Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/7Hn6YBrviCItH8hzGe5sv6wrTBQ.roa
File: 7Hn6YBrviCItH8hzGe5sv6wrTBQ.roa (raw, json)
Hash identifier: QOJ7fX9sT0MZFYUQinrYUo7yWqm4H55KnV1vGsmQQV4=
Subject key identifier: EC:79:FA:60:1A:EF:88:22:2D:1F:C8:73:19:EE:6C:BF:AC:2B:4C:14
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 01856E6F8C6E852C3AF38968EF29D6BF3A06
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/7Hn6YBrviCItH8hzGe5sv6wrTBQ.roa
Signing time: Sun 01 Jan 2023 17:44:42 +0000
ROA not before: Sun 01 Jan 2023 17:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.55.188.0/24 maxlen: 24
185.55.190.0/24 maxlen: 24
185.55.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:8c:6e:85:2c:3a:f3:89:68:ef:29:d6:bf:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 1 17:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec79fa601aef88222d1fc87319ee6cbfac2b4c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:3e:c2:cc:ac:81:96:6e:1a:a5:f2:19:e1:
b1:0a:d3:ae:6c:3b:d3:af:34:76:d5:4d:3d:49:6b:
25:ab:d9:89:24:9c:2c:35:d4:db:c6:6f:dc:58:1c:
88:40:ab:0e:f2:c3:a4:31:ae:89:36:f3:09:d3:29:
a3:b7:43:af:16:89:fe:69:78:1a:58:c2:76:5a:9c:
08:61:52:af:7b:5e:1b:23:3f:db:20:e5:e6:0c:64:
f7:d5:0e:30:02:2c:58:84:72:c2:80:c3:86:28:f6:
9f:73:3f:66:c8:2f:42:7c:64:53:31:77:f7:61:6b:
a7:ed:f3:01:a7:26:68:da:1e:2a:b5:81:63:f2:2f:
0c:a7:7e:71:8b:18:1f:57:37:e4:6c:e3:39:dd:e6:
51:01:52:6e:fc:25:ee:02:cd:e7:67:61:b9:be:ca:
ac:7a:24:5a:18:5b:d1:3e:75:7b:d1:b6:aa:d2:b3:
85:78:ef:49:84:99:bb:3f:fe:5e:03:dd:51:dd:f9:
ac:3c:25:c4:d2:a9:a4:62:df:ae:a0:78:9f:24:98:
37:04:ea:0f:24:fd:1e:cd:36:80:b0:15:fa:e9:28:
e8:38:4b:51:82:70:11:a4:6d:4f:ae:95:02:50:83:
93:90:ee:a5:f2:1a:5f:2f:7d:a5:28:1b:b6:3a:ba:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:FA:60:1A:EF:88:22:2D:1F:C8:73:19:EE:6C:BF:AC:2B:4C:14
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/7Hn6YBrviCItH8hzGe5sv6wrTBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.188.0/24
185.55.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:57:c3:b9:d0:03:e0:9e:a1:1f:5f:de:06:1c:9e:0f:92:34:
49:8f:e4:bd:27:7a:99:bf:c1:01:3b:06:a2:33:56:ce:9f:3e:
9b:75:3a:6e:79:38:dd:d6:f5:a1:66:92:78:44:35:31:1d:e6:
af:62:d2:ad:f6:dc:a6:d0:25:dd:c9:c7:83:d3:fd:be:10:4f:
38:6d:73:bc:c5:95:e7:37:d5:e0:bd:9a:60:86:a3:8c:b1:16:
f4:86:20:c7:6a:40:0d:ba:eb:c3:1b:aa:fc:9c:19:93:df:0a:
73:22:07:4f:fc:15:dc:1b:ac:3c:1c:49:21:ad:2c:c9:63:52:
68:e4:7e:d7:09:86:f3:6b:50:d5:38:f0:98:a8:b1:4e:1c:be:
3e:05:d0:55:f9:c7:4a:52:81:95:88:32:f3:18:a4:65:91:13:
59:14:e8:8d:50:ac:2f:13:de:71:0b:77:4a:0b:54:d0:09:10:
75:ff:90:35:19:ff:2e:35:74:9c:63:b0:e6:cb:bc:37:d9:c8:
a5:c1:e5:d6:25:9f:66:91:6c:f8:54:0a:18:6b:4a:1f:a4:65:
53:56:d2:69:c1:1b:35:0a:29:2e:ae:ef:b6:4c:1c:0b:83:61:
24:df:19:ad:fe:80:2a:b7:89:e1:32:1e:f9:f0:dc:80:72:f7:
f1:28:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:14 2025 by rpki-client