Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/c-ydaKmZVDobkYV3K7Yu4ioSSFs.roa
File: c-ydaKmZVDobkYV3K7Yu4ioSSFs.roa (raw, json)
Hash identifier: aMnfbic8pwKHaOj/BCEbZ3tYmCMck2E5LpScFQR5FtE=
Subject key identifier: 73:EC:9D:68:A9:99:54:3A:1B:91:85:77:2B:B6:2E:E2:2A:12:48:5B
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 01856C53EFADCC70A51EB21E54DB526FD4BA
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/c-ydaKmZVDobkYV3K7Yu4ioSSFs.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200470
IP address blocks: 185.104.103.0/24 maxlen: 24
185.104.100.0/23 maxlen: 23
185.104.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ef:ad:cc:70:a5:1e:b2:1e:54:db:52:6f:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ec9d68a999543a1b9185772bb62ee22a12485b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:59:36:68:e2:b1:e1:a4:df:3d:92:22:40:
e2:58:87:fb:ad:f3:3f:7f:34:0a:76:7a:db:d9:09:
41:e3:14:6c:7a:1e:6a:e4:c7:f2:63:1f:59:f4:c4:
d1:9c:6e:83:fc:71:f0:95:09:23:b3:1e:1b:ea:12:
8c:88:bc:46:ca:03:b2:2b:11:8d:78:ef:cc:e1:37:
88:77:8e:4d:5a:79:f0:07:d8:cb:13:f0:77:8e:5f:
df:43:49:90:18:6a:ce:3d:b7:96:af:e6:43:3c:18:
73:fe:78:f1:bf:ea:8d:e3:f3:b3:dc:11:4e:cc:09:
61:2a:ee:47:bb:70:6c:f3:13:97:d0:59:09:46:2e:
d7:41:41:a0:68:16:71:7e:01:39:4e:9a:35:a1:5f:
82:cf:dd:7c:a0:0b:e9:88:ae:f7:aa:77:74:48:46:
46:3a:58:fe:ad:ee:ed:d8:c0:de:cf:c4:e1:23:29:
35:44:54:cf:86:85:54:42:02:f6:62:32:3e:e6:bc:
05:8e:35:e8:9e:7c:7f:38:8f:92:8a:5a:3c:a4:e1:
75:1b:0f:74:cc:d7:dc:41:a8:84:37:1d:cd:75:ef:
f5:10:dc:38:c2:37:cf:0b:23:ee:21:68:c0:dd:b4:
b8:52:91:8e:b7:c8:88:e0:22:f1:88:65:e0:af:88:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:9D:68:A9:99:54:3A:1B:91:85:77:2B:B6:2E:E2:2A:12:48:5B
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/c-ydaKmZVDobkYV3K7Yu4ioSSFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:19:a3:26:72:64:a6:c5:3f:c4:dc:d3:04:ba:9a:d6:a3:74:
09:c4:55:58:4b:e6:5a:da:70:26:9a:a9:17:f8:89:34:3d:63:
e2:ad:06:ea:68:8b:0d:7b:23:56:14:84:c2:b7:ed:68:e1:a6:
b1:e9:c0:59:79:b0:34:bf:c6:f3:5a:d2:bf:62:93:6e:5f:82:
5c:4e:06:98:72:79:4f:10:1e:3c:fb:b0:8e:6f:fd:69:06:27:
68:8e:00:2f:23:98:d7:45:bd:a2:0a:95:ac:91:55:4c:76:f0:
a2:ce:76:7f:08:b1:50:db:e0:ae:79:06:f5:52:b1:7e:d6:55:
ed:24:be:f7:0b:94:6b:12:3f:21:83:de:95:21:92:e3:0b:68:
c4:ce:35:4f:32:28:a8:0c:d9:e0:1a:cb:f0:69:e9:86:11:08:
91:14:e5:2a:1f:94:5f:6b:38:04:ff:0d:a4:e3:83:f5:d9:44:
48:5a:40:17:49:6c:10:ca:7f:3e:9c:90:6a:f1:aa:87:54:c2:
72:20:24:50:0a:6a:96:29:6f:2a:71:c7:c6:c3:47:bf:a8:5d:
44:88:de:f8:ca:37:e8:14:55:01:15:f1:ff:85:22:16:23:55:
db:17:04:70:67:49:44:9d:7a:4f:8e:6f:ec:7f:fa:5e:19:be:
66:79:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:41 2025 by rpki-client