Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/g1qxMCkT2U_p2O_PKm0QmwNuUGQ.roa
File: g1qxMCkT2U_p2O_PKm0QmwNuUGQ.roa (raw, json)
Hash identifier: f2Rk4RXriN5GTT3p//LvlxeKzSUoQBB7Z6mMOt4Aaek=
Subject key identifier: 83:5A:B1:30:29:13:D9:4F:E9:D8:EF:CF:2A:6D:10:9B:03:6E:50:64
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0188B3811E0F3F5C9202E3793ADDC82957EE
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/g1qxMCkT2U_p2O_PKm0QmwNuUGQ.roa
Signing time: Tue 13 Jun 2023 06:46:03 +0000
ROA not before: Tue 13 Jun 2023 06:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 185.160.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:81:1e:0f:3f:5c:92:02:e3:79:3a:dd:c8:29:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 13 06:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835ab1302913d94fe9d8efcf2a6d109b036e5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:ea:72:1a:c1:6e:a5:aa:04:49:7f:43:bd:
8e:9c:b4:a5:53:79:98:ce:3b:2f:61:76:1a:c7:9a:
58:c9:22:11:cf:a1:ee:06:55:48:54:e6:73:17:1a:
80:ee:af:02:9e:86:72:10:53:a7:97:33:7b:2f:7a:
f9:ca:ac:00:f1:ac:d2:c1:e7:97:8e:55:c4:cf:39:
56:d1:b2:19:95:01:63:ca:30:31:cc:1b:5c:ab:5b:
c1:05:f1:90:06:5d:2c:1f:f7:b6:93:dc:ff:a6:a1:
2d:4c:1a:de:c4:d4:b2:a8:6d:8a:a1:6f:51:48:ac:
dc:50:7a:77:38:ab:87:28:b3:b7:6f:93:66:7c:dc:
de:0d:7d:05:b7:2a:11:e0:22:8b:f2:76:8c:d7:a2:
7c:72:0e:b5:28:8f:e5:40:b7:1b:16:83:03:9b:2e:
bf:57:ac:39:4d:71:d5:fa:d0:67:65:f7:ee:db:90:
2a:9f:0d:fc:42:81:fc:0a:79:3b:e5:42:c4:7e:ab:
1d:d2:98:14:a1:05:c0:8c:85:21:7b:cb:ad:44:a0:
e6:8a:01:1a:a4:23:af:4a:a8:3e:e4:5e:06:f7:41:
17:40:7b:b6:7e:d7:38:10:ee:64:2f:04:e5:13:82:
04:09:ed:df:19:9a:13:67:48:71:91:02:82:a2:5d:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:B1:30:29:13:D9:4F:E9:D8:EF:CF:2A:6D:10:9B:03:6E:50:64
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/g1qxMCkT2U_p2O_PKm0QmwNuUGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
58:90:8d:9f:1b:19:d2:c1:7a:00:92:b5:1c:58:62:1c:c9:ad:
6b:8f:a3:e0:40:03:4b:c5:1d:12:39:56:d6:64:23:05:c7:f3:
5f:b7:d0:a5:ef:06:3a:22:fb:6a:3a:7b:37:bf:14:d9:54:d4:
49:4f:bc:2c:89:b5:bf:59:2f:05:d4:de:c3:33:7f:bd:9f:74:
b3:d2:2c:48:7a:d2:80:9d:73:83:54:80:05:aa:f8:c8:25:0b:
34:77:59:0d:5a:24:08:78:ab:ea:d0:6b:75:3d:76:6a:8c:ae:
e3:3c:3d:29:f6:21:34:8d:1e:00:28:fe:d9:7b:83:3c:c1:75:
81:3c:9a:fa:95:07:f9:29:80:c9:99:1c:5b:0d:f7:a3:34:ba:
a3:a8:19:ba:fa:2d:94:74:6f:b7:8b:16:a7:6f:8e:a8:fa:d0:
cc:4e:78:c1:42:b8:8f:dc:8e:4a:82:67:10:39:35:f9:14:13:
47:28:53:08:81:ec:f8:3d:f3:15:01:b9:d8:0c:15:d8:6c:f5:
b3:8f:2e:05:7f:d6:11:66:d7:a5:c3:f7:09:1a:af:22:ff:0d:
59:0c:38:4b:47:0c:ff:5f:9c:43:9f:52:e8:b9:ca:86:18:3a:
a2:47:ec:a4:f9:4b:6b:a7:2f:51:e1:1f:1c:58:73:06:74:84:
8f:0e:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:32 2025 by rpki-client