Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/X-4AvJcWRXVdQ3tlkU82GZ-wNdI.roa
File: X-4AvJcWRXVdQ3tlkU82GZ-wNdI.roa (raw, json)
Hash identifier: P+gfo096p1NNKnt//MCr3KVGPQ0Ll2lQpRetx7rykQY=
Subject key identifier: 5F:EE:00:BC:97:16:45:75:5D:43:7B:65:91:4F:36:19:9F:B0:35:D2
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01856BDC84E693A7C8CC595485A8884E7C47
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/X-4AvJcWRXVdQ3tlkU82GZ-wNdI.roa
Signing time: Sun 01 Jan 2023 05:44:52 +0000
ROA not before: Sun 01 Jan 2023 05:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208649
IP address blocks: 185.75.221.0/24 maxlen: 24
2a0d:a640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:84:e6:93:a7:c8:cc:59:54:85:a8:88:4e:7c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 1 05:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fee00bc971645755d437b65914f36199fb035d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:9a:42:96:87:ea:52:c9:28:15:3a:d9:b7:
50:7c:bd:12:93:be:c4:6c:5d:81:b0:26:1f:a9:0e:
11:d7:0a:c5:ed:7e:f2:c8:12:28:7c:75:9c:6c:b8:
c9:37:ab:91:3c:7a:bd:c2:b3:d3:21:ed:19:60:66:
b7:7b:cf:2d:f8:36:49:0e:44:19:c0:94:55:84:31:
97:fb:e5:1d:f7:52:3e:62:ec:72:9f:28:96:96:89:
19:fe:29:5c:37:b6:37:83:ad:6e:b5:cc:8b:04:29:
68:63:69:2f:ab:f4:06:18:5a:92:0c:d8:65:46:99:
e9:0a:0c:8f:db:0d:07:88:97:34:f3:de:68:57:f6:
e3:93:c7:26:52:30:73:e3:3f:d2:b2:b3:03:8f:e7:
2d:b0:0b:7b:25:8d:f2:45:b6:dd:5b:42:df:5d:11:
ce:f0:b4:3d:d0:c9:d4:ca:d2:93:0e:f0:00:d5:cd:
dd:f0:06:0c:0e:36:c0:d7:65:17:08:c0:15:12:cc:
9e:c2:7f:84:06:82:25:23:a3:71:05:cf:8d:48:5d:
9d:e8:ed:78:11:9c:d0:f2:8c:60:ad:0f:f1:7d:4e:
9b:94:05:cf:6d:a9:0c:5b:04:3d:ed:cb:a5:57:c4:
8c:90:03:70:5f:c2:44:15:7c:9f:a6:91:70:b7:35:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:00:BC:97:16:45:75:5D:43:7B:65:91:4F:36:19:9F:B0:35:D2
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/X-4AvJcWRXVdQ3tlkU82GZ-wNdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
IPv6:
2a0d:a640::/29
Signature Algorithm: sha256WithRSAEncryption
7d:5a:cb:cf:5c:b5:dc:c2:09:67:b2:76:e7:d9:5a:8d:5f:56:
22:17:af:fb:20:66:b3:0b:44:b3:be:c5:92:09:88:7e:3c:2c:
18:88:1f:f5:45:86:10:b1:16:21:5b:b7:88:53:01:5c:1d:86:
92:6f:34:d5:8d:ac:f4:f5:f7:0e:55:48:f9:9c:51:58:d1:09:
b7:48:3a:ab:3e:a4:e6:ce:6c:48:5c:a1:e6:92:00:2a:e0:3a:
bc:ca:1a:0f:b7:02:d4:cf:d3:91:44:43:46:60:50:9f:6d:cf:
9d:b9:c8:f9:68:ab:c2:5a:12:93:d2:b1:65:b5:9b:f7:27:2c:
e4:7f:23:be:61:d3:c4:f6:44:96:1e:84:91:54:56:fb:d4:c0:
3a:b9:f4:f3:40:aa:2b:2a:17:9b:97:8c:47:84:f1:59:b4:b9:
cd:30:c5:d2:27:d7:b1:8d:e7:48:50:dd:bf:a2:f0:9e:76:f3:
4f:98:d9:0c:c6:cb:ac:17:17:01:8b:35:58:37:0a:de:99:dc:
87:2d:8e:f5:d6:7f:c0:aa:67:c5:3b:67:ca:31:63:53:2e:ad:
6c:dd:57:89:bb:69:45:a2:7c:b4:be:dd:06:92:97:83:a6:88:
61:70:64:68:b5:58:8a:02:ef:71:e5:17:b6:e9:16:0b:d8:9e:
2e:bf:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:23 2025 by rpki-client