Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/X29F7-fkGoWOPDmMxXo_fjVCoKI.roa
File: X29F7-fkGoWOPDmMxXo_fjVCoKI.roa (raw, json)
Hash identifier: xo/eiKZqUdInqC6TKyoUuURdJsJwrB35EGdfiQ89Wdg=
Subject key identifier: 5F:6F:45:EF:E7:E4:1A:85:8E:3C:39:8C:C5:7A:3F:7E:35:42:A0:A2
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 018BCDD5B78ABB9E9C199D632ADD8B20CDA6
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/X29F7-fkGoWOPDmMxXo_fjVCoKI.roa
Signing time: Tue 14 Nov 2023 12:36:57 +0000
ROA not before: Tue 14 Nov 2023 12:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43905
IP address blocks: 185.84.12.0/22 maxlen: 22
217.173.61.0/24 maxlen: 24
217.173.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:d5:b7:8a:bb:9e:9c:19:9d:63:2a:dd:8b:20:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Nov 14 12:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f6f45efe7e41a858e3c398cc57a3f7e3542a0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:d3:98:12:9c:2d:da:b6:f6:ff:10:0a:1d:
b7:fb:cf:25:b2:5e:a9:d0:1f:2c:e3:96:d6:44:2a:
47:e3:3d:47:55:a0:59:35:bc:20:2e:f2:bb:a4:6a:
86:6e:49:2b:e2:52:f5:7b:6b:43:6d:0f:66:11:e3:
e5:df:e2:80:22:57:0b:46:f1:7d:91:40:82:17:19:
e5:6a:eb:c0:8a:59:b8:a9:e9:36:89:61:ff:8d:c7:
ab:2c:ff:1e:87:c0:d7:cc:e4:c1:13:48:6a:3f:83:
11:f8:20:ef:d0:85:42:c8:85:f1:17:70:7d:91:da:
71:a2:00:dc:2d:97:15:1c:92:35:ed:4e:ee:bb:f6:
1e:25:9d:d1:61:e9:fc:e2:ea:1d:dc:63:80:32:da:
b6:6f:d1:2b:d2:85:7a:94:14:ed:fd:8d:89:d1:70:
6a:10:9a:07:17:5a:30:24:ac:18:e3:d6:9a:f2:10:
bf:2f:30:ec:ed:37:49:0d:81:2b:8c:2e:b2:a8:a8:
5a:9d:f7:00:46:68:15:17:d6:b3:24:b1:bd:db:f7:
c9:cc:eb:af:83:c2:03:23:47:bf:17:00:4b:d1:b3:
64:43:e6:29:d7:49:6c:01:f9:14:38:59:14:45:01:
8f:8d:8c:3f:fb:3d:44:f5:ec:a6:5c:18:5d:66:e9:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:45:EF:E7:E4:1A:85:8E:3C:39:8C:C5:7A:3F:7E:35:42:A0:A2
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/X29F7-fkGoWOPDmMxXo_fjVCoKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.12.0/22
217.173.61.0-217.173.62.255
Signature Algorithm: sha256WithRSAEncryption
85:9d:a8:8b:b3:81:8e:a1:ee:a7:e6:4f:60:db:4e:e4:e0:06:
cd:b3:54:4b:ad:eb:55:04:9c:c7:fd:09:53:5c:7b:f8:2e:88:
48:77:74:4c:0d:60:cc:82:d6:49:66:79:71:66:76:c7:43:5a:
92:74:48:c4:ef:7a:b5:b8:40:31:eb:5b:a1:ba:bf:84:d6:36:
0a:7d:8e:8d:d4:95:1e:0d:22:22:4a:02:c6:fd:2d:68:9b:45:
f5:a3:5c:e4:39:4c:56:e2:0e:4e:6d:dc:48:25:d9:17:00:01:
00:43:95:56:e4:52:6f:4b:c9:63:be:dc:37:80:03:d7:a0:68:
9a:00:41:05:20:8d:bd:8d:57:2d:3b:6f:a4:1d:7d:aa:af:ab:
c0:c8:18:92:db:d3:16:91:35:98:e5:b5:11:bf:6e:ed:9b:c2:
fe:c2:6c:c0:68:b3:70:32:77:ab:57:3d:1e:98:d5:40:47:a2:
18:04:2a:44:b5:ee:a0:73:7c:76:aa:68:15:76:20:8e:cf:83:
6f:cf:f9:5d:d4:cb:ae:f3:91:ee:c0:8b:59:81:c5:f8:68:61:
b1:85:80:eb:ff:f3:cd:b7:53:7a:49:fc:58:20:0a:12:0c:66:
e1:99:6d:c5:f7:f0:d4:cd:a4:64:e9:ba:1a:1a:66:7d:34:57:
ab:4e:b7:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:48 2025 by rpki-client