Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/AB9s3GvAP5c-jhY0GRL3BSWqYDY.roa
File: AB9s3GvAP5c-jhY0GRL3BSWqYDY.roa (raw, json)
Hash identifier: nqm4Wk39cQrei1YDwMmMET+PxrwAmaIYwITFywFScI4=
Subject key identifier: 00:1F:6C:DC:6B:C0:3F:97:3E:8E:16:34:19:12:F7:05:25:AA:60:36
Certificate issuer: /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial: 059F10CB
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/AB9s3GvAP5c-jhY0GRL3BSWqYDY.roa
Signing time: Sat 01 Jan 2022 14:02:28 +0000
ROA not before: Sat 01 Jan 2022 14:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206859
IP address blocks: 185.173.252.0/22 maxlen: 22
2a0b:7500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94310603 (0x59f10cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Validity
Not Before: Jan 1 14:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=001f6cdc6bc03f973e8e16341912f70525aa6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:dc:b4:53:c0:fc:46:b0:35:70:46:99:6a:
82:dd:46:61:fa:3e:df:aa:e6:77:c8:34:80:71:d9:
b2:ef:a2:66:43:52:9e:3c:fc:6b:a4:3f:3a:57:9e:
12:b1:14:28:5f:0c:73:aa:9c:eb:4a:15:0a:0f:ab:
2f:a5:48:fd:e8:54:db:6a:73:e0:ce:2f:76:f4:c9:
0e:ff:96:bd:d4:87:2a:2c:a2:3e:fd:98:6f:9e:0b:
61:9e:d3:41:38:7a:e8:3a:a7:f2:97:20:d6:db:89:
50:5f:16:d5:c4:93:d1:ec:f0:6a:16:2f:44:5a:f0:
95:0d:48:43:be:f2:47:58:75:06:31:54:ba:1e:bb:
1f:b5:0a:2b:cc:59:b2:a4:76:4c:d2:07:86:0c:cd:
9d:e8:34:10:7e:fa:f1:05:be:f4:f0:93:39:e0:97:
1b:aa:55:d5:d0:4f:38:c0:54:ee:8c:c6:eb:a4:e2:
e4:c5:30:60:1e:6f:68:42:55:dd:a6:71:8d:01:4f:
84:08:1d:2a:5b:12:a9:4c:98:a7:f9:46:12:fa:31:
81:18:53:db:61:8e:65:39:de:90:91:5b:db:65:7a:
73:6a:73:f4:42:24:5e:44:fa:07:2f:cc:73:80:ff:
62:d0:2b:b4:af:75:68:44:ff:6c:cf:55:56:d7:cd:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:6C:DC:6B:C0:3F:97:3E:8E:16:34:19:12:F7:05:25:AA:60:36
X509v3 Authority Key Identifier:
keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/AB9s3GvAP5c-jhY0GRL3BSWqYDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.252.0/22
IPv6:
2a0b:7500::/29
Signature Algorithm: sha256WithRSAEncryption
57:d4:3d:99:89:fd:4e:af:01:4c:c1:08:f1:9e:75:70:ab:0e:
71:cf:76:3f:ee:73:6d:ee:42:48:04:5d:f7:dd:a8:d1:5c:33:
0e:87:f9:fd:58:6a:52:3e:3e:37:50:0c:60:34:43:5e:66:1e:
e7:87:97:b6:f7:29:73:e4:86:43:03:b1:04:1f:3c:fd:a9:90:
e1:88:83:b6:d0:65:08:96:35:ac:25:d2:67:8f:1a:1a:4c:20:
55:07:ea:a0:00:9c:1a:ac:83:3f:e3:17:d1:a9:3d:e2:0e:58:
3d:dc:03:f2:c5:30:62:3c:a2:76:c1:ba:94:91:7f:6e:84:9a:
35:46:ad:54:29:91:d8:33:d3:94:0d:c4:50:31:84:0d:65:da:
d6:77:1c:b8:0b:63:12:df:8f:31:7b:b5:d3:1d:78:91:cf:d2:
3e:48:15:5c:7f:70:58:3a:b8:4b:0a:f6:49:4f:7b:3e:3b:50:
c5:29:c7:d3:ce:00:11:af:5c:8c:d0:d6:6e:6b:d8:f1:fc:3c:
cd:e7:c6:44:78:9c:4c:7d:e9:fa:0a:84:ed:09:56:6a:8c:0e:
4f:34:c8:96:b1:27:ef:f5:e4:ed:1b:47:aa:9e:77:4d:d9:1e:
65:73:d0:ec:cf:ee:e2:2d:df:eb:ec:64:c8:17:96:15:96:a1:
2f:c5:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:55 2025 by rpki-client