Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/P1SJZCYEQ46tJ05EPe4LVOTKfCk.roa
File: P1SJZCYEQ46tJ05EPe4LVOTKfCk.roa (raw, json)
Hash identifier: 2O6ZEBK+oBP9Gf03Cqtw42BN2mR8KveDxxYrl28C5L0=
Subject key identifier: 3F:54:89:64:26:04:43:8E:AD:27:4E:44:3D:EE:0B:54:E4:CA:7C:29
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0919511C
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/P1SJZCYEQ46tJ05EPe4LVOTKfCk.roa
Signing time: Sat 01 Jan 2022 07:59:03 +0000
ROA not before: Sat 01 Jan 2022 07:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29144
IP address blocks: 194.0.142.0/24 maxlen: 24
185.76.200.0/24 maxlen: 24
185.76.200.0/23 maxlen: 23
185.76.203.0/24 maxlen: 24
185.76.202.0/23 maxlen: 23
185.76.202.0/24 maxlen: 24
185.76.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152654108 (0x919511c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 1 07:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f5489642604438ead274e443dee0b54e4ca7c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:cc:0e:e7:df:50:e7:e3:e1:10:19:05:51:
2f:a7:90:84:d4:66:2a:f8:37:95:3a:59:ed:69:fe:
fc:f3:79:63:f2:eb:5f:5b:8b:4e:2b:27:29:1d:c0:
27:c6:d8:14:be:4d:28:e8:d2:72:02:6a:fa:4d:97:
75:12:15:5a:fc:4a:94:91:d4:42:9d:84:c0:c3:76:
2b:68:5f:86:b1:6b:da:dc:05:c0:3a:5c:93:f9:c0:
95:4b:9f:98:1a:f1:91:6a:70:3d:ec:51:12:94:cc:
6a:af:38:a9:37:1f:bb:3c:bc:e0:e3:f9:4a:4e:1c:
7a:57:7a:78:69:41:a1:05:3a:31:aa:b7:3d:e1:28:
64:d7:df:4d:f8:46:5b:68:60:80:35:bc:c2:f0:9e:
6a:db:01:d2:a6:59:67:f1:fd:60:e6:72:33:ce:d8:
92:e7:4f:4d:b0:b1:1b:88:d8:0d:cb:f8:d2:3b:56:
57:a2:d4:f5:c6:e2:18:6e:50:03:1c:ab:2b:98:40:
f6:19:f6:03:5c:85:f5:fa:b6:95:22:f0:c9:2d:ec:
44:b6:18:87:3c:f0:57:7d:57:cd:3c:ed:02:15:82:
c8:da:65:de:3f:f0:56:6b:b3:f6:74:03:0f:18:88:
9d:6f:33:74:e3:27:82:24:c2:e9:a4:ac:3e:09:d0:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:89:64:26:04:43:8E:AD:27:4E:44:3D:EE:0B:54:E4:CA:7C:29
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/P1SJZCYEQ46tJ05EPe4LVOTKfCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.200.0/22
194.0.142.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6d:c9:48:42:a7:cb:a0:19:f6:eb:c8:a5:e9:3e:3d:44:0f:
10:98:33:74:fe:8f:38:2c:e5:56:61:9f:ec:23:66:75:61:37:
5e:10:c5:25:c2:f6:ab:f7:06:87:77:aa:60:ca:f3:58:55:87:
88:ce:6f:c1:92:88:b9:14:4f:56:e2:a2:37:c8:bd:8d:41:38:
f3:7d:40:58:cb:64:7d:de:dc:1c:d8:cd:d7:ba:a2:d9:a3:b4:
30:86:09:8f:3c:6d:20:ec:ce:4d:11:8b:b2:b9:e0:ea:9c:2e:
d6:5c:e5:72:25:74:5b:98:fc:45:53:98:26:b0:06:b9:e7:5e:
eb:c0:a0:e5:13:03:e0:d6:9a:ac:dd:70:83:56:44:c2:7a:b0:
3a:c7:05:2c:13:e0:ed:1c:24:6f:1b:dc:a4:c8:90:85:53:ff:
e9:57:9b:7a:fd:a4:7a:89:b3:61:dd:74:69:82:b2:e8:9c:29:
a1:b9:c8:91:54:94:85:0c:9d:67:01:12:bf:d4:b4:4d:57:38:
fe:11:2e:4b:de:81:ed:cd:33:da:4b:2a:15:bd:fa:7e:ac:62:
28:4e:29:0b:ba:6d:ce:e0:8f:2e:f4:1e:2c:1a:57:34:68:52:
19:c3:21:08:4b:f8:96:ed:43:da:f0:f9:97:dc:cf:22:58:8b:
3f:d6:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:40 2025 by rpki-client