Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/M93GCDqs1uge-SGby48qe_91kjU.roa
File: M93GCDqs1uge-SGby48qe_91kjU.roa (raw, json)
Hash identifier: tEx/ukGE8X7tz6IhcRCVS/h8euoRwWbZWu5OwSdZESA=
Subject key identifier: 33:DD:C6:08:3A:AC:D6:E8:1E:F9:21:9B:CB:8F:2A:7B:FF:75:92:35
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 01856C0101C85A067FB1A1DABDB0AEF2F12F
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/M93GCDqs1uge-SGby48qe_91kjU.roa
Signing time: Sun 01 Jan 2023 06:24:43 +0000
ROA not before: Sun 01 Jan 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200560
IP address blocks: 185.103.58.0/23 maxlen: 23
185.103.57.0/24 maxlen: 24
185.103.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:01:c8:5a:06:7f:b1:a1:da:bd:b0:ae:f2:f1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jan 1 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ddc6083aacd6e81ef9219bcb8f2a7bff759235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:55:51:e9:b2:c3:61:b8:72:ea:82:61:df:
72:12:25:40:de:ac:86:31:6a:55:99:57:4a:98:4b:
c9:07:2c:2d:8f:cc:df:d1:28:aa:19:c8:0b:ea:fc:
7e:ec:72:df:ea:e7:1b:d0:55:44:e5:67:05:e5:90:
04:e1:26:20:b9:22:8d:8a:23:53:f8:37:56:db:94:
0b:0d:8d:19:72:ae:58:80:e8:4d:6d:87:c6:8e:2e:
27:09:b4:61:72:41:01:ca:ee:7b:e2:42:7e:5c:82:
e0:8e:df:6d:9c:7f:52:3c:e3:84:3e:d6:9d:f0:f6:
fa:68:e9:9b:55:aa:f9:bd:a7:48:10:23:86:5c:37:
ed:41:22:b9:5f:d5:2c:c8:f8:01:91:94:47:4e:fb:
a2:b1:fa:63:8a:d6:f3:cd:7c:31:62:6b:a5:c0:e1:
27:80:23:16:5b:52:6e:2f:ad:53:9a:ee:5d:16:27:
4a:41:a2:7d:90:95:af:53:af:d5:15:58:d9:16:1d:
e0:8b:88:58:7c:83:ce:5e:52:f7:ba:78:75:f5:93:
07:42:20:12:ef:00:3a:c0:ee:a9:5b:cc:91:05:bd:
70:d6:30:94:38:5b:ee:b2:c7:03:6c:62:70:c2:f8:
a7:d6:bc:1e:ec:64:5b:03:0d:41:58:fd:af:f5:a3:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DD:C6:08:3A:AC:D6:E8:1E:F9:21:9B:CB:8F:2A:7B:FF:75:92:35
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/M93GCDqs1uge-SGby48qe_91kjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:5e:99:3d:6a:e8:ee:ff:b6:3f:7e:f3:e1:cb:ec:dc:d1:0a:
b7:0e:5f:75:c5:01:9d:bf:8e:4c:a1:e7:e6:ac:f3:8e:43:57:
dc:d3:f3:0b:c5:55:32:2d:cf:16:6c:42:1a:f4:1d:03:6a:e3:
42:74:6d:50:4c:e1:0a:0e:61:8e:46:a7:a5:7d:a7:cf:7f:fa:
85:b5:7c:d8:e7:ca:a2:20:1d:c3:08:ad:66:54:6b:4d:f2:0a:
46:fc:c6:db:bd:3a:4a:17:56:79:0c:e9:fd:0a:55:c8:0c:60:
35:6c:e2:3e:cc:05:a2:cd:48:03:a8:63:91:88:d0:c1:dc:ba:
f9:79:87:1f:64:71:a4:28:c5:20:b1:93:f4:47:f1:b1:e4:13:
c7:2c:e5:b2:e6:07:b5:5d:f6:8f:e6:4f:ac:fa:f2:31:ff:fc:
51:4b:2d:11:d9:5d:0e:b4:d4:28:f1:23:69:7a:82:e1:a8:c4:
c6:73:df:39:2e:84:ed:4c:3b:90:b5:6e:e8:aa:13:f6:04:df:
f4:d4:ce:94:bd:eb:6e:b3:4f:e4:1f:33:fb:fe:77:62:13:73:
86:f0:19:15:1e:24:c3:be:77:41:b3:a8:bd:7c:32:94:46:54:
25:69:2b:fc:b5:4c:9f:59:4b:ee:f3:1d:d5:4c:81:f6:46:3b:
10:58:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:42:26 2025 by rpki-client