Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/1-kRKEnOSJAeeYYdFleBNZkGeCSg.roa
File: 1-kRKEnOSJAeeYYdFleBNZkGeCSg.roa (raw, json)
Hash identifier: DW2TsMhPL7TNEaqgRd8qexacQ7hVge/oP3ZgEFr8oSE=
Subject key identifier: FA:44:4A:12:73:92:24:07:9E:61:87:45:95:E0:4D:66:41:9E:09:28
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 0184D38A052108F4661A5A8426DB6D9BF770
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/1-kRKEnOSJAeeYYdFleBNZkGeCSg.roa
Signing time: Fri 02 Dec 2022 15:52:28 +0000
ROA not before: Fri 02 Dec 2022 15:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204204
IP address blocks: 185.142.17.0/24 maxlen: 24
185.142.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:8a:05:21:08:f4:66:1a:5a:84:26:db:6d:9b:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Dec 2 15:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa444a12739224079e61874595e04d66419e0928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:84:a1:99:0f:3b:b6:b0:29:16:6b:17:9d:
13:3f:41:68:58:03:d2:40:49:40:2a:d5:39:f1:ee:
c4:bd:83:43:23:f7:65:9e:6a:50:a4:10:33:42:4d:
4d:3b:78:be:5a:af:6c:4f:a6:d3:30:3e:09:b8:c0:
ea:d2:52:75:e6:ef:de:24:f5:60:e3:10:84:f1:0b:
9b:ef:82:42:9b:4f:6b:79:54:b5:a9:33:7e:d0:03:
17:99:a7:9e:45:5f:fc:36:cc:6f:2a:82:38:24:36:
42:f0:06:a9:f7:d8:27:ce:c5:a6:a3:44:ba:f2:3a:
d2:28:44:0d:bc:8b:d7:02:bb:57:b4:e1:7a:1c:ad:
90:c1:db:f5:57:46:db:86:80:2c:00:9e:f6:72:7d:
4a:e9:72:35:75:2d:97:ea:86:5b:ef:b9:b7:af:16:
0b:57:eb:a4:75:f0:38:ab:4d:97:57:46:99:f4:7c:
cb:fd:16:3e:31:65:a8:c1:7d:cc:70:2d:6e:36:15:
98:da:55:a5:75:af:2e:94:d2:39:bb:28:33:8d:02:
f6:fb:e5:bc:1f:5c:ff:7a:f7:e6:2c:2f:15:47:e9:
26:f5:e5:bc:db:54:4d:5b:c9:54:3b:da:c4:45:50:
74:e1:e3:31:98:1b:ed:7c:a1:4d:47:07:c4:1e:eb:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:44:4A:12:73:92:24:07:9E:61:87:45:95:E0:4D:66:41:9E:09:28
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/1-kRKEnOSJAeeYYdFleBNZkGeCSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.17.0-185.142.18.255
Signature Algorithm: sha256WithRSAEncryption
9b:e6:5f:0a:ef:db:e2:b6:a6:2a:8f:c3:9f:15:4b:c1:4c:a5:
12:54:6b:be:64:0c:b5:df:bf:26:78:f0:64:a8:72:74:b9:65:
d9:0d:38:22:fa:23:db:fa:90:7b:16:0f:f4:ca:5c:26:1d:ca:
e2:6d:a4:f4:c7:a0:5f:b2:a7:e6:3e:4f:cf:6f:06:ec:c9:46:
3d:38:8d:05:27:a7:46:99:a8:23:8a:99:6e:22:14:b3:8b:85:
8b:27:a5:29:66:0b:2c:ea:b2:b8:bb:4e:42:ff:f9:a9:55:ba:
49:eb:d1:1f:6f:4d:d4:b6:ff:d5:02:50:7c:f5:c4:d7:3f:2e:
73:af:dd:4d:f4:c0:95:92:9e:27:6d:5d:73:d0:5e:15:1f:d5:
6e:e9:72:48:9b:63:dc:67:87:da:9d:eb:db:9c:d8:f1:88:cf:
e7:07:b9:9a:a3:8c:bb:95:fc:3c:15:04:44:9b:90:d6:0e:1d:
15:a1:f8:2b:90:40:50:81:59:15:c7:a9:68:3d:93:98:2c:d8:
60:17:33:1f:3a:aa:fa:92:5d:97:1c:dd:0f:13:09:a7:9d:e9:
9e:18:1a:ac:83:f3:7b:f6:3f:68:fe:b2:b3:92:f7:4d:f9:71:
e2:32:fa:12:11:e4:4e:07:16:63:89:01:27:62:0b:9f:f4:1d:
3a:e3:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:43 2025 by rpki-client