Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AtpH2K_a0lHnDEHnksdze9OPwrI.roa
File: AtpH2K_a0lHnDEHnksdze9OPwrI.roa (raw, json)
Hash identifier: jhdHmcIQwwjG8vcVF206Z3oCMjZt6MY4YbnFLM4pDaM=
Subject key identifier: 02:DA:47:D8:AF:DA:D2:51:E7:0C:41:E7:92:C7:73:7B:D3:8F:C2:B2
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 018BE28CD19BEA0194353C7C86D907731D40
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AtpH2K_a0lHnDEHnksdze9OPwrI.roa
Signing time: Sat 18 Nov 2023 13:09:21 +0000
ROA not before: Sat 18 Nov 2023 13:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135489
IP address blocks: 185.241.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:8c:d1:9b:ea:01:94:35:3c:7c:86:d9:07:73:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Nov 18 13:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02da47d8afdad251e70c41e792c7737bd38fc2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:bf:8d:26:70:5b:9f:66:d8:ca:4e:ec:ee:
24:6a:1d:e3:c4:ea:bc:ba:7c:f8:40:9e:7c:e5:2a:
db:c9:63:dd:03:70:e8:2f:5a:ed:68:58:aa:d3:e8:
50:72:86:8c:f3:f5:67:f1:77:93:8e:a6:be:50:be:
6f:b9:6f:8b:44:b0:d6:2b:b3:64:b9:a7:85:be:6e:
0a:81:da:4b:11:d2:e9:55:af:88:a3:23:75:70:43:
74:a7:c1:96:10:76:f0:f2:59:fc:e5:09:fa:b2:42:
f8:2e:8f:c7:1f:62:b2:0c:97:04:fe:46:11:c6:21:
70:6d:1a:e5:e5:81:1b:07:49:d6:cc:fa:0f:7c:80:
6c:96:66:c0:d4:0d:93:38:d1:8c:10:54:42:59:eb:
43:bc:68:35:bd:45:aa:a7:dc:03:ce:2f:02:39:de:
4d:93:4b:c3:b2:5d:02:51:82:87:b2:f3:1b:c8:a6:
66:05:34:a0:08:07:f8:9e:e4:ce:27:4f:9d:de:32:
29:5f:b5:b2:49:82:0a:4b:60:52:50:58:c8:a2:9e:
6d:16:71:5f:f8:a7:47:a2:b8:85:2f:04:8d:4a:9c:
50:03:0d:d9:bf:18:0b:da:e8:7f:14:d6:a1:b5:4c:
94:f3:4f:e5:92:f6:b2:d7:47:91:e9:68:b1:bb:f6:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:47:D8:AF:DA:D2:51:E7:0C:41:E7:92:C7:73:7B:D3:8F:C2:B2
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AtpH2K_a0lHnDEHnksdze9OPwrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b7:d8:f3:a4:33:7e:3e:44:21:f0:87:ad:af:a9:e9:b9:bd:
4c:1c:8c:19:11:07:83:ff:e2:1a:d4:b3:58:12:a2:c2:e2:5d:
7b:05:4a:b4:95:8b:92:ad:66:25:3e:e3:4f:5d:30:6c:28:2f:
03:d5:f9:09:c3:bf:3e:d5:9c:2b:5a:c7:7a:54:86:c2:91:70:
d4:21:db:bf:b4:4e:4e:7e:fd:f5:29:35:95:86:92:f6:54:8e:
36:f9:d1:33:d3:07:97:38:f7:15:dd:59:52:f2:87:9d:94:bc:
75:3f:ee:17:6e:a6:cf:96:2a:d0:14:d8:f4:bc:7c:aa:da:c2:
28:45:a6:1f:a0:7a:43:28:f3:c5:15:52:0e:9a:e6:10:93:5a:
87:4d:2c:f5:5a:92:14:95:05:02:ac:be:1c:b7:95:8b:cd:b0:
43:ef:ce:46:74:09:64:16:ef:0f:f7:90:b5:74:80:bd:27:06:
72:54:1a:f1:b7:f7:37:7d:f2:06:16:9e:84:fc:9d:7c:43:60:
09:01:2b:0d:94:d5:dc:a9:17:4a:2c:11:91:e3:4e:6b:17:06:
0b:13:47:1f:73:b9:be:85:ae:22:1e:6f:9f:88:87:75:b2:28:
c2:dd:53:ad:d6:dd:d0:c8:04:dd:f0:3f:f3:51:d8:93:7d:bf:
d5:7b:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:26 2025 by rpki-client