Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/I1N6cb4EqeEDGVdBw8-GVCLmkK8.roa
File: I1N6cb4EqeEDGVdBw8-GVCLmkK8.roa (raw, json)
Hash identifier: 8wEFQ5ge/j1wEcmxbfjxaZl7gVltg27kLVq8xIE2WUY=
Subject key identifier: 23:53:7A:71:BE:04:A9:E1:03:19:57:41:C3:CF:86:54:22:E6:90:AF
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018780762E52718D13ECB834215B7B1C2266
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/I1N6cb4EqeEDGVdBw8-GVCLmkK8.roa
Signing time: Fri 14 Apr 2023 15:50:41 +0000
ROA not before: Fri 14 Apr 2023 15:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.113.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:76:2e:52:71:8d:13:ec:b8:34:21:5b:7b:1c:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Apr 14 15:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23537a71be04a9e103195741c3cf865422e690af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:ca:70:97:3e:ca:48:59:0e:28:fe:b1:35:
2e:3a:66:9a:83:c4:f6:b9:bb:ca:92:db:1a:d0:28:
af:55:5a:5f:9c:eb:29:77:10:c8:25:d4:a7:84:5d:
d7:46:16:36:ec:55:00:48:89:b1:d7:c9:5b:59:37:
59:71:9d:1d:9a:04:66:2c:1a:77:a2:5a:6b:1c:c5:
a4:bf:2b:5e:c9:b0:c3:42:11:5b:3b:e9:99:4f:37:
76:76:d7:ab:aa:7c:79:58:a8:db:b3:57:c4:aa:bd:
62:fe:cf:98:13:16:78:53:51:7c:e1:3b:0c:c4:43:
3f:76:03:fb:fc:59:54:a0:9d:c4:8b:dc:82:4e:ba:
09:67:23:e8:88:27:8a:c9:6d:c4:e0:e4:48:e6:a3:
cf:bb:b9:ef:9a:0d:5f:09:31:5d:10:37:49:fe:f8:
50:62:3f:b0:0d:7c:19:36:d5:48:3c:2f:5d:b5:88:
73:77:93:b5:ac:85:1e:24:ee:17:63:55:6d:0b:42:
b4:84:ed:af:39:95:4a:1d:35:0a:89:7d:d1:e6:27:
77:5f:68:f6:2e:e6:89:85:60:8a:68:97:5b:d9:f1:
74:89:07:70:df:17:5d:0c:d3:11:d8:a5:3b:fc:68:
e7:69:39:bf:b2:58:dc:35:72:83:6e:e9:db:47:6b:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:7A:71:BE:04:A9:E1:03:19:57:41:C3:CF:86:54:22:E6:90:AF
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/I1N6cb4EqeEDGVdBw8-GVCLmkK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
Signature Algorithm: sha256WithRSAEncryption
13:74:1f:6a:a8:1b:44:f3:76:69:40:41:92:88:e2:3a:92:3d:
a0:73:fb:80:e9:c5:76:b6:b9:64:01:d8:e5:e6:3e:00:bc:b6:
c5:21:ac:35:21:0c:9c:f4:7b:11:f4:0e:8f:68:7d:43:ad:55:
c0:f4:02:af:ac:e9:07:b4:9d:67:b6:4d:fe:a9:7e:06:ae:59:
7a:a1:f7:c0:66:f6:e9:3e:26:81:0c:0c:fa:92:b6:56:24:5f:
31:66:6c:31:19:dd:db:e8:fd:0f:2e:73:fb:65:42:78:4a:91:
a0:44:fe:6e:ae:d2:94:3c:14:33:0f:f2:32:b0:ff:e7:77:11:
49:96:59:5a:4b:f7:72:18:eb:c3:f6:c2:71:82:73:36:5c:f8:
dc:af:20:5f:4d:9b:61:3a:5f:a7:f0:73:54:b5:03:82:70:8a:
96:f6:5f:1b:a4:6e:65:e5:31:cd:9a:65:91:0d:3e:b7:ea:9c:
cd:6e:ad:22:e9:c4:b8:f7:29:a7:08:f8:f2:32:f3:81:a3:7c:
dc:ad:59:e5:7d:db:c6:71:77:1c:3a:96:c0:86:45:bd:8b:2f:
ee:02:8d:83:0a:bf:bc:07:51:67:c9:d3:7e:c8:b2:23:7b:84:
47:b2:4e:82:02:1d:e2:1c:fd:30:d0:b3:16:5c:ac:9e:16:de:
00:71:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:14 2025 by rpki-client