Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/P4jpDmJ-0K7ySrl4ANKWkoezZkk.roa
File: P4jpDmJ-0K7ySrl4ANKWkoezZkk.roa (raw, json)
Hash identifier: B+mj47uMMcL3lG0jK0gMUlvGUKL9yeE//PnaGXw6Ywk=
Subject key identifier: 3F:88:E9:0E:62:7E:D0:AE:F2:4A:B9:78:00:D2:96:92:87:B3:66:49
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 018571B0C21D6BD5C1DA86014050A1BD7C87
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/P4jpDmJ-0K7ySrl4ANKWkoezZkk.roa
Signing time: Mon 02 Jan 2023 08:54:47 +0000
ROA not before: Mon 02 Jan 2023 08:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204979
IP address blocks: 185.234.0.0/22 maxlen: 22
185.234.0.0/24 maxlen: 24
2a01:40:4949::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:c2:1d:6b:d5:c1:da:86:01:40:50:a1:bd:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jan 2 08:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f88e90e627ed0aef24ab97800d2969287b36649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:45:63:4f:a7:7d:03:96:7c:80:03:6b:a8:
7e:4f:72:58:59:a8:26:d1:a5:af:90:3a:20:d4:11:
ed:3e:38:68:fb:e6:f2:2d:90:b6:90:cf:42:b2:18:
ef:9d:a6:d5:8f:c2:3a:b7:ef:2a:ef:b5:ff:33:94:
af:87:f4:98:68:87:b3:a7:0d:42:2e:16:cb:ea:29:
c4:e2:b0:de:8a:a6:b2:6d:51:c6:9e:a4:80:8f:6b:
89:60:13:aa:b3:ad:89:2f:43:e2:a3:6e:07:d8:52:
9a:f7:ab:46:57:c2:5d:6d:94:c5:91:ef:fa:cd:26:
63:f3:65:3a:dc:7a:de:c8:1a:21:da:5a:32:12:b3:
13:5f:db:a3:84:27:a7:f1:27:da:d1:39:a2:bd:81:
b4:00:d6:1b:55:ab:e5:33:78:9e:88:b0:9b:de:ad:
19:d3:d3:3b:5e:35:44:a8:d3:db:bc:cb:5d:f1:13:
37:5b:8b:a4:a8:19:f2:fa:08:dd:7c:32:a6:ee:48:
07:77:25:88:04:7f:85:08:4c:05:df:3c:56:80:c7:
ef:77:50:67:f0:ec:6e:a6:13:3b:a8:31:a3:09:17:
da:1a:88:13:bd:68:37:6a:2d:8e:ce:09:55:94:c5:
dc:1d:4c:dd:9e:7a:ee:5f:b9:55:f5:81:eb:8d:fd:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:E9:0E:62:7E:D0:AE:F2:4A:B9:78:00:D2:96:92:87:B3:66:49
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/P4jpDmJ-0K7ySrl4ANKWkoezZkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.0.0/22
IPv6:
2a01:40:4949::/48
Signature Algorithm: sha256WithRSAEncryption
6b:6e:04:5b:9d:41:36:a6:1e:1a:26:79:63:85:2b:65:63:e3:
37:3d:82:cc:74:e1:06:73:55:a2:91:b0:5c:b2:57:78:ff:15:
78:14:a0:fd:25:ea:05:da:9a:42:b7:ad:b8:ba:5b:66:81:81:
37:2b:8c:86:06:12:06:bc:18:89:9b:9f:c9:86:6e:65:42:f4:
a5:c9:70:2e:13:1d:f4:45:7c:bc:3c:99:3a:99:62:79:79:e4:
71:a7:89:da:a5:3f:fb:69:cd:c3:00:5a:79:30:a8:1e:1e:d7:
0b:0a:fd:c8:62:f0:da:12:02:5a:2f:1b:5b:1d:38:5a:15:36:
34:a2:0b:6d:e0:b4:42:03:0a:74:2b:93:0b:68:04:f0:d8:c2:
68:6c:59:08:93:44:97:d9:05:9d:82:c8:2f:bb:95:c8:2f:74:
f5:f7:fb:bc:10:7e:70:0c:a1:f5:29:43:c5:7d:3e:4c:00:62:
44:e5:3d:0d:ff:21:e8:9d:b5:89:c2:f6:b7:ea:50:47:ad:11:
94:97:0f:35:28:99:5b:ef:a4:31:14:97:7d:58:e1:3b:6f:db:
f6:0d:0a:18:8d:78:56:4f:51:97:49:b5:88:4c:7a:76:26:ed:
dd:a9:f2:15:2f:a5:38:46:7f:7d:3a:db:64:f0:04:c0:d5:84:
2e:26:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:46 2025 by rpki-client