Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bHFSuPeIrlmi1M1WfolZB6V8tY8.roa
File: bHFSuPeIrlmi1M1WfolZB6V8tY8.roa (raw, json)
Hash identifier: LFwjkjZMOUPHUt8BAR9xXJiVWqyf0tkrPa4iB0L/fbA=
Subject key identifier: 6C:71:52:B8:F7:88:AE:59:A2:D4:CD:56:7E:89:59:07:A5:7C:B5:8F
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018828710C9852FADD8156232383E808D3ED
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bHFSuPeIrlmi1M1WfolZB6V8tY8.roa
Signing time: Wed 17 May 2023 06:41:17 +0000
ROA not before: Wed 17 May 2023 06:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
178.239.154.0/23 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:71:0c:98:52:fa:dd:81:56:23:23:83:e8:08:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 17 06:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7152b8f788ae59a2d4cd567e895907a57cb58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:8d:f4:81:9d:1d:7c:9e:18:f9:8a:0a:ce:
df:f9:34:fd:8b:68:20:59:6a:3e:ea:e0:d9:53:25:
fd:c4:06:f8:ed:05:11:bf:59:d9:62:53:de:6f:25:
d8:81:60:9a:e0:de:7c:6f:54:27:f8:8b:7d:62:82:
f0:a4:a5:a7:07:f9:e2:ed:e0:cc:78:94:77:f3:bd:
0e:13:ba:b6:ed:f5:d2:57:e0:8c:70:ab:35:5b:56:
b7:c5:bb:42:e1:43:cf:3b:bf:36:21:8a:e2:ce:33:
fc:dd:ea:f0:a7:9e:ae:6b:18:86:d7:d9:43:64:51:
97:ec:c8:3c:b5:b1:69:d0:f7:d0:18:f2:31:d4:54:
1c:d2:e2:f3:e4:5c:23:4e:3a:e4:2a:ab:5f:b3:e3:
99:1e:ba:bb:a1:3b:16:c6:03:cf:b4:7e:99:29:30:
cd:64:0f:91:63:fb:52:2b:8e:a5:6b:c8:d5:af:96:
75:e2:4a:59:9d:00:e6:26:ba:32:f7:ca:17:49:d1:
28:7d:c0:8f:11:48:59:8d:9a:fd:5a:0c:72:cc:16:
dc:6a:8f:55:9a:8f:7b:4c:54:37:b4:a8:a2:b4:4a:
46:5f:a4:14:49:a6:b0:84:69:eb:97:2a:63:16:95:
80:6d:8b:93:21:04:ca:29:57:b7:03:63:c2:2e:83:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:52:B8:F7:88:AE:59:A2:D4:CD:56:7E:89:59:07:A5:7C:B5:8F
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/bHFSuPeIrlmi1M1WfolZB6V8tY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f2:83:02:49:30:c0:07:35:0f:4a:ae:0a:9f:fa:63:c5:9e:
e4:41:69:2d:08:4e:2a:05:05:7a:e8:85:c5:96:6d:bd:40:26:
cb:6a:69:46:90:ca:b1:5a:de:20:52:da:02:85:c0:4c:94:19:
e9:83:fd:df:63:67:d8:dd:f6:41:6d:a5:1c:c4:cf:25:48:27:
10:17:67:d3:ea:23:50:6c:8e:d6:40:84:97:a6:f0:e9:1d:ab:
6b:ef:ab:69:b0:90:af:db:4c:28:d3:85:9a:24:ce:85:e9:92:
9a:57:f4:63:22:74:ff:12:0d:fe:c2:2c:38:c8:f3:92:ac:19:
90:43:8f:e7:d9:35:ce:bf:e3:9b:fe:1c:cb:b6:54:82:8a:f3:
f6:61:a4:30:1a:fa:80:69:93:d8:20:5b:6c:e0:41:b7:e0:fa:
dc:c5:a0:ce:ff:30:3e:10:c9:0d:31:63:21:f8:0d:6f:1b:64:
93:3c:81:d8:3b:6c:ff:fd:be:fb:4a:fe:3e:41:51:a8:0d:0d:
2a:4d:2a:59:63:8d:b6:a4:a5:42:57:a4:11:ac:39:5a:57:f9:
dc:7c:c6:f6:fb:63:ee:fa:4a:64:42:e4:cd:5d:ac:1d:d9:44:
77:e0:8f:51:e1:ec:05:c0:09:f8:50:cb:b1:2e:6a:72:0a:3a:
f5:b1:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:50 2025 by rpki-client