Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/avKg_vd0cbLDa6sI_4PLUNN8-C0.roa
File: avKg_vd0cbLDa6sI_4PLUNN8-C0.roa (raw, json)
Hash identifier: mZX39Wmo2fDi5nrOoU3XRk2dQQPpAeF5WxnQxFET2ao=
Subject key identifier: 6A:F2:A0:FE:F7:74:71:B2:C3:6B:AB:08:FF:83:CB:50:D3:7C:F8:2D
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 0185738FC9A5B62AC02AD43E41870DF03EDE
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/avKg_vd0cbLDa6sI_4PLUNN8-C0.roa
Signing time: Mon 02 Jan 2023 17:38:00 +0000
ROA not before: Mon 02 Jan 2023 17:38:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.21.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:c9:a5:b6:2a:c0:2a:d4:3e:41:87:0d:f0:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 2 17:38:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6af2a0fef77471b2c36bab08ff83cb50d37cf82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:57:7e:87:e9:a0:ef:56:ee:10:98:45:45:
15:65:8f:44:22:30:dc:54:f8:8b:a6:a4:49:f2:a7:
49:48:7c:95:a2:e0:e3:86:29:61:02:7f:ec:da:05:
3a:5a:9a:43:0e:cd:54:d4:07:75:d6:cf:89:16:9f:
dd:78:c3:71:0f:06:77:fb:d6:a6:52:e7:3d:96:2d:
76:2b:92:69:5a:c1:22:06:f4:96:0c:d1:ce:f1:a9:
82:90:1c:ab:32:60:74:a5:08:b3:db:0c:5d:74:5b:
04:69:f5:6b:15:1d:c2:3d:7d:93:79:78:6b:64:de:
14:06:5a:2c:f8:6d:63:5f:2d:bc:fa:dd:5c:d8:f4:
49:a6:6a:9b:73:de:c6:a3:60:a6:21:12:f2:ce:4f:
d7:03:00:c7:30:98:88:06:f3:81:06:89:35:05:9a:
ef:03:78:b4:6c:a1:f5:29:90:d3:b4:0b:eb:d4:83:
9b:e2:95:36:28:e4:29:7b:01:11:f4:bd:87:e2:42:
ff:55:06:f5:0d:ce:0a:f8:a0:ff:32:ca:4d:26:b7:
ba:42:28:f6:1d:ea:f2:6b:38:e6:28:6f:f7:71:d8:
0a:d1:a2:b6:11:32:18:dd:dd:68:29:4f:fa:95:52:
0e:be:61:c1:4d:db:1a:ae:b1:12:47:ec:73:91:92:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:A0:FE:F7:74:71:B2:C3:6B:AB:08:FF:83:CB:50:D3:7C:F8:2D
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/avKg_vd0cbLDa6sI_4PLUNN8-C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:54:1b:7f:38:f8:07:28:07:e3:1c:46:bf:e4:45:5c:46:77:
38:07:1f:eb:6c:06:9f:95:47:79:15:69:29:11:a0:4c:93:2e:
0b:b8:e2:28:68:58:80:58:02:93:b0:ea:0b:6b:f3:91:f3:1a:
35:7b:4b:a4:6a:0a:f4:a2:b9:8c:2c:c7:a9:cd:02:58:18:fc:
6d:79:6c:f0:c8:c9:73:69:42:03:a6:0b:95:6d:a2:ae:bb:60:
2b:64:b9:92:1e:08:7a:8a:21:41:44:70:e4:91:d8:73:a1:f2:
a8:90:0c:dc:ed:36:d1:fb:11:19:5b:53:c7:a7:68:dc:fa:fd:
aa:80:8b:6d:c0:3d:38:04:de:15:25:ae:2e:10:b9:ec:24:33:
7e:e5:2c:a3:85:6d:18:3c:07:bb:04:a3:13:d5:84:f0:ee:0b:
f2:c6:e7:c6:d6:0a:8f:fa:bd:30:1c:4a:93:74:e5:a6:34:7e:
8a:3c:8a:5d:e6:f6:b4:4b:05:09:6b:a5:1b:59:4c:27:eb:bd:
c9:1b:e1:fe:b6:a0:81:6f:e6:43:bb:0e:4b:05:fa:5a:f2:19:
b7:8d:e2:4f:13:5c:89:57:d0:49:02:95:4b:e9:23:78:d8:98:
3e:d7:48:07:cc:00:b0:d5:4c:7d:5f:4f:91:ce:9f:78:48:97:
ff:f3:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:25 2025 by rpki-client