Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/7xJk_uhJfkEGe6MRBq96ECB2wHc.roa
File: 7xJk_uhJfkEGe6MRBq96ECB2wHc.roa (raw, json)
Hash identifier: FKc2uzSU2vvax82gt/YOpcfDDX5dowjJcmFqfsj5+vw=
Subject key identifier: EF:12:64:FE:E8:49:7E:41:06:7B:A3:11:06:AF:7A:10:20:76:C0:77
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 01856D5CE33BCAF6A94D7665B30C1B9260B1
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/7xJk_uhJfkEGe6MRBq96ECB2wHc.roa
Signing time: Sun 01 Jan 2023 12:44:41 +0000
ROA not before: Sun 01 Jan 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57000
IP address blocks: 185.143.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:e3:3b:ca:f6:a9:4d:76:65:b3:0c:1b:92:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jan 1 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef1264fee8497e41067ba31106af7a102076c077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:f5:41:e2:11:2f:31:6b:a7:8a:0a:24:87:
f9:7f:62:58:cf:4c:aa:61:74:be:ef:7a:0e:b7:8c:
a9:c3:4e:e4:81:fa:9c:0c:29:be:9f:7a:be:f5:67:
06:4c:06:d7:31:b1:43:e0:82:75:e1:16:6b:84:92:
60:b4:e6:2d:b1:d9:7d:0e:64:85:3d:c5:95:7f:6b:
ad:4b:31:6b:fb:50:f7:20:2c:8d:cb:7f:1b:35:9a:
a9:0a:18:8a:73:61:66:a5:a5:6c:b4:14:92:19:e0:
8e:ce:14:b5:db:54:3f:5c:6d:e3:d5:24:33:e9:7d:
da:13:72:db:3f:5d:4f:82:46:b4:87:87:c0:91:ae:
55:d0:18:f6:f1:24:41:eb:86:f3:27:c1:30:fb:f9:
82:2c:59:11:44:99:a6:c0:01:da:09:de:6c:8a:f6:
56:ee:81:06:f9:be:30:fd:3f:db:72:a0:52:23:39:
1c:3b:3d:88:1d:57:14:bd:b9:18:fa:be:89:d3:a9:
81:cb:2c:d8:72:8f:8b:01:b9:e7:4a:af:cf:0b:c3:
94:55:2b:f7:11:f1:6e:36:0c:81:37:a2:1a:8d:4f:
fc:99:cd:31:90:28:31:c5:41:24:42:16:93:5b:56:
3e:1b:6d:4b:0c:27:5c:f8:52:05:ab:0d:c3:13:e0:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:64:FE:E8:49:7E:41:06:7B:A3:11:06:AF:7A:10:20:76:C0:77
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/7xJk_uhJfkEGe6MRBq96ECB2wHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.42.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8c:ef:ab:15:43:54:db:56:85:7a:83:21:86:e9:56:c8:22:
76:4d:3c:e2:ed:60:82:44:48:ff:ea:58:57:11:48:01:c3:57:
fa:8e:c4:ee:e5:f7:a9:2d:d5:ca:d7:64:74:0d:32:1c:6c:41:
06:73:6b:29:c4:b2:ae:b2:7b:0d:2f:e0:6d:7d:3a:13:e5:99:
e4:ce:22:8a:29:ea:f5:ad:bd:8b:32:36:25:bf:64:ac:05:1a:
05:67:35:17:da:f5:01:5f:99:80:d9:09:21:b6:60:84:36:19:
01:6f:6f:09:f3:11:d7:dc:95:94:2b:ea:f5:fa:52:17:d8:8f:
b7:bb:d0:5f:af:46:d4:42:31:fb:15:ec:6f:b8:08:1e:c4:e6:
8a:32:f5:89:60:34:f0:95:18:dd:14:51:a5:f2:f7:c3:08:12:
5b:64:13:98:1c:d9:52:16:69:60:ce:be:f6:10:65:9f:79:2f:
6b:e0:f9:31:bd:b9:6f:52:08:bd:c7:34:d3:a6:e2:51:98:38:
a1:e8:23:29:02:7b:bb:18:c7:65:e2:39:63:c4:17:c6:78:6a:
9d:d5:e9:dc:63:a7:58:6e:4e:52:e4:73:31:d0:62:58:f5:41:
19:e4:a4:41:71:cb:19:7c:a9:c8:eb:bb:71:9e:83:77:9b:0e:
5f:8e:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:04 2025 by rpki-client