Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/49GlvpnHINLS8XIv8D23YyS_XfA.roa
File: 49GlvpnHINLS8XIv8D23YyS_XfA.roa (raw, json)
Hash identifier: BR35vb60Jif1plRfHPbpTKIbnqcQ46w+AFU6geQZE7c=
Subject key identifier: E3:D1:A5:BE:99:C7:20:D2:D2:F1:72:2F:F0:3D:B7:63:24:BF:5D:F0
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 018572C39170E93EEE90F98C6D58ED15717F
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/49GlvpnHINLS8XIv8D23YyS_XfA.roa
Signing time: Mon 02 Jan 2023 13:54:57 +0000
ROA not before: Mon 02 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15704
IP address blocks: 185.252.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:91:70:e9:3e:ee:90:f9:8c:6d:58:ed:15:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jan 2 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d1a5be99c720d2d2f1722ff03db76324bf5df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:a4:bd:22:1e:cf:8b:88:e8:2d:6f:ed:c5:
6a:dc:28:af:94:c9:fd:e4:50:b6:c6:d0:8d:42:94:
e6:19:0d:28:66:9c:cf:94:34:b0:73:02:b9:ae:58:
5a:f4:12:70:f6:13:68:8f:62:24:9b:7b:2d:dd:0e:
0a:68:01:92:47:ae:f9:96:81:d6:e5:7b:b5:f8:6a:
b6:de:86:7b:05:30:27:ef:a1:d0:07:6e:a9:2f:68:
7e:44:5f:d5:58:03:ad:4f:30:37:34:94:c3:51:38:
f9:30:ac:ad:14:05:f4:d7:45:37:e3:c5:98:96:32:
f1:a6:ea:1c:47:c2:ce:7e:46:c0:15:e5:86:dc:6f:
c4:5e:b4:43:ec:a0:fb:36:dd:80:24:db:c8:5c:03:
b3:14:d7:97:00:9e:19:6b:91:db:4d:22:1f:49:9c:
3f:ab:ff:42:43:38:8a:98:16:a5:df:ac:96:2d:40:
b3:77:c8:4a:da:ce:d8:56:82:13:2a:a9:7f:51:1c:
bf:7b:17:63:77:72:ff:bb:79:69:76:7d:00:7a:45:
10:e5:2e:b3:8c:05:6d:4a:f2:2b:73:8b:f8:d9:ea:
7d:59:06:94:73:dc:99:26:27:37:cb:18:ec:b9:28:
a4:7f:ec:58:07:03:8a:fa:04:90:93:cc:53:30:ce:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:A5:BE:99:C7:20:D2:D2:F1:72:2F:F0:3D:B7:63:24:BF:5D:F0
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/49GlvpnHINLS8XIv8D23YyS_XfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:27:66:37:29:8d:86:9f:d9:40:ba:c6:b6:fa:e4:8a:cf:84:
8f:6a:96:cb:31:4e:47:a6:e2:f0:b3:77:1b:e1:64:10:e4:f5:
dc:de:11:01:9a:29:42:8f:28:20:6f:a1:a5:6f:05:e7:c7:a4:
cc:22:55:81:5e:45:24:52:d2:86:7b:2e:1d:69:7a:a1:44:1a:
51:27:98:e6:b2:51:34:a2:f2:c0:b5:2d:ca:ae:fa:01:33:70:
56:e7:e3:03:78:e6:46:bc:80:fa:50:cd:85:30:ab:00:56:d1:
c1:58:b1:08:8d:23:0c:a2:60:1e:8c:45:28:e8:9e:c1:6b:4e:
d9:0e:10:38:8f:fe:f6:90:5b:0d:00:7e:35:29:ae:34:cb:e1:
4f:58:50:e0:b3:1b:9b:df:92:6d:cb:3c:5f:4b:12:61:26:70:
11:f5:88:1e:dd:d1:ae:75:29:1e:71:90:a9:79:e2:78:d1:02:
0c:22:f0:8e:62:cb:90:f2:39:f5:62:7d:fc:31:34:94:58:7d:
72:ea:46:34:f7:f0:aa:a2:5c:43:6d:b4:7c:aa:77:88:7a:95:
56:d2:42:c1:63:32:ea:5d:5b:e0:43:c7:c4:20:31:ff:de:84:
47:37:f1:7a:43:86:00:b2:ed:49:15:09:a4:e7:0e:fd:a7:8f:
21:1f:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:47 2025 by rpki-client