Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/AOhCH_6zzT3krSXB-Q6XXFkonvU.roa
File: AOhCH_6zzT3krSXB-Q6XXFkonvU.roa (raw, json)
Hash identifier: n992cP+/du1w1ybJuNh6oTUqcB2cTA5heI85lE+hDCk=
Subject key identifier: 00:E8:42:1F:FE:B3:CD:3D:E4:AD:25:C1:F9:0E:97:5C:59:28:9E:F5
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 01856DEF639A692B6EA6AB0C2E36075C6560
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/AOhCH_6zzT3krSXB-Q6XXFkonvU.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204226
IP address blocks: 194.105.148.0/24 maxlen: 24
185.89.9.0/24 maxlen: 24
185.89.10.0/24 maxlen: 24
185.89.11.0/24 maxlen: 24
185.89.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:63:9a:69:2b:6e:a6:ab:0c:2e:36:07:5c:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00e8421ffeb3cd3de4ad25c1f90e975c59289ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:3f:fb:70:a0:0c:45:21:14:8e:12:5b:12:
ec:4c:c8:81:f4:cb:3c:29:ab:f0:78:ea:3c:e4:cb:
ba:c7:c6:7e:97:cf:63:1f:9a:ed:16:6a:eb:13:ca:
06:4f:31:fe:68:12:9b:64:06:f1:e1:b9:89:bb:7f:
9f:1c:c1:57:cf:59:bd:56:31:81:35:58:81:e7:86:
dd:ab:4b:41:82:82:5b:13:69:87:cd:7d:83:26:8b:
de:d1:69:38:93:69:63:4d:84:eb:67:3c:d0:b1:cb:
99:a2:00:3b:19:dc:05:13:3a:71:a2:75:c6:81:3b:
4c:ba:dc:f9:e5:e6:7c:3e:d0:48:b9:46:12:2e:d0:
04:e4:aa:aa:e3:6e:8b:66:4b:da:fa:20:92:8e:05:
fc:4b:f6:ff:fc:88:2a:3d:20:0b:ad:71:bf:f2:bc:
e5:aa:6f:10:75:62:73:90:ea:f9:4f:96:7b:a8:b6:
b2:45:18:60:a0:a0:06:fb:34:6a:f0:d5:3b:9b:72:
d6:57:ec:d1:25:1b:1f:b7:69:55:54:22:d2:08:5d:
ef:18:7e:b8:dd:ed:0c:ef:28:b5:8c:77:ff:fb:39:
30:fd:24:6a:af:f3:1a:b2:a0:14:92:23:54:86:5c:
6f:80:a1:03:83:ee:f0:40:a7:2a:52:b8:95:c3:9e:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:42:1F:FE:B3:CD:3D:E4:AD:25:C1:F9:0E:97:5C:59:28:9E:F5
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/AOhCH_6zzT3krSXB-Q6XXFkonvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.8.0/22
194.105.148.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fe:00:d0:ec:dd:09:12:8a:9d:1d:a5:4e:7f:6f:bf:00:91:
85:5f:2a:01:f4:ee:a6:fc:5b:a4:87:22:55:39:e2:fd:b5:cd:
88:43:07:f1:a8:20:8c:62:46:e9:39:ca:81:12:49:47:60:ba:
ae:bf:8a:18:b7:d8:7f:c0:e8:4f:27:85:54:a5:e0:9d:de:23:
5f:41:fd:82:58:e3:98:14:be:06:26:73:d7:5e:6c:49:f7:33:
38:17:b9:d3:ac:16:79:dc:3a:ff:9a:6c:ee:2c:6a:46:8f:a5:
38:f1:b4:bc:1f:bc:64:e4:96:e6:ca:4b:4e:76:1b:db:e5:29:
63:7d:bf:90:a2:da:f9:70:80:bb:b6:87:9f:64:45:43:38:bc:
7a:07:3d:41:25:49:a5:cc:71:38:b2:fc:52:fd:00:81:cf:9f:
12:23:9b:84:7f:ae:49:4c:6f:1f:e1:60:29:f7:44:c4:7f:16:
62:c7:9d:24:4d:12:25:60:5f:e4:bb:74:6d:c0:dc:86:b1:96:
35:31:b8:c9:de:1b:2a:10:5d:e0:64:2d:96:80:f6:f3:9d:c6:
3b:57:f5:ea:97:b8:4b:03:6d:9a:53:2f:5d:5b:5a:bd:0e:4e:
13:c9:c1:37:12:1b:17:a3:e6:ea:07:d2:06:69:e8:2e:63:b7:
15:fb:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:21 2025 by rpki-client