Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/sewQklWwU4HifiwZxfI8DrhC7m8.roa
File: sewQklWwU4HifiwZxfI8DrhC7m8.roa (raw, json)
Hash identifier: oHL7MsyJXQktcYBH1zc2By24ngH84PGvfuf5DAFElS4=
Subject key identifier: B1:EC:10:92:55:B0:53:81:E2:7E:2C:19:C5:F2:3C:0E:B8:42:EE:6F
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 0328860C
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/sewQklWwU4HifiwZxfI8DrhC7m8.roa
Signing time: Thu 10 Feb 2022 10:50:07 +0000
ROA not before: Thu 10 Feb 2022 10:50:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.55.190.0/24 maxlen: 24
185.55.188.0/24 maxlen: 24
185.55.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52987404 (0x328860c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Feb 10 10:50:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1ec109255b05381e27e2c19c5f23c0eb842ee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:9a:f2:42:cc:f1:b2:e8:b9:dc:a5:6b:0d:
18:cb:83:57:bf:b7:76:ee:38:72:c9:ca:96:6e:2c:
01:c7:86:21:4a:67:e0:5a:b0:66:c9:bd:1c:79:1a:
ca:55:76:f6:c1:15:59:c3:1a:19:1c:e5:04:12:88:
7e:40:46:52:d8:29:29:cc:0d:33:c3:52:e5:1d:31:
86:b1:6d:22:25:c1:a4:d3:bb:ee:23:87:60:d5:41:
bf:76:66:18:20:40:50:4d:f7:17:94:e7:60:fa:df:
dc:88:a2:93:70:fc:b8:00:3e:15:92:15:8a:b6:4f:
b0:b6:30:7d:aa:23:f4:3b:41:6c:d0:da:9c:1b:d1:
fa:0e:0c:b4:9e:ca:b7:77:b7:3b:31:a3:80:07:4a:
04:0f:de:51:ce:eb:b5:5e:73:4c:53:bd:ec:61:67:
9c:fb:b8:73:ae:6a:99:25:6d:1c:d7:f7:8a:10:ab:
3e:bc:c6:d8:9d:23:9c:42:74:c5:aa:ef:c1:95:45:
75:d3:f3:3e:65:90:30:bf:ac:9a:41:f9:36:00:9d:
60:23:b8:ed:5c:48:f5:af:9f:29:de:9b:54:9f:bd:
cf:36:7a:34:f7:6e:e5:27:da:05:5d:5d:93:03:d8:
c6:23:f7:c2:c3:b6:e6:a8:ea:4b:92:65:16:9a:71:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:10:92:55:B0:53:81:E2:7E:2C:19:C5:F2:3C:0E:B8:42:EE:6F
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/sewQklWwU4HifiwZxfI8DrhC7m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.188.0/24
185.55.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:46:14:a9:a7:d7:40:89:d9:8a:c3:e1:ba:a9:95:9f:b9:0e:
2e:95:78:b3:00:a6:d3:81:6d:d4:3d:44:f4:c9:d0:de:d5:88:
b9:dc:cf:43:80:dd:00:73:f5:90:71:f8:c3:b3:11:1f:96:49:
22:0a:c8:1c:ea:33:72:c6:1a:38:f5:dc:8e:74:b1:fe:39:92:
7e:ef:4b:25:e0:7d:9d:0e:6c:4c:09:29:e7:5b:e8:34:65:94:
0c:f5:ae:08:29:4b:9a:ac:0d:90:c3:5b:43:a3:75:a6:4a:6f:
55:47:63:63:9f:52:22:ac:af:dc:c4:44:c5:97:2c:cb:b8:a8:
90:6c:91:94:17:51:ca:c6:a1:b7:49:d3:9a:c5:a7:f8:66:b2:
a1:65:80:a5:ee:e7:ae:00:8c:79:d2:9b:71:dd:d5:d7:a3:8b:
05:b6:85:75:3e:57:ea:5d:e5:17:5d:49:83:c8:c0:f0:63:ec:
63:51:e4:8e:ae:df:91:ce:c8:e8:eb:88:4d:f6:3f:95:1c:e8:
be:f6:36:18:bb:58:24:82:87:da:b6:89:10:c4:a9:07:4d:d0:
58:8b:93:b2:df:1b:b9:2c:5d:72:57:81:b6:b4:9c:e4:68:f9:
7e:ad:bf:3e:4e:b8:a4:86:dd:43:5c:c7:bd:d5:5f:da:a8:e6:
41:50:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:49 2025 by rpki-client