Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/ROs82Xm4z3FRV5Fo3Fc7ouwfTgE.roa
File: ROs82Xm4z3FRV5Fo3Fc7ouwfTgE.roa (raw, json)
Hash identifier: RKFXXIJC1gwhlEgf2P5F+TsBu92uQ/VPn6ehc3THM/w=
Subject key identifier: 44:EB:3C:D9:79:B8:CF:71:51:57:91:68:DC:57:3B:A2:EC:1F:4E:01
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 01856D13D0E4F39933FEB153C04242E96D54
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/ROs82Xm4z3FRV5Fo3Fc7ouwfTgE.roa
Signing time: Sun 01 Jan 2023 11:24:53 +0000
ROA not before: Sun 01 Jan 2023 11:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205889
IP address blocks: 185.135.71.0/24 maxlen: 24
185.135.68.0/24 maxlen: 24
185.135.69.0/24 maxlen: 24
185.135.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:d0:e4:f3:99:33:fe:b1:53:c0:42:42:e9:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Jan 1 11:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44eb3cd979b8cf7151579168dc573ba2ec1f4e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:ab:de:98:27:55:41:47:bd:f1:24:d2:7f:
4e:cc:8c:ee:c8:97:1e:60:c4:46:c8:62:56:7a:c7:
c6:7e:e9:d0:68:08:b5:3c:88:a7:18:a2:fd:86:9f:
08:84:f2:2a:b5:1b:4a:ea:bf:8d:ec:85:86:8d:db:
33:58:a4:83:57:b1:da:7c:78:eb:e4:66:d7:0d:2f:
64:ec:74:a3:57:43:d4:ae:08:c7:db:7d:10:ed:a9:
2f:19:c9:19:a5:14:ce:85:2e:3b:de:75:78:54:29:
95:f3:92:f7:6a:6c:f7:f6:9b:af:4f:01:14:30:3c:
30:c5:d4:62:47:32:04:0c:d2:c3:3f:9e:29:30:33:
ab:96:5f:c9:bf:db:e3:d3:2d:ac:c1:b7:3d:83:52:
f6:2f:f4:67:ca:2c:35:3a:02:cc:6c:27:46:21:1f:
6f:e4:0d:63:0b:0a:f0:8b:58:f0:11:1f:c6:49:69:
95:2e:42:d5:89:3a:4f:5e:ea:2a:5a:0d:19:fd:ba:
7d:e1:85:71:9a:ca:02:68:8c:60:47:09:9a:80:cc:
48:3e:ed:35:b3:a0:d5:30:17:4a:b3:5b:d5:8d:5d:
72:58:7a:c9:72:e5:e7:f2:ee:4c:bf:a1:1c:21:04:
92:1f:31:c0:10:ab:ad:5e:b4:db:d2:aa:d1:d7:d6:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:3C:D9:79:B8:CF:71:51:57:91:68:DC:57:3B:A2:EC:1F:4E:01
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/ROs82Xm4z3FRV5Fo3Fc7ouwfTgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.68.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f9:9e:62:ca:90:db:78:07:d0:73:98:ea:a4:ac:61:2d:91:
da:7f:95:59:cc:9d:46:e0:c0:2e:c5:a7:8f:26:b9:f0:5a:7c:
24:9e:c3:d8:9d:c1:32:58:d1:45:e7:12:e6:ee:76:9d:68:cb:
8a:cf:5e:96:04:2e:7c:43:d2:cd:43:47:67:0a:8d:65:27:7d:
26:53:89:79:fc:08:50:93:a1:4b:12:d2:b9:21:29:6b:48:03:
e8:34:13:12:7f:44:93:bd:33:a0:0e:92:2a:3d:83:0c:93:0e:
9d:6f:49:b6:df:ad:39:fd:f7:a7:96:18:ad:90:2e:4b:e8:f0:
28:b3:4d:39:e9:7f:dd:bb:cb:2a:44:d9:9a:20:3b:bd:41:cc:
40:5b:6e:c2:bc:1e:57:3b:b8:b0:c7:00:c8:33:0c:71:8a:a8:
8e:0c:96:10:08:d2:0c:b2:b5:58:66:d9:27:eb:4e:5d:0e:1b:
bf:82:10:fc:76:06:9d:fc:57:de:66:64:6c:ac:05:41:af:76:
a7:9a:23:0e:69:77:68:ea:b6:a3:eb:00:80:9a:2e:aa:ef:f1:
b4:fb:00:72:8a:1e:12:09:62:15:c6:d9:70:cd:0a:81:1b:36:
9d:60:ba:63:e5:0e:75:9c:33:61:55:4f:ee:71:c9:49:c8:a2:
d1:65:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:26:22 2025 by rpki-client