Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tKm6YyIozGzQSeNdaQyP5Xg8PoA.roa
File: tKm6YyIozGzQSeNdaQyP5Xg8PoA.roa (raw, json)
Hash identifier: vrcl+lYufnSbaxgcS/zPOzv9EbqK4RZz9XV0TflTNSI=
Subject key identifier: B4:A9:BA:63:22:28:CC:6C:D0:49:E3:5D:69:0C:8F:E5:78:3C:3E:80
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018A22A51BC7189E1986176F16B0ECCE7B81
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tKm6YyIozGzQSeNdaQyP5Xg8PoA.roa
Signing time: Wed 23 Aug 2023 13:46:00 +0000
ROA not before: Wed 23 Aug 2023 13:46:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.160.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:a5:1b:c7:18:9e:19:86:17:6f:16:b0:ec:ce:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 23 13:46:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4a9ba632228cc6cd049e35d690c8fe5783c3e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:14:95:0e:a0:ad:d0:f2:43:40:93:a1:3f:
30:8e:0e:3f:07:db:a3:b1:24:9b:04:67:3d:4d:9e:
fc:e9:a7:97:c4:75:59:48:9c:62:94:b3:68:fc:3d:
ac:b7:aa:a7:d1:45:d8:d9:67:95:fe:89:e3:b3:d6:
1b:22:79:57:07:4f:68:64:c7:17:0b:b7:4e:69:ea:
53:59:be:e4:f1:42:e5:f9:5a:3e:8f:fc:12:3c:41:
c9:3d:00:5a:35:1d:c2:6b:96:4b:cf:d7:7c:6d:00:
db:7d:96:b8:e6:6d:32:82:27:7a:3a:17:c6:cb:2f:
ca:44:c5:05:5f:67:c2:e8:b6:69:c2:21:2e:fb:4b:
ae:f5:65:96:ed:f6:45:3a:3c:29:8f:25:c7:db:49:
15:5c:2c:fe:b5:6c:6f:cb:5a:ce:a3:ef:5d:19:bb:
8e:27:6c:3e:40:66:08:5d:8c:11:84:24:c5:0e:e9:
4c:72:45:fd:8f:a7:38:23:63:14:26:32:55:58:f3:
77:ab:28:ca:7a:fa:a6:a8:2a:b9:c3:71:9c:a6:bf:
6c:7c:40:6b:de:3d:f3:6e:27:72:8f:1c:1d:71:b7:
10:ec:0c:b7:a4:18:a9:c6:72:16:33:47:dd:43:01:
7d:30:b2:ac:68:05:f1:06:02:ed:ed:04:0d:c0:60:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:BA:63:22:28:CC:6C:D0:49:E3:5D:69:0C:8F:E5:78:3C:3E:80
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tKm6YyIozGzQSeNdaQyP5Xg8PoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0f:ce:71:6d:1c:92:87:c3:1c:90:9b:be:1e:b2:0f:2c:95:
1b:0d:b5:18:2d:27:5f:12:a0:6c:58:1a:a4:38:2a:cf:6d:e3:
f3:9f:98:4a:38:1b:34:89:cb:3d:03:5a:21:29:d2:74:20:27:
e5:99:80:c4:38:2e:58:57:96:80:47:84:d6:fa:87:67:38:94:
10:3b:80:f5:a3:20:88:df:7b:66:dc:10:e6:22:40:56:f2:f1:
6f:ec:b3:96:8f:9d:36:ed:82:b6:f8:1e:dd:44:3a:43:75:11:
9e:2f:e1:5e:5d:8a:6b:51:07:61:36:bd:31:21:53:62:e3:85:
f9:37:3d:63:69:1d:77:dd:97:37:42:bb:d7:89:f7:b3:27:5a:
d7:0c:da:94:2f:23:56:ed:99:23:6f:f2:5d:14:45:08:d6:35:
4f:05:6b:97:a6:a0:d7:7b:05:11:21:7b:52:a6:59:89:f4:37:
f7:fc:7d:93:7d:c4:b6:d1:d1:04:49:bf:1e:75:35:74:48:b6:
e5:43:7b:cc:b0:c6:ed:06:12:55:8e:aa:4b:b2:66:cd:50:22:
98:66:8d:2b:ef:6f:25:ce:ee:1a:c0:19:ba:3e:6a:ac:08:60:
44:ed:3b:d2:5a:15:58:d3:32:b9:87:10:1a:40:bb:b9:9d:a3:
51:93:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:22 2025 by rpki-client