Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/X2M80qBFMjUB4bb1y8I-WSd4390.roa
File: X2M80qBFMjUB4bb1y8I-WSd4390.roa (raw, json)
Hash identifier: 5D9+Y0mMYWAQplrthQOHMkLpbbnRBPj6u20qT4eJupA=
Subject key identifier: 5F:63:3C:D2:A0:45:32:35:01:E1:B6:F5:CB:C2:3E:59:27:78:DF:DD
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 018C257939D3B86B4F836C1727908038CCC3
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/X2M80qBFMjUB4bb1y8I-WSd4390.roa
Signing time: Fri 01 Dec 2023 13:02:30 +0000
ROA not before: Fri 01 Dec 2023 13:02:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61233
IP address blocks: 185.14.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:79:39:d3:b8:6b:4f:83:6c:17:27:90:80:38:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Dec 1 13:02:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f633cd2a045323501e1b6f5cbc23e592778dfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:f5:44:9d:dd:8d:55:32:80:26:36:d3:0c:
2c:09:f5:7e:c2:23:0d:07:bc:fd:8c:13:91:81:ae:
07:cc:9e:ca:47:5d:50:23:ab:07:f9:36:ab:88:00:
1f:5b:7f:9f:63:45:5a:15:9e:c3:97:96:38:76:5f:
4f:40:cd:66:e8:75:10:56:42:41:83:5a:25:72:4d:
65:8f:d2:ca:bb:47:4d:a7:a3:61:1d:c3:ba:7e:4e:
f3:46:cd:25:cd:15:6c:64:45:8c:29:a6:90:fa:d9:
be:d3:5a:1e:c7:ba:b1:24:dc:e5:de:d1:fb:71:d3:
88:11:99:c9:ad:2f:f8:58:d3:16:e7:19:94:7d:df:
12:9a:28:0e:9f:58:aa:a8:e4:5a:e7:48:7f:17:a6:
75:c0:6f:33:bd:56:6a:3e:36:0a:5e:f1:35:a0:ba:
5c:96:0b:17:29:e0:bc:60:c6:38:fd:d9:48:18:e3:
f8:a1:d5:b8:cc:3d:a7:12:38:b2:26:33:ae:20:d8:
5c:13:d6:ad:3f:04:75:33:26:23:18:8f:92:4d:f2:
8a:0b:09:17:99:90:d3:b5:99:7b:59:31:fa:87:cb:
8a:f2:9b:4e:70:a7:78:74:2a:04:43:c8:8a:c5:50:
bb:fd:d8:9e:2e:d2:0b:4b:da:fa:df:7e:57:45:b5:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:3C:D2:A0:45:32:35:01:E1:B6:F5:CB:C2:3E:59:27:78:DF:DD
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/X2M80qBFMjUB4bb1y8I-WSd4390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:c7:bf:d8:1b:16:e2:57:c1:a6:39:f6:e1:e7:17:98:f7:cc:
c6:df:89:b7:62:61:23:53:a9:7f:5b:39:73:3c:de:e3:83:a3:
3f:44:c0:d9:2c:3c:b6:1c:b2:a5:16:66:6e:ec:c2:87:a0:be:
86:5f:ee:45:40:ca:eb:63:16:27:c6:19:c9:f4:8b:0d:45:46:
ed:9d:ce:43:1a:2c:c2:c5:5a:95:1b:09:dd:61:76:87:63:2f:
28:04:59:bc:77:05:98:2e:38:96:0d:2e:11:16:3d:19:a0:39:
0f:44:04:82:13:c2:3b:92:03:28:62:20:4f:b4:4d:37:77:74:
88:c4:98:06:cc:d4:4e:cb:15:73:03:87:71:fd:d5:0d:23:7d:
ea:9d:9e:23:ac:7a:ca:f8:e5:70:86:2d:46:66:88:73:c5:81:
8c:a5:6d:d0:3c:4d:05:16:be:cf:32:6f:99:57:b5:a8:b6:a4:
41:69:1f:63:70:bc:2b:a5:3e:86:4e:f8:4b:7a:1a:96:2d:44:
48:8a:96:9e:fa:25:dd:b8:2a:7b:2e:6c:85:bd:2d:0e:ea:bb:
4c:f4:58:ef:09:7e:fe:50:20:2c:a3:fc:9c:0b:31:8d:eb:27:
60:dd:3e:b9:7c:f6:7b:bb:3f:a1:d7:9c:6d:a9:cb:6d:6b:9f:
98:11:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:05 2025 by rpki-client