Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gRaTSbHVx9L1y6Y-SBXeb5Yt2lA.roa
File: gRaTSbHVx9L1y6Y-SBXeb5Yt2lA.roa (raw, json)
Hash identifier: n6hqKkIdp+KPito41JJdqLNGzAMVZtN38Yd0dO8PorM=
Subject key identifier: 81:16:93:49:B1:D5:C7:D2:F5:CB:A6:3E:48:15:DE:6F:96:2D:DA:50
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01880BF5AA18C8BE86F5ECF7F0EA194C0898
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gRaTSbHVx9L1y6Y-SBXeb5Yt2lA.roa
Signing time: Thu 11 May 2023 17:57:09 +0000
ROA not before: Thu 11 May 2023 17:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 185.21.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:f5:aa:18:c8:be:86:f5:ec:f7:f0:ea:19:4c:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: May 11 17:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81169349b1d5c7d2f5cba63e4815de6f962dda50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:d3:14:ba:51:98:f6:f1:cd:dd:0c:70:ae:
4a:d8:a5:9c:dc:fe:bd:b0:95:cb:de:c2:34:5e:cb:
fd:ed:d8:67:1c:fb:72:ec:39:c9:aa:29:ea:ef:b4:
44:65:f1:e0:36:03:07:62:fb:0a:f5:14:b0:9d:9d:
cf:3f:04:b9:f2:ff:ea:28:fb:ae:01:0b:a0:c8:ec:
ca:b1:98:0b:09:31:50:be:12:6c:28:0e:30:e0:17:
56:22:7d:b7:e9:9c:d9:d5:2b:21:3d:5b:5a:37:6d:
cd:d7:84:9c:72:d8:d1:d4:a3:c0:24:cd:7b:e6:65:
e8:45:5a:05:89:41:5d:7d:39:57:d9:1a:14:2e:34:
e9:ba:d2:de:0d:b6:fc:b1:4a:70:86:3b:42:3b:06:
db:36:6d:81:ac:4a:67:04:1f:bc:dc:24:83:64:23:
14:b7:4c:6d:2a:33:bd:e5:aa:49:0f:dc:f9:9d:a3:
e7:92:71:b3:15:e8:9c:06:3d:ce:6b:d4:80:03:b5:
3f:05:7d:fb:af:a4:9f:94:40:75:80:8a:90:60:1b:
b1:26:8e:5d:3f:6f:6c:8c:b5:66:ae:90:2d:4a:24:
3f:fa:25:d2:0b:84:91:06:b9:82:5e:03:62:a2:50:
ea:a8:5c:e7:23:28:2b:05:64:d3:d1:12:32:cd:07:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:16:93:49:B1:D5:C7:D2:F5:CB:A6:3E:48:15:DE:6F:96:2D:DA:50
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gRaTSbHVx9L1y6Y-SBXeb5Yt2lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.131.0/24
Signature Algorithm: sha256WithRSAEncryption
84:71:b2:bc:66:44:ee:a0:a4:e1:ce:1e:38:17:d7:dc:88:f3:
15:4a:fe:15:b4:c7:d6:77:4a:dc:3f:24:cf:97:8d:34:0b:d8:
bd:87:59:02:fc:b8:8d:b1:26:d2:01:65:a5:2f:ff:d9:a3:d2:
f5:db:35:7a:d6:1c:ac:f8:34:ac:c7:aa:70:1e:92:94:c6:1d:
3e:9a:0c:13:0e:a1:57:1d:94:1c:fd:3c:9d:c6:5a:b4:4a:f3:
0c:ad:3c:8f:41:60:c0:e4:d3:6c:67:1b:64:d7:ac:9f:65:bc:
ff:5b:55:4f:c8:8b:15:36:d1:96:51:51:00:9e:62:43:4c:67:
b1:36:2f:66:ee:59:e8:db:86:77:bf:28:f6:0e:7f:f3:5e:ff:
3b:8e:65:88:ff:f8:5e:f5:b4:28:49:9f:14:f9:b7:fe:d6:10:
c7:0c:55:14:cb:e0:d8:5c:dc:ab:42:ec:c2:3d:19:65:73:80:
b6:75:cb:fc:06:48:3c:01:3f:4a:27:5f:4a:4d:4b:d1:2b:ed:
5c:b4:9d:ee:d4:0a:d0:aa:39:b6:66:f4:db:83:93:cd:ab:a8:
cf:4a:1a:fe:9f:8e:ba:9e:86:bc:06:31:e5:b9:cd:e2:04:83:
e8:15:8e:56:90:e0:0a:8c:4e:e2:76:44:f4:34:4a:1c:aa:de:
b1:7f:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:11 2025 by rpki-client