a:
83:b5:eb:5d:cb:07:57:f8:24:4a:8f:8c:a3:32:09:
3b:20:20:a5:18:99:4b:22:8b:5e:bb:e2:1d:66:75:
e2:ca:aa:d1:62:81:c6:32:5a:35:e1:cb:8a:f1:17:
8c:04:fa:1d:b2:6e:27:f3:69:c3:f4:6a:f8:31:74:
35:0a:af:0d:18:b3:9b:5c:ac:ba:4d:14:33:82:33:
07:2d:ee:ac:98:c2:a0:3b:31:33:11:72:f6:46:fc:
46:da:cd:27:9a:68:3f:f1:5d:91:a7:b3:a2:c9:9e:
3f:af:7c:3d:b0:b4:fd:a2:5d:07:43:f7:72:8b:ff:
76:60:84:9d:4d:d3:8a:67:0c:af:cd:33:3a:d5:43:
03:02:b4:9b:f7:ae:31:78:e2:05:9a:a6:d7:26:4d:
4e:9b:2a:bc:32:82:58:fa:89:ec:f2:e4:e4:c4:c4:
5f:64:8f:1c:4a:23:74:64:d9:b9:4b:b8:5b:52:11:
82:5d:30:5f:09:cc:12:97:95:d8:b4:ea:75:45:1e:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:8E:F2:BE:22:9E:E5:A7:53:C8:86:E3:F6:65:06:06:9D:E9:73
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/9sqO8r4inuWnU8iG4_ZlBgad6XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.101.0/24
185.132.82.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f4:0a:e7:b3:ad:87:30:bc:4e:a0:1b:75:2e:e4:92:84:a7:
4a:91:2a:12:8b:20:a6:58:5c:1f:21:2f:22:b6:3d:eb:3a:55:
ba:8d:99:1f:a5:cb:e0:8e:06:b8:08:f7:a7:53:63:6f:28:06:
80:7e:b2:fb:98:d0:e3:39:2a:44:54:de:87:fc:e4:de:de:7c:
00:20:64:ea:52:17:83:73:cf:97:9a:9f:f6:39:ee:02:87:e5:
70:e6:39:b2:8f:ad:6e:f3:fd:f2:d2:fd:39:6c:82:f1:e0:30:
f3:ea:67:36:38:79:24:fc:33:fe:1f:62:09:0b:03:53:f4:33:
1d:de:e5:bb:42:0f:ab:23:e7:8a:d9:88:81:75:3c:98:33:62:
d3:4e:a6:4f:96:36:49:b0:c4:98:87:e1:ed:2d:cb:a5:3f:b2:
87:d9:05:b6:cb:41:c4:07:a7:b9:06:30:83:f8:83:64:0b:d9:
e8:df:5e:3a:a2:08:f0:ae:01:e6:ac:57:4e:ac:bf:21:20:9e:
16:0a:88:8f:f0:c2:9c:6b:1d:4b:c0:23:01:9e:5f:e4:ce:6c:
21:88:ce:f1:50:d5:da:e0:da:fa:7f:8d:c7:27:51:e0:51:2a:
86:73:ae:c9:d0:c5:fe:a2:f4:09:fc:43:09:09:cb:fe:2b:ed:
ec:b6:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:52 2025 by rpki-client