Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/lG5pbLhzMmDGE5xAlXgCydfmUOI.roa
File: lG5pbLhzMmDGE5xAlXgCydfmUOI.roa (raw, json)
Hash identifier: Xdw4WTaH0eNoNuEViQdGXcssyrwM6/rnxofrBlQOHBk=
Subject key identifier: 94:6E:69:6C:B8:73:32:60:C6:13:9C:40:95:78:02:C9:D7:E6:50:E2
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 01856E01B67506B0A90246C2BDDCFF8147C0
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/lG5pbLhzMmDGE5xAlXgCydfmUOI.roa
Signing time: Sun 01 Jan 2023 15:44:44 +0000
ROA not before: Sun 01 Jan 2023 15:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12399
IP address blocks: 185.247.40.0/22 maxlen: 22
212.211.128.0/17 maxlen: 17
212.75.32.0/19 maxlen: 19
2001:a78::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b6:75:06:b0:a9:02:46:c2:bd:dc:ff:81:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Jan 1 15:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946e696cb8733260c6139c40957802c9d7e650e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:d5:21:6e:43:5e:03:82:c7:b2:c5:b6:cd:
b5:3a:5a:41:88:78:f6:5c:f1:ce:ad:6a:e6:19:38:
1a:94:b7:00:0b:a8:b5:c8:5f:3b:18:55:6c:25:5f:
e3:ae:77:45:ba:4f:0e:8f:e4:57:6f:62:af:48:7b:
51:9e:66:89:4a:41:fe:8f:c5:d6:5b:25:f9:44:4d:
b0:8a:44:6d:1a:98:0c:a7:31:02:34:6e:51:92:fb:
7b:37:6f:12:26:c6:da:5c:0c:e1:dd:7b:b0:bc:36:
51:f5:63:2c:04:87:51:07:95:a5:cb:4e:2b:c0:61:
bb:d1:d4:dc:03:34:37:1f:46:09:13:c5:89:90:51:
fe:fd:c5:ef:c9:53:dc:7b:1b:55:fb:bf:a3:73:a7:
a1:49:9f:95:8e:b1:1e:50:f7:53:5c:91:09:a5:d4:
fb:dc:42:3f:c6:c0:bf:b4:0f:ea:bd:0f:08:31:d9:
fd:48:c0:c2:53:28:c1:d6:48:8e:8d:fc:1e:5e:0b:
ee:e7:51:9f:1a:ca:4b:92:64:2e:04:7c:24:a3:33:
bc:83:0a:9b:e2:dc:86:eb:85:fe:50:89:75:2a:b4:
12:d7:b2:3f:8d:9d:26:09:c7:16:09:ef:f3:a1:b6:
d4:be:cd:f7:a9:44:69:85:b8:73:07:de:0e:29:1e:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:69:6C:B8:73:32:60:C6:13:9C:40:95:78:02:C9:D7:E6:50:E2
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/lG5pbLhzMmDGE5xAlXgCydfmUOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.40.0/22
212.75.32.0/19
212.211.128.0/17
IPv6:
2001:a78::/29
Signature Algorithm: sha256WithRSAEncryption
a8:13:89:bf:6d:3c:85:5c:ab:eb:d0:aa:dd:49:37:97:e4:0e:
cf:79:83:7d:e1:55:b9:6a:6d:25:f6:18:5f:66:a0:22:45:78:
f7:b3:fc:d0:59:e8:29:c7:f5:a9:50:e8:a7:d6:5c:0c:87:54:
0f:6c:ff:4e:ff:77:91:2b:38:cb:6c:04:e9:81:36:03:45:12:
df:57:09:df:6c:45:de:20:0a:75:e1:83:3f:2e:0c:b2:23:37:
cb:88:26:42:2b:b4:6e:ca:96:c9:3f:d7:1d:bb:ac:cc:5e:f3:
b4:f6:48:c7:5b:79:ca:a4:41:03:ec:34:57:04:6f:03:a5:a0:
9d:0e:2b:d5:6d:8e:f8:51:4d:29:8c:92:07:16:8a:86:b1:44:
bb:0b:9f:65:82:5a:d2:05:08:d5:67:7f:41:88:fc:be:9a:18:
4a:d6:45:35:3c:59:31:8d:0f:4d:19:5e:54:f6:c3:14:6d:6e:
e4:a2:99:33:87:f7:4c:ad:b0:18:3f:7d:35:7d:c2:21:66:06:
92:b6:f9:22:20:99:e5:b2:34:6a:22:b3:d8:14:d0:dd:5e:6a:
db:9f:11:a5:05:7c:98:e6:54:07:a0:01:c7:ff:8f:4d:69:63:
46:8f:a3:69:a6:e9:fc:2a:1d:61:bb:40:4f:3a:fc:84:13:29:
c7:b4:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:09 2025 by rpki-client