Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gKciDPRdH4M9mdNkoNe-sP207T0.roa
File: gKciDPRdH4M9mdNkoNe-sP207T0.roa (raw, json)
Hash identifier: IW/bFwAyzatuEPnnKzIrDh2miWmFIJz2Iw4ES2Msjh0=
Subject key identifier: 80:A7:22:0C:F4:5D:1F:83:3D:99:D3:64:A0:D7:BE:B0:FD:B4:ED:3D
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 01856C01341E3C2242F62EC2DE485A21E636
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gKciDPRdH4M9mdNkoNe-sP207T0.roa
Signing time: Sun 01 Jan 2023 06:24:56 +0000
ROA not before: Sun 01 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.248.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:34:1e:3c:22:42:f6:2e:c2:de:48:5a:21:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Jan 1 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a7220cf45d1f833d99d364a0d7beb0fdb4ed3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:f2:db:d1:b2:51:8e:1d:90:86:96:76:9b:
1f:68:5d:d4:80:af:b5:86:27:29:0c:ed:dd:4e:42:
ae:81:08:3f:53:1b:f9:6d:45:68:e5:76:64:83:63:
d4:7c:42:0c:8e:e5:8d:57:17:49:2e:a2:bb:a6:8d:
28:8c:50:26:b4:b6:14:26:97:73:6a:0a:60:51:0c:
90:f8:d8:28:ec:a9:62:4e:0f:60:fc:66:37:49:bb:
ec:5a:34:36:bc:d1:ed:11:77:f7:b3:77:0f:f8:c8:
5d:74:4f:12:52:34:4b:20:e2:55:e2:5a:ee:95:00:
a1:6e:14:31:3e:e7:16:65:33:09:59:87:a0:26:45:
7d:29:30:2a:44:b8:a6:b1:cd:22:0e:61:e6:52:b7:
af:ad:61:15:b3:32:4f:7f:21:59:81:13:b8:4f:f8:
f9:c0:8e:e4:c9:2a:0c:a7:16:0d:3f:72:34:e5:3c:
b6:fe:1b:f2:0c:d2:cb:96:95:f4:0e:32:8f:90:a0:
f1:2d:eb:9c:bf:6f:05:2e:86:57:f1:d0:16:f3:1e:
92:73:79:a2:e5:bf:01:2e:58:f5:30:b7:88:1c:1c:
3c:b5:e6:9f:df:06:67:7b:4e:7f:f6:8c:31:ff:1a:
59:78:cd:35:70:43:24:af:78:bc:f2:d2:51:35:b1:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:22:0C:F4:5D:1F:83:3D:99:D3:64:A0:D7:BE:B0:FD:B4:ED:3D
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/gKciDPRdH4M9mdNkoNe-sP207T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:b0:f5:8f:b0:f8:e2:84:e6:58:1b:97:8f:83:01:cc:12:16:
43:da:61:5f:a2:11:30:67:a0:ec:48:69:35:b9:c6:55:74:6c:
23:76:ad:78:26:85:e3:7f:4c:9c:f7:3c:80:d8:09:7a:d3:b8:
33:36:ec:a6:e7:3f:95:bd:84:ad:c5:13:8c:7f:2c:27:89:f7:
a3:b3:42:fa:d8:4b:e9:42:a4:14:17:ed:8e:e9:bc:cb:d5:26:
c6:e3:78:1c:4b:59:3d:65:6d:2f:4f:82:17:6e:ca:e5:21:6a:
40:96:76:b6:1f:ba:8a:f9:ed:b5:fb:76:d1:22:21:0b:d5:5b:
6f:91:de:e0:1b:23:fc:ef:df:f7:05:4f:6e:80:37:19:ed:3b:
e8:46:22:e3:c4:2a:cd:00:f6:83:eb:33:1f:3f:86:19:64:39:
d5:f8:b1:57:b9:03:20:a0:5b:41:0d:52:9b:5c:f2:ce:72:a5:
69:cd:12:e0:7d:e6:1c:5f:97:53:2e:29:c3:04:4d:b8:2a:7c:
2b:6b:c5:6d:fd:8f:1f:fc:21:02:90:0a:8d:93:9a:6d:64:d6:
e5:1f:e6:4f:c8:44:36:a1:2a:b4:91:03:e9:59:f9:41:0d:03:
59:4d:59:bd:af:c4:16:59:84:91:1c:f2:67:66:50:60:0d:9b:
dd:dc:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:44 2025 by rpki-client