Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/bFtXaCGN0fjKQnOaXDmTgVr_SMw.roa
File: bFtXaCGN0fjKQnOaXDmTgVr_SMw.roa (raw, json)
Hash identifier: HdX6aOCDX2jDRDIo/ZlcCuf/ILE0dOriGdy7i0M+ow8=
Subject key identifier: 6C:5B:57:68:21:8D:D1:F8:CA:42:73:9A:5C:39:93:81:5A:FF:48:CC
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018A0096E915624CC0AB0043E91D073105AC
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/bFtXaCGN0fjKQnOaXDmTgVr_SMw.roa
Signing time: Wed 16 Aug 2023 23:03:24 +0000
ROA not before: Wed 16 Aug 2023 23:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29522
IP address blocks: 185.140.120.0/22 maxlen: 24
194.60.251.0/24 maxlen: 24
195.149.224.0/21 maxlen: 24
94.152.0.0/16 maxlen: 24
185.11.100.0/22 maxlen: 24
94.152.255.0/24 maxlen: 24
94.152.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:96:e9:15:62:4c:c0:ab:00:43:e9:1d:07:31:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Aug 16 23:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5b5768218dd1f8ca42739a5c3993815aff48cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:aa:e0:33:1c:36:00:55:f5:46:77:32:43:
ae:8c:bf:2f:cc:89:6e:87:7a:f0:e8:d1:c2:47:8f:
3a:e8:c5:60:47:c2:97:c2:e3:0c:7a:f1:a7:d9:a1:
b8:db:1a:7e:3c:3c:c9:29:54:88:bb:0f:af:26:9a:
e9:c6:93:61:eb:3e:d4:c6:f7:e8:21:7a:f2:37:f7:
08:b1:63:9a:e1:fc:79:6c:50:0e:fb:fb:b7:b9:eb:
7a:c8:3b:f8:38:b3:1a:75:c4:8b:49:c3:57:b9:ea:
f1:54:56:c1:89:21:ae:5d:66:d7:63:f1:a5:de:59:
34:f3:ff:ca:e0:cc:a2:21:9b:86:08:e5:88:4c:7e:
db:10:95:55:06:9d:77:e9:31:9a:b1:be:9a:6a:60:
08:cb:47:20:b6:0c:c4:f9:e4:3b:17:43:aa:db:8a:
a3:ac:d3:65:c1:8c:ce:de:ba:ea:cb:4d:3b:87:10:
c0:80:5a:c9:b5:23:c4:ce:dd:8f:93:5a:0d:9a:55:
e0:99:b1:2b:c4:5e:8b:f0:86:16:d9:cd:e1:aa:44:
83:c3:df:5e:0b:66:8f:85:b4:e1:05:de:d3:8f:9a:
5e:73:52:a9:03:b1:b0:33:1a:a8:fc:fb:10:b7:93:
9e:5e:9d:50:54:cc:86:d6:4a:99:6b:09:6e:e4:e3:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:57:68:21:8D:D1:F8:CA:42:73:9A:5C:39:93:81:5A:FF:48:CC
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/bFtXaCGN0fjKQnOaXDmTgVr_SMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.152.0.0/16
185.11.100.0/22
185.140.120.0/22
194.60.251.0/24
195.149.224.0/21
Signature Algorithm: sha256WithRSAEncryption
17:8f:63:e7:c3:7c:ab:3f:67:d8:6c:23:81:ed:5d:cb:65:e3:
03:89:f5:7a:8f:e5:4d:13:3f:d0:a8:f3:24:25:55:ed:50:ff:
79:ba:1c:c2:9d:a3:bc:95:37:27:e6:0d:72:10:1d:f2:99:d6:
04:fc:b3:64:82:4d:66:a1:76:0d:b3:ce:cf:99:f2:62:87:a4:
e6:62:98:e8:fe:55:d6:5e:69:88:c4:0c:ef:0b:60:c5:68:95:
72:9d:b6:a6:1f:db:11:72:16:53:7b:bd:6e:1a:8d:82:2b:be:
92:6f:05:42:97:15:29:c0:2c:04:cb:81:56:dc:4d:a5:c4:b1:
2f:86:51:98:c7:af:fe:33:fe:4a:95:80:cd:f0:9d:08:f3:07:
ed:25:87:d0:60:04:09:8d:55:bd:63:e0:e0:3e:c6:72:a3:b3:
b8:49:9b:dc:a1:0f:ff:c0:52:4e:3c:d5:5e:cc:e0:4d:56:c1:
f5:55:74:70:f7:19:d9:08:26:3e:d6:89:b8:d6:eb:43:fc:ae:
39:0c:c4:84:36:8c:5f:d2:96:08:a3:60:bf:6d:17:b3:52:c4:
50:d3:96:57:a8:34:39:e3:d2:9c:b9:80:d8:c2:37:9c:10:58:
55:0b:ca:eb:60:14:50:5a:a4:ef:94:67:a7:48:68:df:a4:98:
0c:25:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:06:18 2025 by rpki-client