Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/RsV9AW8-6qwFaxAMxV7WKU2BJ5c.roa
File: RsV9AW8-6qwFaxAMxV7WKU2BJ5c.roa (raw, json)
Hash identifier: WJYPhIV2b+0sHk//jz52FJw6zPKiwxuybc8i2NB+NPA=
Subject key identifier: 46:C5:7D:01:6F:3E:EA:AC:05:6B:10:0C:C5:5E:D6:29:4D:81:27:97
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018B9478F198FB7A3844321F442AAD2C1CE8
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/RsV9AW8-6qwFaxAMxV7WKU2BJ5c.roa
Signing time: Fri 03 Nov 2023 09:17:15 +0000
ROA not before: Fri 03 Nov 2023 09:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206060
IP address blocks: 185.197.179.0/24 maxlen: 24
185.197.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:78:f1:98:fb:7a:38:44:32:1f:44:2a:ad:2c:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Nov 3 09:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c57d016f3eeaac056b100cc55ed6294d812797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:1c:ee:6f:65:c0:9c:d1:e8:3c:23:e3:78:
42:3a:42:79:ae:f0:0a:71:e8:28:e9:ef:37:9a:19:
b9:3e:48:fc:bf:53:e9:a4:85:ef:75:40:b7:79:6e:
cc:02:bd:44:f2:62:21:16:be:23:7f:7f:62:cb:68:
e3:22:92:c8:ca:72:5f:26:41:bd:a4:c3:5d:28:67:
c6:ec:5d:01:77:11:9f:a9:f4:af:23:80:3f:59:89:
34:89:4e:a6:a9:67:34:0f:c5:d3:2b:6d:e8:35:5f:
2f:98:89:51:fb:a9:aa:a0:c3:b8:42:cd:97:c6:ec:
54:0b:d7:5d:bd:2d:e8:b3:21:f2:8f:62:ce:01:9c:
98:26:8c:8d:fc:cd:64:7e:c2:07:79:10:a2:e0:ca:
af:59:0c:9c:29:0a:48:f5:ff:b7:f1:67:c1:71:44:
2d:6d:a9:dc:b3:40:49:0e:32:4f:96:a6:cc:8d:87:
84:a8:6f:b3:0c:78:dd:9f:68:e7:22:12:64:6f:13:
7e:b9:56:8d:b8:1d:4f:67:39:a5:a5:f9:95:83:5b:
06:5f:35:73:fa:3b:12:90:34:7a:0d:b8:33:2e:21:
56:e6:3b:1e:ea:8f:59:01:ce:98:5c:d8:ba:8d:a7:
06:3d:1d:1a:2f:15:04:dc:50:a9:79:1b:f4:46:de:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:7D:01:6F:3E:EA:AC:05:6B:10:0C:C5:5E:D6:29:4D:81:27:97
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/RsV9AW8-6qwFaxAMxV7WKU2BJ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/24
185.197.179.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e2:e4:7e:51:25:1b:b8:8e:21:51:c8:d5:d3:49:e1:51:ae:
fb:a6:08:ac:2b:cd:8a:74:8e:c3:c6:4a:83:ae:2c:14:63:f8:
24:e9:76:46:cf:31:2b:a2:44:bc:67:81:bb:be:81:51:68:00:
8f:29:ac:89:dd:59:3a:28:c7:15:61:31:8a:c0:b0:c0:3d:8f:
ef:16:d0:f8:ca:ef:5b:d7:e8:ca:bd:9e:d6:c7:19:28:ed:88:
ec:aa:11:58:9d:54:ec:10:07:cb:a6:f2:b7:4e:5a:53:2b:fe:
fd:f3:66:3c:1c:40:fa:0f:10:53:6b:79:22:3f:97:9f:a8:d8:
bb:14:00:91:d5:a9:c3:66:7b:8d:65:69:c2:3d:61:2a:f2:65:
eb:34:6d:13:b9:35:b5:e4:87:a4:2b:c3:34:c7:ba:a4:f8:be:
5d:01:ef:ed:d3:ca:cb:b1:91:fa:d1:42:4d:fd:99:3e:50:d5:
f7:6b:97:b9:3a:af:e0:c4:6b:a3:56:9c:4d:02:bf:ea:0f:ed:
ec:43:79:3b:a2:8b:eb:b6:5f:1f:a6:4b:f2:39:d6:47:7f:e7:
5a:2f:94:63:9b:7e:2e:4d:16:4d:b1:ef:19:54:b6:b1:d5:3e:
d8:ed:e6:d7:94:76:b0:9e:d9:1c:68:d1:18:e1:0a:df:92:4a:
60:14:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:34 2025 by rpki-client