Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/1NLxqyByYhA7LOUQ2FQo6oDh994.roa
File: 1NLxqyByYhA7LOUQ2FQo6oDh994.roa (raw, json)
Hash identifier: YgGHgtjQHXlHLsjIuqvRPL1SLAwLPHHyaNEkA0/F/M4=
Subject key identifier: D4:D2:F1:AB:20:72:62:10:3B:2C:E5:10:D8:54:28:EA:80:E1:F7:DE
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 01845173207AD4232783C7405B0762F977F6
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/1NLxqyByYhA7LOUQ2FQo6oDh994.roa
Signing time: Mon 07 Nov 2022 09:36:50 +0000
ROA not before: Mon 07 Nov 2022 09:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13157
IP address blocks: 185.244.56.0/24 maxlen: 24
185.244.56.0/22 maxlen: 22
62.112.32.0/19 maxlen: 19
2a04:ce40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:73:20:7a:d4:23:27:83:c7:40:5b:07:62:f9:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Nov 7 09:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4d2f1ab207262103b2ce510d85428ea80e1f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:64:ac:b6:4a:8e:73:65:72:b8:ff:aa:c5:
b3:57:8e:4b:ed:1c:70:e9:a2:89:dd:3e:51:04:02:
4d:53:63:a1:6f:5d:7f:d0:2a:42:95:f1:b3:cd:c3:
36:54:27:3c:87:ec:32:b3:f5:38:e1:c3:a9:84:1f:
ac:7c:14:7a:92:31:b9:c7:eb:77:9f:13:65:c7:ad:
3b:2d:3a:63:8b:7f:8a:82:11:bb:13:73:2d:d6:5f:
e7:28:19:15:b2:74:27:bf:9e:cd:90:a0:5a:82:5b:
b4:3c:79:2a:f1:6c:d1:51:1f:01:54:75:e4:25:15:
f9:28:4f:64:be:7d:f3:60:4d:0c:af:3f:4e:72:78:
97:04:68:92:ee:12:a1:05:34:d7:3e:d7:cc:d3:39:
9f:66:08:ad:74:f3:b8:55:4a:5f:9e:0f:e8:51:c8:
ff:c6:d5:6b:a6:07:7a:d0:14:60:37:d2:ff:ed:c9:
a0:80:a5:12:d5:c7:c2:f3:53:82:91:1e:3b:d6:a7:
6b:05:5a:f8:19:e0:90:a6:31:23:8a:96:0a:29:1a:
8f:2a:67:00:40:f3:5b:c2:f3:99:04:b1:8f:1a:00:
3c:4e:3d:21:e4:44:cd:06:ff:16:9f:98:12:ef:8c:
0a:df:62:37:04:9b:d8:40:11:0d:2e:5a:27:3e:08:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:F1:AB:20:72:62:10:3B:2C:E5:10:D8:54:28:EA:80:E1:F7:DE
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/1NLxqyByYhA7LOUQ2FQo6oDh994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.32.0/19
185.244.56.0/22
IPv6:
2a04:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
64:22:85:cf:8d:47:ef:62:e3:ab:5f:73:0a:f1:6f:0b:ed:d5:
18:b9:e3:07:cd:b1:c1:d4:66:c9:f4:76:b3:16:1f:e1:75:0e:
f8:ce:db:fa:d0:9b:c8:17:39:05:8f:06:b4:27:53:e3:1e:f1:
b3:62:87:ec:90:9d:63:47:3d:66:27:e2:72:3e:1c:54:9c:a6:
90:bc:cb:15:1d:0b:1d:8a:c8:1a:18:c6:72:0d:c2:9e:b6:cd:
5a:f0:ff:fd:37:af:f2:bd:de:74:0a:4c:24:56:78:25:b8:8a:
d9:68:b8:93:ca:75:e7:75:c1:65:e9:dd:25:c8:3b:15:a1:50:
63:f9:88:e7:4f:f6:d3:36:8e:98:d9:55:b0:08:45:42:03:c5:
31:5a:e6:90:bd:f3:c7:dc:45:79:88:d9:38:18:08:4d:eb:71:
c4:75:57:96:3b:ed:88:60:f1:01:3d:a7:ac:7d:9b:8b:c7:f3:
a0:ae:f8:9e:b9:40:84:97:54:91:e8:ae:6a:db:ff:0a:5c:f4:
9a:ac:c3:3f:1c:d0:3c:c4:eb:8c:b3:c0:96:70:b1:ea:09:e4:
52:95:e1:01:6c:39:6c:25:78:3a:ed:f3:e6:48:e4:b5:1e:0d:
39:b7:d8:06:ac:7a:04:55:61:42:64:45:34:b5:c1:a8:50:75:
a9:f4:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:47 2025 by rpki-client