Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/5O8GORk9G1tu98boZuFIuS95cPs.roa
File: 5O8GORk9G1tu98boZuFIuS95cPs.roa (raw, json)
Hash identifier: M/4fWEw3B/kUkvoVlILsAUwVaqbjYjlj/ck2sdx6TSw=
Subject key identifier: E4:EF:06:39:19:3D:1B:5B:6E:F7:C6:E8:66:E1:48:B9:2F:79:70:FB
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 01856D53C0E2884448AEF5D0E44DFC2628E8
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/5O8GORk9G1tu98boZuFIuS95cPs.roa
Signing time: Sun 01 Jan 2023 12:34:43 +0000
ROA not before: Sun 01 Jan 2023 12:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35325
IP address blocks: 194.187.152.0/23 maxlen: 23
194.187.152.0/22 maxlen: 22
194.187.154.0/23 maxlen: 23
193.239.234.0/23 maxlen: 23
185.208.228.0/23 maxlen: 23
185.208.228.0/22 maxlen: 22
185.208.230.0/23 maxlen: 23
2a0c:3a80::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:c0:e2:88:44:48:ae:f5:d0:e4:4d:fc:26:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jan 1 12:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ef0639193d1b5b6ef7c6e866e148b92f7970fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:b2:81:bc:f0:9b:80:9e:ee:f1:46:83:1f:
8f:d9:e3:03:a9:92:71:37:8e:d5:90:6a:54:b4:d3:
cb:20:7c:54:63:b3:34:91:2d:a5:56:08:99:6e:ab:
ff:6c:61:53:b9:06:62:1f:f0:a1:37:d9:2c:f8:e3:
a0:25:60:39:42:88:26:f0:5f:56:fc:7b:74:e0:5a:
e5:4e:55:eb:ac:4a:0d:42:12:d0:4e:e4:d0:1b:27:
ac:6b:3a:b0:f3:86:2b:74:64:3b:9e:6c:7f:3e:0f:
d4:85:28:eb:e9:80:bd:93:56:9e:88:9e:18:98:33:
55:d4:66:fd:8f:bf:70:de:cb:c8:55:38:75:2b:8b:
e7:88:e5:99:93:0f:38:a0:d2:3a:c4:e7:e2:07:fc:
9b:20:bc:a1:08:71:80:9d:b2:f7:0d:8a:89:81:6b:
d0:34:26:d4:e7:62:db:29:18:51:28:00:66:0f:65:
36:79:94:ed:0a:33:b7:85:c5:e9:e3:96:c6:cd:2a:
10:5c:87:b7:b8:d3:93:70:02:50:09:2d:c1:17:21:
20:51:6c:14:0b:e5:9e:fb:79:6f:a4:51:52:ba:f2:
a8:f9:c2:ab:ae:4d:ee:95:0c:9c:94:17:cf:6a:7b:
c5:5f:5d:44:43:e4:7c:ad:12:13:a2:d7:2d:f1:48:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:06:39:19:3D:1B:5B:6E:F7:C6:E8:66:E1:48:B9:2F:79:70:FB
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/5O8GORk9G1tu98boZuFIuS95cPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.228.0/22
193.239.234.0/23
194.187.152.0/22
IPv6:
2a0c:3a80::/40
Signature Algorithm: sha256WithRSAEncryption
28:25:85:4d:86:a1:ad:d6:25:d2:43:21:69:05:f1:8d:22:e8:
87:3c:26:a3:35:8e:58:99:08:dd:2c:77:ca:5b:26:78:32:19:
7a:3f:55:de:c6:11:81:43:60:9f:83:68:c8:16:67:6b:bd:aa:
02:b6:47:3f:29:30:58:ac:33:4d:69:43:d5:f9:cc:fe:fa:6e:
ac:3a:8b:7d:f8:3e:76:bb:9a:c3:87:c5:a7:c8:94:ad:d5:9f:
e7:08:07:b5:3b:df:e6:b7:07:2f:75:2b:47:96:77:4c:e7:c8:
eb:62:b5:68:2c:dd:0f:61:c9:ea:40:5d:41:c9:02:4a:8d:4b:
d5:e5:de:8d:f4:a4:2a:f6:7d:f1:47:01:96:bc:74:9f:3e:4e:
67:78:b3:45:77:08:df:a9:ed:b2:18:bd:40:ff:72:72:ba:cf:
00:03:9b:1a:d9:83:e5:1a:aa:e1:89:11:ad:04:c9:de:ee:a8:
a8:53:bf:85:2c:81:52:71:86:f5:3f:b6:71:63:4a:f6:71:92:
46:c4:29:e5:80:24:32:ff:f7:c2:62:35:b0:1f:20:05:45:f6:
ff:67:cb:fd:2f:3f:a6:b8:68:88:83:b0:89:b9:05:52:3d:e8:
a0:70:a8:a8:86:d8:0c:53:70:8a:84:fd:aa:6d:e4:55:d7:56:
20:81:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:56 2025 by rpki-client