Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pBTC1im9X8niFPAdyl3DnBG194A.roa
File: pBTC1im9X8niFPAdyl3DnBG194A.roa (raw, json)
Hash identifier: 3wC5fKDSBUgRLFB+sSSG5jyV9SGJBti8L+JklhCbNe0=
Subject key identifier: A4:14:C2:D6:29:BD:5F:C9:E2:14:F0:1D:CA:5D:C3:9C:11:B5:F7:80
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018937132D78C3A2BEDC3126DCEC86C1D2D4
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pBTC1im9X8niFPAdyl3DnBG194A.roa
Signing time: Sat 08 Jul 2023 19:55:50 +0000
ROA not before: Sat 08 Jul 2023 19:55:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
178.239.154.0/23 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:37:13:2d:78:c3:a2:be:dc:31:26:dc:ec:86:c1:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 8 19:55:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a414c2d629bd5fc9e214f01dca5dc39c11b5f780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:36:30:93:9d:c5:35:7c:19:0c:e1:df:d5:
c5:96:14:5c:61:6c:eb:57:e8:67:a4:9a:23:dd:07:
8d:cd:64:2d:68:9a:af:eb:92:67:f6:24:3a:64:ba:
c7:9c:46:d3:ba:37:c8:f9:5d:f5:5a:e3:00:69:b3:
45:5d:43:be:d6:0b:da:83:e6:eb:9b:03:e9:68:9b:
37:0a:10:1d:07:20:ba:52:3c:3d:23:f2:10:38:10:
10:61:26:68:b2:b3:8b:45:97:17:c6:02:2b:65:06:
5e:3a:ce:fa:ac:b0:5c:6a:37:bf:bd:f1:a9:d6:08:
ab:7f:8b:97:9e:6c:9a:d8:5e:e7:32:84:a9:10:d1:
35:77:b3:3b:d3:ca:bb:f4:86:23:fb:0a:06:fa:46:
6e:18:03:a2:90:17:39:0e:95:28:de:fe:db:46:c2:
81:19:8a:14:31:71:f2:2b:7b:7a:c7:26:dd:d3:b4:
18:c4:d0:95:af:55:0d:25:c6:6d:ce:a6:06:44:2a:
1e:d8:1a:ba:c0:44:d6:7d:57:1d:c3:28:9c:9a:62:
7f:ba:09:30:80:83:eb:40:b6:41:2c:f1:13:43:0e:
58:4f:95:c6:c5:9a:09:80:85:f0:85:ba:1d:2f:8b:
e6:49:b4:92:a3:ab:1b:50:ca:59:fb:2d:42:0b:6d:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:C2:D6:29:BD:5F:C9:E2:14:F0:1D:CA:5D:C3:9C:11:B5:F7:80
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/pBTC1im9X8niFPAdyl3DnBG194A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.243.48.0/22
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
b0:86:41:fd:47:0b:9d:5b:5e:b7:d3:5f:80:3d:fe:89:78:9b:
05:90:64:c7:8f:6f:b6:ce:5b:28:c3:3a:a7:13:96:b9:37:24:
c1:79:38:b8:4d:98:4d:8e:3c:52:22:4c:15:e6:9f:55:dd:3e:
25:c5:a2:9e:d9:67:21:0b:dd:f0:37:05:70:bf:6c:4c:a3:d3:
0a:43:3c:88:df:ac:49:d7:79:3a:b2:c2:ce:a1:c8:cf:bf:71:
da:e1:11:02:42:1f:72:35:5f:77:2d:63:3d:03:8e:0e:0a:77:
51:5e:59:be:56:69:4c:99:77:14:1e:75:73:b4:1d:63:cb:56:
c3:2c:7c:f7:37:a5:bb:73:05:74:7c:88:a5:4c:ea:19:5e:e4:
49:10:36:15:21:82:68:6c:fa:33:f5:55:ab:c6:08:b9:86:a1:
be:04:04:a2:d6:8e:83:47:d0:06:9e:45:01:62:41:94:06:16:
36:f5:91:c2:92:c8:c1:9f:da:d0:78:d5:18:bc:a7:98:bc:36:
9b:a1:44:02:2a:74:ab:b2:bf:81:5b:d4:53:dd:42:9d:24:a4:
ba:16:70:c4:41:ef:28:13:f0:54:9a:72:c3:11:13:fc:ba:3e:
12:34:0d:a0:00:0e:9f:10:43:1c:a2:d6:b1:f8:ab:12:71:e6:
bd:07:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:49 2025 by rpki-client