Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/X38VuxIrHuunxbgCIZ8HmG7IGSI.roa
File: X38VuxIrHuunxbgCIZ8HmG7IGSI.roa (raw, json)
Hash identifier: gVjUMEvMv6JAdaP2Zxs1rANNNEFRFXBnc4fgqJOiyJE=
Subject key identifier: 5F:7F:15:BB:12:2B:1E:EB:A7:C5:B8:02:21:9F:07:98:6E:C8:19:22
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 0185709505F6502DA098B72F12806A658B90
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/X38VuxIrHuunxbgCIZ8HmG7IGSI.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202363
IP address blocks: 185.255.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:05:f6:50:2d:a0:98:b7:2f:12:80:6a:65:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7f15bb122b1eeba7c5b802219f07986ec81922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:0a:63:2d:32:2d:e0:7f:be:fe:2b:63:a3:
58:2c:8c:bc:18:21:f0:3a:40:3f:e3:dc:1b:8b:9e:
61:22:cc:82:c9:bd:75:8c:65:cc:3d:97:93:b0:f8:
e2:e0:0a:a7:51:3f:d0:ff:db:50:1e:e7:01:24:d9:
c9:5c:55:41:37:a9:0e:18:e5:f1:b5:4e:91:64:7e:
00:ab:2e:62:f3:15:c1:94:c4:b0:56:6e:a2:07:89:
6d:10:2b:9c:90:6c:13:8c:a6:e1:7a:25:1c:54:95:
13:d2:7c:8a:9f:38:17:65:d2:b3:5c:52:99:c9:7b:
c7:20:9f:6a:42:de:2b:23:fd:16:21:f3:9a:dc:84:
5d:4b:b1:68:6d:16:e9:e3:57:06:7f:3e:c9:26:0e:
4e:9c:27:a4:6e:3d:04:63:5f:04:d0:c0:2f:bb:7a:
4a:80:86:a1:56:99:d2:40:71:e9:9a:1a:11:97:d3:
26:de:60:65:9b:30:a3:78:06:31:6b:b3:19:90:91:
f8:db:cd:f7:2f:a1:50:0c:18:40:c9:69:39:83:8a:
5c:d9:3d:51:44:f8:4f:8c:78:68:31:5d:fe:9b:e3:
fa:7d:74:c7:77:b8:a3:17:38:ed:a7:f2:1e:01:46:
12:83:1d:6f:41:0d:78:e8:0d:c8:53:17:f7:47:e6:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:15:BB:12:2B:1E:EB:A7:C5:B8:02:21:9F:07:98:6E:C8:19:22
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/X38VuxIrHuunxbgCIZ8HmG7IGSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.160.0/22
Signature Algorithm: sha256WithRSAEncryption
95:ec:18:1a:8a:11:c6:86:a3:c8:8a:75:ae:70:8c:2d:15:24:
d2:22:43:8c:f0:c3:96:d2:10:0d:30:e5:fb:97:4f:48:0b:89:
2d:9a:80:2c:fc:2c:89:e2:a9:56:70:3c:28:f4:c9:e4:72:0e:
e5:d3:2c:75:2e:26:44:73:a2:14:82:a1:f2:80:e2:2f:c0:15:
f1:51:b1:8b:a6:2a:b4:a0:e2:4d:fa:5c:ff:6f:f0:a3:59:7d:
c7:fc:58:44:c0:3d:7b:03:63:04:94:86:31:f5:9d:b1:57:51:
aa:57:79:f2:ac:77:7d:f6:c9:1d:8a:f6:92:f8:54:3c:71:22:
87:ad:c4:00:90:fc:d8:63:52:ae:38:83:6a:8b:64:7d:fe:32:
a2:03:e1:c3:46:f1:4d:f7:32:0a:52:36:73:6e:42:20:f7:7e:
fe:5e:0e:3f:c9:0b:6c:c8:1b:21:d3:7c:38:37:6e:13:75:73:
4f:78:12:94:5c:31:af:04:c0:fe:af:de:13:b7:71:52:15:fc:
60:ce:a1:4b:0c:68:84:f3:56:8f:1d:18:8f:2f:d1:23:eb:85:
9e:7a:9d:e8:71:8b:cc:7b:bb:ae:de:73:c3:12:6d:27:66:e1:
1d:dd:8f:cd:0c:b8:f5:ac:eb:db:bd:2c:61:9c:51:c4:49:00:
1c:4c:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:14 2025 by rpki-client