Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/USOVD9qemnHgq2qSNYC30bE6neI.roa
File: USOVD9qemnHgq2qSNYC30bE6neI.roa (raw, json)
Hash identifier: 1ChFWXGxG1En8qRgXFHR31dI1EkPlfmOUHCJZfXWUTY=
Subject key identifier: 51:23:95:0F:DA:9E:9A:71:E0:AB:6A:92:35:80:B7:D1:B1:3A:9D:E2
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 01856BC122891BBA677CE0DEB81E47E4767F
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/USOVD9qemnHgq2qSNYC30bE6neI.roa
Signing time: Sun 01 Jan 2023 05:14:57 +0000
ROA not before: Sun 01 Jan 2023 05:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16376
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:22:89:1b:ba:67:7c:e0:de:b8:1e:47:e4:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 1 05:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5123950fda9e9a71e0ab6a923580b7d1b13a9de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:62:42:8a:fa:60:29:a1:72:eb:25:dc:5c:
75:bb:a3:97:8c:55:c2:1c:f2:41:54:0c:f8:f9:a9:
8b:04:e3:d7:aa:f8:f5:03:0f:7f:bd:ad:61:df:34:
91:99:44:86:b6:7c:be:18:23:09:54:78:85:63:2f:
9d:8b:92:46:90:d6:9c:6a:b1:89:58:6d:fd:e5:43:
51:79:ad:75:ab:be:c3:7c:d7:e5:4b:e8:9d:3f:ee:
91:c5:b3:b5:94:0a:c3:bb:80:ca:53:5b:e6:7f:5f:
9e:c9:fb:24:55:dd:89:ff:5a:29:0a:02:48:4c:06:
a9:2b:e6:5a:4e:12:2a:dc:15:9a:78:66:ce:cb:9c:
d5:6c:dd:83:48:80:8e:d8:1b:0e:c5:fa:60:14:b4:
9f:7a:4c:48:e5:e1:29:22:e6:d5:3b:d4:3f:56:58:
7f:55:1f:65:9c:c2:43:73:fe:cb:4c:58:49:f3:80:
62:59:c8:b2:70:29:b9:ce:e2:3c:21:4d:5c:46:22:
53:58:1c:f0:24:2e:d5:4e:42:a4:26:ef:bd:27:70:
0a:9a:df:a8:43:a8:bd:b3:5e:d5:d0:b2:f8:ee:66:
4c:63:12:cb:3c:a7:84:68:a6:0a:55:72:fb:45:1c:
ae:87:cb:cc:83:fd:49:ca:c8:b2:5f:23:a8:2c:4f:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:95:0F:DA:9E:9A:71:E0:AB:6A:92:35:80:B7:D1:B1:3A:9D:E2
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/USOVD9qemnHgq2qSNYC30bE6neI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3c:ee:8e:09:dc:12:85:c9:43:34:2d:fe:03:b6:61:50:02:
94:b6:7f:66:5b:ee:ba:c6:06:e8:52:40:4f:f8:f6:1a:00:84:
ae:a4:86:89:30:75:1f:a0:85:cb:8c:19:c2:1a:47:2f:6a:ba:
e9:63:b8:5a:af:1d:88:ca:cd:bc:8a:98:a0:60:9f:8e:3f:bf:
5d:37:9f:bf:f4:50:a8:1f:97:8e:b6:20:f7:4b:24:5e:11:6c:
d0:2e:73:48:84:07:f5:e7:ae:76:53:3e:b4:6d:09:0b:c4:4a:
2d:de:0b:a4:55:db:24:21:7a:72:1d:c7:bd:8d:3e:88:35:f1:
06:48:70:14:d7:7b:4b:f2:d9:5b:5f:fa:af:1b:64:7a:f2:c1:
9c:b8:a2:6b:e1:9f:d8:39:bd:26:cc:75:b2:36:4a:b6:c9:e1:
be:14:0f:01:bd:c6:a8:cd:d9:ef:96:54:fb:5e:ef:db:2f:9c:
5e:f8:85:7e:24:bb:4a:bd:91:4e:90:f1:b2:cc:49:d8:9a:2f:
c8:c7:c7:87:9f:cc:05:4c:a3:f5:bb:ac:40:3b:79:0a:6b:28:
bf:d5:86:1e:b1:56:c4:64:51:06:55:fa:95:6a:86:e7:f0:29:
7b:d8:32:87:f4:a0:ee:b9:c7:22:f1:0b:60:e6:1a:0b:4a:90:
ba:d1:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:24:54 2025 by rpki-client