Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6MDIwEN-DnSvm7EZtLEOqlhrQj8.roa
File: 6MDIwEN-DnSvm7EZtLEOqlhrQj8.roa (raw, json)
Hash identifier: 3bnrw+akEYF6+kQ3SOmx753oA0IIofYj5s0gomv8mSc=
Subject key identifier: E8:C0:C8:C0:43:7E:0E:74:AF:9B:B1:19:B4:B1:0E:AA:58:6B:42:3F
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018C4EA5D7A5DC24A15C65EAD12C17F3A5DA
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6MDIwEN-DnSvm7EZtLEOqlhrQj8.roa
Signing time: Sat 09 Dec 2023 12:55:40 +0000
ROA not before: Sat 09 Dec 2023 12:55:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 185.124.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:a5:d7:a5:dc:24:a1:5c:65:ea:d1:2c:17:f3:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 9 12:55:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c0c8c0437e0e74af9bb119b4b10eaa586b423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:2b:0b:4d:22:60:e2:4d:ad:83:14:96:8c:
b2:a5:b1:59:22:a5:a9:e7:24:47:28:ac:f7:ae:d3:
06:71:b4:da:46:99:ca:69:19:73:3d:25:17:b2:38:
ee:12:07:c8:a4:c3:80:73:e4:02:ba:2a:bd:6d:9b:
a8:e9:56:c9:a9:56:3f:36:8e:3f:b5:8b:04:ab:f7:
24:d3:a6:9f:31:d3:44:4c:10:4c:bf:03:c4:5f:93:
0c:e1:1c:b0:74:bd:88:e2:92:ed:9a:ea:5b:04:40:
f0:38:a8:55:4d:e7:57:28:e8:85:f7:35:a9:48:01:
a8:81:9a:32:22:dc:91:78:87:dc:b0:74:90:8f:24:
bd:0f:72:a3:43:14:c4:5c:46:d0:d5:bf:f3:71:5e:
ee:d9:24:26:3f:cc:e0:20:6b:3f:67:28:05:a2:2e:
4a:4b:e9:89:c6:dc:bb:92:96:d0:4a:ec:fc:51:87:
11:72:b8:06:89:73:c0:69:2d:c5:16:ca:ae:a3:e8:
9d:fa:3d:bd:80:12:ba:de:fd:69:69:95:d0:f9:6a:
16:04:27:3e:4d:d8:e9:55:92:95:0d:f8:61:92:b9:
15:6f:7d:8e:32:ae:b2:2c:a1:9e:f5:02:89:c5:ae:
2d:58:68:7e:aa:26:db:db:fd:c0:76:c8:cc:09:c3:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:C8:C0:43:7E:0E:74:AF:9B:B1:19:B4:B1:0E:AA:58:6B:42:3F
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6MDIwEN-DnSvm7EZtLEOqlhrQj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
45:26:8f:9d:41:42:79:40:3f:3e:24:ec:5d:52:8b:87:ed:c1:
85:6c:7d:36:01:2e:e8:5b:a3:bf:30:44:6a:36:58:99:08:31:
15:70:ff:7d:ef:3c:4f:18:21:90:49:da:2a:13:cc:7d:45:e2:
99:03:0a:44:c7:83:2f:0a:d3:e7:00:9f:e2:2b:5e:34:bf:d1:
c0:e8:2c:73:05:ee:02:19:75:bd:70:ec:e5:d7:f0:b3:85:bc:
3a:68:3a:78:a2:66:37:81:97:92:b7:93:d8:84:6a:17:59:bc:
2a:9d:56:e0:9d:c2:11:1f:34:56:97:e9:3c:d0:af:fc:76:31:
d3:20:0f:d4:8c:80:87:ef:17:83:a4:80:d9:7b:5c:83:07:04:
a5:b7:80:1f:f7:c9:26:3e:a9:be:5e:c9:64:f0:8e:2f:d0:ae:
1e:7a:3e:eb:5d:65:a3:0f:9f:8e:f4:2e:f4:5b:88:50:9d:ee:
35:07:99:f5:7f:a3:0a:4f:22:ec:c4:dd:19:c2:26:5c:7d:e9:
06:05:4b:ae:82:44:14:b9:d4:e1:ff:b8:84:63:7c:b9:64:4f:
7b:cb:98:bf:0d:2e:a0:00:30:02:ab:64:b2:a9:65:ec:a6:4a:
7a:aa:88:69:49:59:93:9e:d6:15:ee:cb:3a:f7:01:2b:50:a0:
7e:ba:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:49:49 2025 by rpki-client