Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/b0OHB1Wl5K2WbWD309IAGb_BRaI.roa
File: b0OHB1Wl5K2WbWD309IAGb_BRaI.roa (raw, json)
Hash identifier: Jk9jCZE1oGkbbQhqRhrwBW8cYycAiJM0YdTwUKoWhnM=
Subject key identifier: 6F:43:87:07:55:A5:E4:AD:96:6D:60:F7:D3:D2:00:19:BF:C1:45:A2
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01856DD3FDB1A6171B90C393B3A69CCAFCFB
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/b0OHB1Wl5K2WbWD309IAGb_BRaI.roa
Signing time: Sun 01 Jan 2023 14:54:47 +0000
ROA not before: Sun 01 Jan 2023 14:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 185.243.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:fd:b1:a6:17:1b:90:c3:93:b3:a6:9c:ca:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jan 1 14:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f43870755a5e4ad966d60f7d3d20019bfc145a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:46:79:ea:e3:bc:0f:c4:ec:46:31:43:b2:
54:5b:1f:bd:7b:b2:b2:aa:67:22:4b:2c:33:bb:17:
db:3c:d4:94:b0:e6:77:17:ec:f5:0b:d7:90:dc:cf:
bb:0b:e9:3d:41:cc:f1:a2:37:5c:ee:0f:10:da:dd:
bd:af:d1:c5:45:33:ae:92:07:4d:7e:9f:29:dc:8a:
ce:80:29:97:7e:df:4d:a1:2d:41:96:fa:e6:ef:ab:
47:d9:a9:1a:b7:ce:7b:a5:55:6f:76:e8:e4:8c:3e:
64:18:50:aa:6b:fe:38:be:d9:c5:54:00:46:e3:48:
27:c3:41:62:18:aa:0b:b8:7d:75:7a:e2:6b:34:fa:
6a:96:6d:68:21:8c:e2:9b:af:30:c9:94:e3:84:9d:
15:9d:15:44:37:56:ed:af:80:e2:9e:17:49:dd:a6:
7c:1b:2c:6e:e7:1f:65:86:94:e1:45:7f:63:5d:3b:
54:5a:38:7f:1f:e5:df:b9:28:f2:f6:59:f9:19:15:
74:e5:5f:ca:96:fb:97:7a:18:4a:42:32:83:4b:cb:
07:75:97:a0:37:60:82:09:cb:23:71:1b:59:65:ae:
e8:e0:8f:17:cf:da:e3:1b:5f:0f:3d:b2:66:7e:e5:
a4:2d:c7:86:3a:04:83:7f:3f:a1:67:00:7c:6e:2c:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:87:07:55:A5:E4:AD:96:6D:60:F7:D3:D2:00:19:BF:C1:45:A2
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/b0OHB1Wl5K2WbWD309IAGb_BRaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fb:b9:31:bc:f5:be:68:aa:12:cc:45:eb:17:64:99:6c:bb:
0d:c3:6b:d1:81:5a:b6:4c:02:b8:d8:75:e0:19:58:bc:0a:95:
5f:81:be:ad:42:51:69:ee:95:38:95:dd:b6:96:e9:9d:ce:f0:
cb:f8:c9:9e:6c:65:61:69:ed:d7:1f:37:31:91:c8:2d:20:97:
0c:3e:93:f3:6c:42:af:0f:ba:cc:4a:11:0a:bd:75:0c:ca:40:
d8:59:f9:8e:0d:73:be:80:46:5f:42:08:ed:0b:54:da:06:ae:
ed:d4:c1:78:0c:78:96:7e:e7:9e:1a:52:6e:f1:25:d4:b8:10:
4f:86:36:2e:d3:f2:5d:97:5c:3a:37:89:d4:a2:12:e4:5d:a9:
29:5b:df:d5:00:ba:b6:46:db:69:e1:fe:4c:6e:97:e2:3f:1a:
cb:9c:7d:d9:c1:9b:5e:f7:fc:5c:65:aa:c8:62:55:d9:a2:e1:
8f:d7:c0:18:f5:55:7f:76:7a:46:9b:af:5f:e5:50:df:93:c9:
77:8b:c1:13:58:2c:2b:63:42:a2:28:31:69:20:42:44:4a:58:
85:ac:ba:22:8d:80:e5:d7:be:7d:93:f1:d4:73:95:f1:e2:79:
dd:3a:b9:b8:eb:8e:e8:94:e0:7f:75:0b:ce:78:42:c7:9a:cf:
bc:cc:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:13 2025 by rpki-client