Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/g1X00aZCTyfvnhXa7TYpvI2N2cY.roa
File: g1X00aZCTyfvnhXa7TYpvI2N2cY.roa (raw, json)
Hash identifier: ozArXbQi0nVMYUT70E2Siud1+svxu1b1bJ4SD5gsF/g=
Subject key identifier: 83:55:F4:D1:A6:42:4F:27:EF:9E:15:DA:ED:36:29:BC:8D:8D:D9:C6
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 0187BDA5F5536B0CBF7B6F1CD04B6500FE80
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/g1X00aZCTyfvnhXa7TYpvI2N2cY.roa
Signing time: Wed 26 Apr 2023 12:59:42 +0000
ROA not before: Wed 26 Apr 2023 12:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29037
IP address blocks: 185.39.108.0/22 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:a5:f5:53:6b:0c:bf:7b:6f:1c:d0:4b:65:00:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Apr 26 12:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8355f4d1a6424f27ef9e15daed3629bc8d8dd9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:c1:94:ab:72:83:fd:2e:b0:b2:df:46:77:
33:18:71:76:b2:e3:2a:18:22:18:7d:d4:55:0e:cf:
2e:a9:a6:4d:b5:7f:cb:56:2e:4c:d1:9d:d0:a9:82:
7e:ee:f8:00:1d:27:f9:71:5c:5f:de:a6:f7:59:55:
6a:fd:d5:90:18:c8:d8:9a:81:81:b9:21:a5:2c:8f:
bc:59:7b:12:a6:5a:3d:87:48:0f:aa:c2:2d:df:9d:
59:20:69:f2:d8:88:9f:10:c6:ac:85:f9:45:48:64:
f9:f1:01:46:a0:d5:fc:18:eb:04:ca:56:60:47:4d:
f8:1c:af:a7:1b:7d:1d:b3:f0:ce:8d:59:ef:de:4c:
2b:85:e8:a8:af:de:2b:d5:67:23:53:27:50:8b:39:
4c:b6:8a:d0:9f:5d:86:73:25:94:59:19:eb:d4:31:
d6:3d:bb:35:50:3f:b6:86:6f:2b:24:b2:71:88:0e:
10:cd:06:4f:f8:08:02:68:cc:b6:c3:53:77:6d:03:
c2:0f:44:84:00:af:b0:8d:bb:e8:d6:69:2d:20:a3:
57:85:eb:fb:f2:2f:dd:7a:4b:ed:1d:8f:50:1b:f1:
cd:40:af:18:14:6f:50:93:7c:95:9c:0c:f7:ae:88:
bb:b9:68:d2:b5:6c:21:d4:4e:5d:c5:5d:15:e5:78:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:F4:D1:A6:42:4F:27:EF:9E:15:DA:ED:36:29:BC:8D:8D:D9:C6
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/g1X00aZCTyfvnhXa7TYpvI2N2cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:82:6d:50:bc:aa:29:88:e1:f3:68:eb:67:66:2b:f6:50:63:
3e:4b:b1:9b:df:29:be:35:d4:06:f5:31:d6:b5:07:96:f8:c9:
b7:97:8b:66:39:f0:fb:79:36:00:ec:89:81:57:8a:ca:18:d9:
73:2f:8c:4d:7c:35:02:25:96:74:b1:82:36:08:57:86:2e:5b:
85:7f:d3:b5:c7:40:62:bf:23:1f:ba:2a:dd:9b:21:10:e5:9a:
f5:50:65:93:5b:88:67:b9:a1:73:6a:e2:19:d3:26:df:d9:83:
83:68:d2:6f:c7:f5:cf:35:13:d5:58:f5:5a:dd:9a:3c:f2:48:
c1:37:88:4c:24:aa:ba:bc:4a:03:c8:7c:8a:36:46:25:2e:5b:
6d:6a:9f:a9:37:0a:1a:20:ad:a7:ae:56:9a:25:87:1e:b6:a4:
a0:b1:bd:ea:03:6c:d7:00:8b:43:b0:1e:bf:af:47:4a:fb:7a:
ed:39:67:04:ef:93:07:57:c4:64:31:a4:6f:11:31:9c:c5:c5:
a9:5f:61:a5:e3:8d:2d:32:90:0e:12:3f:07:aa:5f:9c:f7:42:
5d:f4:3b:9d:36:7f:f5:17:84:6c:d1:3e:12:e6:65:11:37:1a:
93:a2:7b:fc:6f:cf:82:09:0e:ed:f8:16:1d:f9:24:91:1d:b5:
75:80:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:13 2025 by rpki-client