Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/3a2qfh4RL3agj9FIz6ID6hnqgQ4.roa
File: 3a2qfh4RL3agj9FIz6ID6hnqgQ4.roa (raw, json)
Hash identifier: tJ6TYhmS2OTEyqq1CbMksj5pyAjWOj47K1Obe2JGHD8=
Subject key identifier: DD:AD:AA:7E:1E:11:2F:76:A0:8F:D1:48:CF:A2:03:EA:19:EA:81:0E
Certificate issuer: /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial: 01852A4ECF00D2E811EE147CE101DC7F41BE
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/3a2qfh4RL3agj9FIz6ID6hnqgQ4.roa
Signing time: Mon 19 Dec 2022 12:14:45 +0000
ROA not before: Mon 19 Dec 2022 12:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211468
IP address blocks: 185.190.38.0/24 maxlen: 24
194.169.166.0/24 maxlen: 24
194.169.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:4e:cf:00:d2:e8:11:ee:14:7c:e1:01:dc:7f:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Validity
Not Before: Dec 19 12:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddadaa7e1e112f76a08fd148cfa203ea19ea810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:5c:c1:cf:c4:12:f6:68:b0:d5:0f:30:74:
9a:b6:ab:98:1e:0a:76:c0:34:41:5c:94:98:be:c5:
76:e8:08:2f:86:95:61:b7:af:48:d7:1e:82:61:69:
00:36:16:4e:60:7d:9b:c0:6d:bd:d2:d6:2d:cf:cd:
9c:a8:8f:9f:77:1a:d5:82:97:ca:9b:b9:d6:c2:da:
1a:19:c9:79:a2:e9:46:10:4a:04:14:0a:16:50:c6:
25:44:3d:5f:24:5f:4b:1f:cc:51:11:10:0c:04:f2:
3d:15:9e:04:7e:3a:e8:7b:d3:f3:53:60:48:d7:8c:
9e:8f:52:71:63:cb:12:ca:96:af:d7:b5:b8:41:04:
c5:31:b0:7b:d2:8b:58:d5:37:b9:1c:e9:5e:b9:37:
e8:3e:f6:59:cd:e1:cb:46:d9:f7:16:2f:0c:22:f0:
1e:94:49:84:7e:0a:ef:87:5a:fa:3d:93:f6:1d:ed:
dd:70:c4:08:3e:45:bc:31:f9:fe:0a:40:12:34:7d:
5d:6f:d5:26:09:80:fd:27:91:8a:5b:77:50:b7:4d:
f2:59:d2:54:f7:cb:ae:5f:bd:81:d1:49:9a:3b:35:
07:34:1d:93:03:e4:2a:50:90:1d:ff:1f:c5:9b:a6:
70:98:24:87:0d:2f:fb:42:5c:80:d7:6d:a5:01:aa:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:AA:7E:1E:11:2F:76:A0:8F:D1:48:CF:A2:03:EA:19:EA:81:0E
X509v3 Authority Key Identifier:
keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/3a2qfh4RL3agj9FIz6ID6hnqgQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.38.0/24
194.169.166.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:11:5e:21:f8:28:b9:f6:1f:2e:48:ec:40:4e:f7:e2:97:34:
fa:9f:28:25:63:b1:73:87:b4:9d:6d:fa:44:23:d7:66:bf:ee:
89:3c:fd:00:38:85:ab:28:50:b1:97:96:1b:e8:85:6f:17:f8:
2a:98:67:2f:ab:b9:0e:bf:65:89:be:fe:d6:6b:16:32:51:e2:
43:d1:14:58:94:69:7f:a2:69:db:97:4d:7c:ef:1b:b6:10:59:
84:a6:3e:a9:51:d6:14:c9:58:6f:65:19:ca:d7:c5:e5:b8:22:
85:29:b1:e9:f8:84:77:0c:93:ac:0b:29:b8:d2:c8:ad:bd:22:
c8:9a:d7:15:e0:80:05:8d:97:ff:34:66:84:8a:ce:56:0a:9a:
29:62:e9:42:00:66:0f:87:15:99:07:e6:dc:d9:a3:e8:a3:44:
c9:f1:e4:bd:b9:b3:54:44:bc:3b:88:fd:cc:55:cd:fa:48:a9:
09:de:17:bc:73:58:5b:f8:b5:e3:0b:1d:7b:b7:66:f0:7d:70:
b7:38:b0:2e:a6:12:fa:d6:cb:3a:62:db:c2:f9:c7:2a:43:5e:
8e:cd:b7:a8:5d:8e:44:d9:23:a4:9f:9f:97:dd:f6:66:f0:8b:
dc:66:41:ba:57:5a:d3:65:f4:7b:f3:9c:1b:3e:d1:6c:2d:b2:
a1:b6:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:19 2025 by rpki-client