Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/F0OVtGp0TVYQkinIUUb1y9mX7Ko.roa
File: F0OVtGp0TVYQkinIUUb1y9mX7Ko.roa (raw, json)
Hash identifier: sjzoMzFCSVc6MRSZLzgYKya74lICI1csE49ITYoQ8Pk=
Subject key identifier: 17:43:95:B4:6A:74:4D:56:10:92:29:C8:51:46:F5:CB:D9:97:EC:AA
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 0188F4CCB81EAA4382444525DDA12E003D78
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/F0OVtGp0TVYQkinIUUb1y9mX7Ko.roa
Signing time: Sun 25 Jun 2023 23:03:57 +0000
ROA not before: Sun 25 Jun 2023 23:03:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210182
IP address blocks: 185.250.112.0/24 maxlen: 24
185.250.112.0/22 maxlen: 22
185.250.114.0/24 maxlen: 24
185.250.113.0/24 maxlen: 24
185.250.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f4:cc:b8:1e:aa:43:82:44:45:25:dd:a1:2e:00:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Jun 25 23:03:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174395b46a744d56109229c85146f5cbd997ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:fa:d9:71:9d:03:2b:5d:40:0b:73:0a:c7:
42:43:72:9c:47:09:10:1a:86:ae:5d:84:12:95:65:
76:d4:f6:82:77:dc:15:b9:e3:e4:87:ac:f4:c0:d5:
f3:05:c0:d6:52:8c:2a:e3:88:ce:94:0a:e5:2f:7a:
e2:28:02:3f:b7:80:3e:2a:f4:86:35:9b:59:cf:9f:
53:66:87:a2:00:97:98:84:9d:d6:27:5b:aa:e5:18:
c1:76:0d:0e:2a:e5:32:a4:da:53:cf:fe:76:4a:8f:
02:eb:9e:6f:e1:41:01:d3:c0:20:9a:2f:8f:a7:a9:
a7:9e:82:c1:12:38:94:28:e5:42:b5:f9:19:2b:94:
b2:6f:e2:fb:ed:b7:6b:9e:09:14:67:80:e0:ab:de:
f1:e9:fa:65:62:55:18:4b:73:5e:fb:6f:4f:f3:ed:
7a:a5:67:c2:3f:f0:95:22:34:09:62:f1:0a:b1:b9:
2c:57:ef:db:ab:ca:a7:ee:18:ae:bc:30:6b:05:24:
45:ea:e5:51:b7:6a:44:fd:eb:47:51:2e:e3:75:67:
42:7d:48:07:0c:c6:fa:f5:46:07:3a:67:a2:0d:72:
10:5d:28:50:33:61:eb:c2:3a:74:bd:2a:4f:5d:67:
de:f9:ca:3e:7d:cb:ab:44:77:b7:10:1a:05:fc:17:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:95:B4:6A:74:4D:56:10:92:29:C8:51:46:F5:CB:D9:97:EC:AA
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/F0OVtGp0TVYQkinIUUb1y9mX7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.112.0/22
Signature Algorithm: sha256WithRSAEncryption
35:00:ec:51:57:8c:e2:fe:15:03:0b:8a:eb:27:26:da:bb:31:
01:41:8a:99:7d:cb:6a:fe:f7:dd:7f:74:1b:2e:a2:9e:3f:6f:
6f:c9:c7:48:00:70:9e:5f:f4:59:41:bd:78:8b:2c:07:fe:88:
c7:10:f8:df:dd:32:75:69:40:fa:12:91:42:a7:ac:9d:e0:da:
51:20:e8:05:e1:28:75:e1:35:b7:1f:cb:47:7c:4d:4e:3a:7f:
dc:a7:5f:3a:5b:21:f9:0e:c8:72:33:ff:a5:7d:38:fc:ca:6c:
e4:95:4c:c7:fe:8f:5e:3e:88:ec:3a:0f:4d:27:1d:f8:aa:5e:
9f:1e:c5:50:d1:4d:02:99:21:75:b1:b2:25:82:1c:00:93:6e:
0f:6b:a4:8e:83:97:f5:d8:e4:a3:8c:c5:67:46:cc:0e:44:17:
1e:c2:8a:68:0b:4e:54:32:24:4d:ea:8f:8b:7a:37:6f:f9:cb:
fa:9a:d3:b7:6b:35:b3:5d:43:c9:0a:b0:3f:5e:e4:0e:c0:02:
19:5a:5e:55:5a:0f:d2:65:f1:5c:d4:b4:78:ff:77:29:79:45:
8a:89:04:c8:8a:f5:31:2e:df:1e:86:ba:d8:78:b8:da:c6:ff:
36:f6:c8:77:41:11:ab:ee:6a:ea:9d:fa:26:dd:af:d9:fc:fa:
17:02:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:12 2025 by rpki-client