Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/umSpDg88v1Fo6ukhk4k9Ub7yOgQ.roa
File: umSpDg88v1Fo6ukhk4k9Ub7yOgQ.roa (raw, json)
Hash identifier: J+sZ2TRwbGVoIRTtOaQvRo6MlZ6/LZiDF7twEoKpsMI=
Subject key identifier: BA:64:A9:0E:0F:3C:BF:51:68:EA:E9:21:93:89:3D:51:BE:F2:3A:04
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C95F126A9D2BCBBBDC5AA4ECDC6C9EE5E
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/umSpDg88v1Fo6ukhk4k9Ub7yOgQ.roa
Signing time: Sat 23 Dec 2023 09:10:58 +0000
ROA not before: Sat 23 Dec 2023 09:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 185.100.171.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:95:f1:26:a9:d2:bc:bb:bd:c5:aa:4e:cd:c6:c9:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 23 09:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba64a90e0f3cbf5168eae92193893d51bef23a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:f3:84:c1:3c:58:a2:9e:58:b0:63:82:2f:
19:b3:7a:17:f5:42:95:49:57:c9:e8:dd:58:ce:38:
b7:ef:3a:e6:e9:9f:df:96:4b:b8:99:c2:ba:11:6a:
f2:96:ec:ff:35:fe:3d:b9:82:14:13:4a:10:7e:56:
69:7b:1d:45:84:44:5a:80:b0:c8:3c:95:ff:9a:c9:
b1:dc:0a:cf:f2:7e:da:cd:18:54:69:67:76:80:59:
c6:2a:cf:a1:73:d1:6b:a4:e4:55:12:12:0b:f1:89:
da:7a:ef:83:9d:2f:6a:5c:9e:f0:ca:06:f7:db:df:
29:16:e2:d2:f7:9a:92:59:36:eb:6c:2f:0e:41:b7:
26:0c:50:06:16:71:a3:b9:60:2d:e8:7e:8e:d9:1d:
3e:76:b3:5e:78:3e:ce:57:77:9f:e9:31:93:ad:66:
0c:2c:ef:7f:62:42:ed:1b:fb:5d:63:f0:cc:d7:24:
9d:14:38:4b:88:1c:53:88:46:eb:a9:52:36:4c:e8:
d5:2f:34:f8:f5:65:17:3f:99:ca:0c:f2:cb:25:0f:
2a:91:99:30:65:dc:a6:9d:03:cb:c6:f7:37:0c:1b:
00:35:80:2b:4b:d2:42:82:0a:fb:f8:11:52:ba:51:
cd:7a:04:7c:27:87:54:67:e0:c3:97:7e:63:d4:84:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:A9:0E:0F:3C:BF:51:68:EA:E9:21:93:89:3D:51:BE:F2:3A:04
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/umSpDg88v1Fo6ukhk4k9Ub7yOgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.171.0/24
185.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
74:05:26:6b:f3:a6:c4:ca:5a:6b:6c:0a:ba:23:d1:fa:da:f9:
3b:35:c0:7c:84:c5:c9:ce:c0:c9:f8:0e:5a:58:34:ea:79:06:
f0:2d:74:2f:ef:7f:98:23:eb:a6:7c:ad:b1:1e:c2:1f:99:13:
b6:fa:09:23:2d:dd:b9:0b:c4:13:1a:c0:76:fc:7f:18:c9:7a:
e4:2d:b6:f0:1c:c0:ba:83:f9:12:1c:d4:08:8e:ac:a6:0f:de:
7b:17:0c:ff:8c:36:2b:5c:ee:31:94:6e:1e:9a:db:2e:22:7f:
be:f8:67:a8:92:64:22:ad:bd:44:07:5c:6f:cb:ae:90:fe:70:
98:21:bd:c6:fd:ea:cb:e9:9d:6a:cb:db:a1:1f:f5:1d:fd:ab:
6b:f8:22:b9:d9:fe:20:22:98:0e:6b:8d:73:03:5e:b4:bb:40:
f0:df:f4:11:ea:9c:e1:e8:d3:60:13:3b:9b:a6:0b:fc:81:81:
4f:b1:0f:6b:eb:0a:75:49:e9:a2:1a:63:ab:e7:87:5a:a9:05:
6b:c3:32:61:f5:b3:0c:f6:2b:40:46:59:00:f8:ae:8e:98:f0:
0d:ae:eb:e9:39:79:33:12:0e:7e:f9:91:0d:06:5a:d7:e2:86:
6a:40:eb:90:af:10:8f:89:6d:23:2b:2d:2b:5e:99:04:25:c1:
37:80:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:39 2025 by rpki-client