Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/AVzCsVi56gnO_KAOPcM8yksELQ0.roa
File: AVzCsVi56gnO_KAOPcM8yksELQ0.roa (raw, json)
Hash identifier: K/DEM6/H8qd9EDPSGbqOPY/1iWCR72urzPJ/myj+bNk=
Subject key identifier: 01:5C:C2:B1:58:B9:EA:09:CE:FC:A0:0E:3D:C3:3C:CA:4B:04:2D:0D
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0185C08F5EF5A6A39D9854BB3D8266AAE7C2
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/AVzCsVi56gnO_KAOPcM8yksELQ0.roa
Signing time: Tue 17 Jan 2023 16:28:19 +0000
ROA not before: Tue 17 Jan 2023 16:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 185.133.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:8f:5e:f5:a6:a3:9d:98:54:bb:3d:82:66:aa:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jan 17 16:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015cc2b158b9ea09cefca00e3dc33cca4b042d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:16:9d:27:87:5d:af:84:53:a6:a5:29:a2:
d3:d1:c6:9a:48:8e:0e:34:92:82:23:ed:31:84:e3:
bf:ba:3e:eb:ae:07:e0:19:af:56:17:9b:97:91:6e:
b2:ea:c4:d9:a1:53:05:2d:23:5b:80:14:5a:a6:41:
c0:51:61:2e:06:c5:13:01:35:b1:e8:eb:f9:b3:91:
75:55:eb:06:2b:d2:b8:38:cc:89:95:1b:1f:ca:c4:
8e:93:4f:04:79:17:ae:89:27:f4:df:ee:8a:07:59:
b5:39:36:7e:c8:b4:88:2a:12:6d:41:0d:22:d3:f4:
7c:7e:d6:4b:9e:d6:e8:12:73:d0:1e:bf:a2:d1:84:
ea:96:c4:8a:7d:3e:72:34:40:0f:2d:a7:f9:35:e8:
36:96:64:8f:26:ff:4c:69:ce:f3:35:ca:35:98:6c:
97:59:64:db:6c:3f:4a:9f:dd:36:b5:3d:78:4a:28:
8a:68:1d:2e:76:36:ac:07:70:d1:74:59:0a:0d:14:
25:be:c5:bf:57:80:cb:aa:2b:df:b9:1c:dd:36:eb:
fe:e2:6c:2b:05:ee:52:01:e9:71:1d:e9:47:9c:a1:
fe:eb:7b:34:e3:e7:d2:45:68:6b:34:db:70:9d:18:
35:cf:6c:72:58:b9:63:6c:07:52:c4:c4:fc:9d:a2:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:C2:B1:58:B9:EA:09:CE:FC:A0:0E:3D:C3:3C:CA:4B:04:2D:0D
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/AVzCsVi56gnO_KAOPcM8yksELQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c3:c8:12:f3:28:df:50:f4:38:7a:3c:80:82:bf:41:ce:eb:
c7:0f:c9:50:de:5a:9e:9a:e2:16:8d:d3:fc:2e:8e:71:81:15:
b8:0d:a6:21:9c:da:7c:de:32:8b:67:18:d6:04:69:43:5d:3e:
32:70:06:cd:20:71:d2:59:06:61:0a:20:7e:2c:cf:b2:59:c2:
27:df:4b:3f:e4:73:e1:55:b3:fa:a7:e9:b3:c8:f4:ea:98:1d:
7c:ce:88:b8:02:24:a8:aa:44:54:9d:90:f8:3a:64:14:1a:78:
8e:e0:55:d1:59:f1:b0:15:61:1b:02:c6:c8:09:67:e4:7c:06:
cf:6f:c0:b8:c6:47:65:fc:00:ce:9b:a6:8d:fd:ed:8e:38:c0:
9f:92:96:65:5a:28:31:1b:f7:17:a4:2c:dd:a0:1b:96:07:a3:
2f:d7:73:17:b3:e7:aa:4c:f1:4c:ef:75:a4:1a:c1:2a:06:60:
cb:36:10:a8:40:bb:56:15:7b:fd:90:02:94:e2:15:df:00:f2:
fe:9a:37:97:87:70:3c:6f:e9:87:18:74:6b:63:87:28:b0:b8:
5e:1a:1e:fe:ea:0e:88:f2:dd:3a:43:20:5a:f0:b0:4e:5a:71:
15:05:d3:7d:94:86:7a:97:9e:94:8a:91:32:e7:f6:ae:1a:f1:
75:38:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:39 2025 by rpki-client