Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/D3UBUXdEPZJ4trgbTa_gHM9aAKU.roa
File: D3UBUXdEPZJ4trgbTa_gHM9aAKU.roa (raw, json)
Hash identifier: atZQkEAiCDGtijAPQucb58hKupNLpH8n2M3DXc1VjEw=
Subject key identifier: 0F:75:01:51:77:44:3D:92:78:B6:B8:1B:4D:AF:E0:1C:CF:5A:00:A5
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 01856BC123785B98D7BFCEF209F052F4DC9E
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/D3UBUXdEPZJ4trgbTa_gHM9aAKU.roa
Signing time: Sun 01 Jan 2023 05:14:57 +0000
ROA not before: Sun 01 Jan 2023 05:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39537
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:23:78:5b:98:d7:bf:ce:f2:09:f0:52:f4:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 1 05:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f75015177443d9278b6b81b4dafe01ccf5a00a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:7e:f2:10:51:9e:3e:cd:91:09:66:db:15:
5d:28:af:68:48:32:d6:7c:75:ca:2c:4e:65:b3:ad:
be:d1:24:65:e9:1a:fc:29:76:7e:8f:d0:59:89:7a:
62:d7:b4:92:6b:61:6c:97:ea:6a:65:87:f8:c0:05:
28:3e:3d:31:03:d8:d9:ec:88:c2:89:5b:78:d6:87:
2c:05:d5:fe:b9:af:09:1d:b6:08:53:5f:43:b9:63:
7e:01:9f:08:5a:ac:e5:10:c0:87:a0:44:cb:08:8b:
30:94:0f:6e:75:61:62:1e:e1:78:d6:d1:b9:85:74:
23:76:a3:10:44:f8:c1:a3:cd:fe:00:d2:d1:02:67:
01:24:d7:b0:dc:55:f0:ec:88:4f:b6:63:2a:e6:e9:
b7:ad:4b:d4:e3:0e:20:d7:03:20:d5:a1:23:6f:7e:
18:b9:6a:8b:73:c8:a5:a9:b1:02:cc:37:17:fb:f7:
bc:14:77:5e:30:0f:51:0a:3e:d1:a4:d8:78:d2:9c:
93:94:dd:84:3a:fc:60:12:a2:40:4e:b4:5f:b7:24:
d7:b9:5a:f2:ae:af:3e:4c:88:c6:50:d4:5f:d3:bb:
55:bd:37:62:f6:d2:4d:bb:ee:6b:31:1e:45:24:6a:
5a:c4:da:45:c5:5d:06:24:95:e3:b1:54:c1:51:18:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:01:51:77:44:3D:92:78:B6:B8:1B:4D:AF:E0:1C:CF:5A:00:A5
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/D3UBUXdEPZJ4trgbTa_gHM9aAKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c9:b3:88:9f:ba:2e:06:4a:47:15:d7:f6:a1:30:e9:30:99:
98:bd:eb:ec:47:7b:99:7c:b7:16:8c:7b:61:f5:bc:87:6e:8e:
c1:f4:98:f0:0f:3c:9e:b0:ee:c7:67:f3:f2:8d:af:93:f6:12:
49:ca:90:5a:6f:c4:37:17:33:c4:0a:9f:da:da:64:53:ef:04:
56:fa:cd:71:81:b2:a1:95:fe:4b:fb:7d:4e:6c:4c:6e:43:4d:
1f:d4:e8:60:54:23:97:7c:f6:08:b2:8b:7c:61:73:14:10:46:
72:1f:36:a6:c7:99:5a:5b:82:76:0a:3a:be:56:61:59:c1:c6:
41:68:91:05:29:3a:12:ab:c4:eb:6d:1e:cc:a5:2b:dd:23:42:
5f:75:e0:b8:b3:b7:73:03:b7:24:e5:c0:a5:a1:11:53:e5:d2:
9b:51:c1:07:35:e2:f0:ea:f2:75:40:48:e1:e7:10:2b:ee:2c:
cf:ad:9a:d0:c5:f8:fa:e7:1c:16:2a:84:7d:2c:2c:1e:40:f6:
f4:99:c6:b8:4f:97:7e:19:d3:c7:9b:6a:5b:fe:c3:55:95:90:
79:a5:a0:97:7a:79:7b:43:3f:a0:93:87:3d:44:39:57:4c:eb:
dc:56:11:ce:6b:35:d4:3c:24:d1:7a:be:74:9e:1f:86:a3:75:
89:59:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:34:19 2025 by rpki-client