Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/GArne5H1tORBbelgY4CTgfTHmJo.roa
File: GArne5H1tORBbelgY4CTgfTHmJo.roa (raw, json)
Hash identifier: N0QPQufGbEF1oVGTB5gibClqQ3p419LF2pPTWbraoSI=
Subject key identifier: 18:0A:E7:7B:91:F5:B4:E4:41:6D:E9:60:63:80:93:81:F4:C7:98:9A
Certificate issuer: /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial: 019D718E
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/GArne5H1tORBbelgY4CTgfTHmJo.roa
Signing time: Sat 01 Jan 2022 01:52:21 +0000
ROA not before: Sat 01 Jan 2022 01:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203836
IP address blocks: 185.66.132.0/24 maxlen: 24
185.66.135.0/24 maxlen: 24
185.66.133.0/24 maxlen: 24
185.66.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27095438 (0x19d718e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Validity
Not Before: Jan 1 01:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=180ae77b91f5b4e4416de96063809381f4c7989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:fb:c8:47:bb:b2:d1:93:78:b1:58:90:a5:
aa:20:81:b3:91:ee:c7:e9:a9:00:69:0e:ed:bb:41:
c9:79:80:f5:b4:bc:78:a6:e6:f3:b9:97:ce:b9:d3:
cf:a3:0d:e6:61:46:9e:1d:1f:1c:f4:40:d8:da:d4:
06:de:66:06:60:1f:d6:df:3a:88:4e:7c:a4:10:5f:
a6:02:b4:e6:d1:38:8b:48:cf:cb:83:18:5c:15:20:
a0:3e:0b:f5:66:27:d9:4b:4e:e1:dc:bc:6c:9d:07:
24:c3:96:13:d7:39:44:8a:58:35:08:2a:f4:4d:1f:
88:7f:41:12:9e:e7:e1:ae:14:aa:52:a0:1e:6e:5b:
43:17:a5:1b:cf:4d:a7:cb:4a:4e:b9:75:73:b0:c3:
8a:59:c4:fa:2d:4e:66:a6:06:6e:51:8a:a3:58:c8:
1c:cb:a7:a7:8f:07:6c:c2:e4:b4:d4:c1:5a:69:18:
0a:93:43:8a:90:7c:88:b9:38:8b:10:f7:26:22:89:
80:8c:a5:3f:7b:d9:1b:8d:2e:b5:a6:42:01:c4:dd:
3c:ca:37:a0:71:8e:db:b9:0e:8a:7d:5e:42:c4:56:
75:b5:78:e2:80:91:14:77:9f:73:f0:9b:af:4b:17:
f3:74:97:c1:ab:ce:62:7e:3e:c0:0a:01:d3:7e:3b:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:E7:7B:91:F5:B4:E4:41:6D:E9:60:63:80:93:81:F4:C7:98:9A
X509v3 Authority Key Identifier:
keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/GArne5H1tORBbelgY4CTgfTHmJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.132.0/22
Signature Algorithm: sha256WithRSAEncryption
26:0a:84:8f:31:7b:43:ad:28:a8:91:8e:8a:99:82:63:d7:9e:
e4:42:8c:98:92:af:e6:f0:0c:dc:ea:06:58:33:ec:aa:b1:b8:
81:f8:59:9b:32:90:9f:d5:e1:56:39:05:4e:d6:03:7c:ad:3a:
f4:a3:5f:cf:b9:d2:7d:3a:8f:27:b6:ac:0a:f8:56:8e:c1:b0:
7a:6f:41:c4:d6:4b:da:30:82:fd:ab:18:5b:69:8e:b5:21:0f:
b3:60:ae:68:a1:55:19:74:0f:f2:89:67:d7:43:f0:e1:ac:ea:
0b:0d:6a:ca:05:3f:f7:58:48:4d:c2:05:9b:c3:9c:ba:70:01:
a2:68:12:49:02:dd:cc:ad:79:fa:f3:a6:72:d4:de:50:35:75:
91:ef:87:66:91:80:35:4a:f7:36:bc:db:1f:8c:d6:94:43:da:
2a:e2:d5:47:62:4c:3a:72:d9:e9:65:b3:07:ef:50:0f:90:73:
b3:08:61:af:92:e6:01:ce:08:79:23:5b:2b:42:b0:0a:4f:32:
7d:a3:60:8d:90:41:a0:96:49:89:52:8c:a1:bc:ce:a0:7c:aa:
0b:fb:9b:3f:56:60:c9:5b:ea:df:66:71:b9:da:8f:a6:20:57:
3b:9d:74:b6:56:83:83:09:ee:4a:ee:0e:5b:42:55:cf:92:59:
97:7e:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:35 2025 by rpki-client