Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImVo5Pnp-O4jROh81wy2bUIcUqA.roa
File: ImVo5Pnp-O4jROh81wy2bUIcUqA.roa (raw, json)
Hash identifier: dq9PjLk/ZKMQxMmFwcKfAK+BqtgK2xTsl3q0d/LXSU0=
Subject key identifier: 22:65:68:E4:F9:E9:F8:EE:23:44:E8:7C:D7:0C:B6:6D:42:1C:52:A0
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 01869D7D98D86B1B5093ECD549CBB6498BED
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImVo5Pnp-O4jROh81wy2bUIcUqA.roa
Signing time: Wed 01 Mar 2023 14:04:59 +0000
ROA not before: Wed 01 Mar 2023 14:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.51.184.0/22 maxlen: 22
2a01:b460::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:7d:98:d8:6b:1b:50:93:ec:d5:49:cb:b6:49:8b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Mar 1 14:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=226568e4f9e9f8ee2344e87cd70cb66d421c52a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:a7:10:06:68:10:d2:b5:28:52:c2:bc:e4:
f2:d7:d3:38:6d:07:a8:37:e6:5f:72:13:29:79:60:
64:55:94:21:55:94:b6:55:dd:35:d2:db:e7:5a:32:
d4:ff:a5:16:5f:c7:fb:5e:07:fa:80:8f:b8:90:3a:
76:19:02:76:47:73:2f:f3:97:6f:f1:5c:3a:61:af:
b5:74:73:a0:df:6c:b8:00:65:28:9c:63:1e:4d:3b:
85:b4:40:f2:db:59:04:42:8d:3f:bd:a3:38:87:59:
56:2b:2a:69:e1:a3:5a:a3:8f:fc:55:23:c8:f9:50:
d0:ec:73:a4:63:0e:85:42:ce:b4:b3:1c:d3:74:d7:
ed:11:67:2a:6b:9a:91:16:14:f6:99:6f:85:3f:fa:
67:2e:88:15:b8:be:63:70:92:08:7e:bb:13:05:7d:
77:ee:72:94:c0:4c:16:07:13:2d:3f:8b:df:16:2b:
9e:8f:95:95:44:83:d3:16:1b:9c:5f:4c:95:6e:82:
11:88:c7:b1:10:77:d3:28:fb:c3:1f:cd:95:c5:54:
b6:30:f6:63:eb:10:cf:34:1f:de:24:e6:b0:ff:ad:
17:a9:83:fa:9a:ef:80:6c:0f:cc:9a:af:e2:8f:f0:
9a:bc:67:86:99:70:71:fb:14:f4:6a:9b:55:3a:28:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:68:E4:F9:E9:F8:EE:23:44:E8:7C:D7:0C:B6:6D:42:1C:52:A0
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImVo5Pnp-O4jROh81wy2bUIcUqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.184.0/22
IPv6:
2a01:b460::/32
Signature Algorithm: sha256WithRSAEncryption
73:55:66:c5:8a:4a:c2:d8:7a:bf:68:85:fe:5a:25:7c:6c:64:
25:7e:d8:90:f7:7f:8c:1b:cf:f4:1b:f7:11:f2:d8:b2:7f:4c:
91:fa:6e:58:48:d2:d2:47:b0:01:b3:ca:f2:8d:b7:1e:8a:f4:
4e:25:6c:3f:65:32:f0:08:d4:a1:de:37:d0:59:40:c8:6f:ec:
23:d6:76:af:fb:21:0c:89:63:ff:ee:fd:60:f5:4f:97:76:0d:
03:ba:d4:b2:a8:cc:42:e4:26:15:2e:7d:ef:6a:8c:24:b9:61:
19:c8:18:70:0e:dc:a8:5b:f1:7c:67:e7:e8:cd:40:33:2e:63:
44:75:34:e6:f6:b8:e4:70:54:10:c8:57:3a:58:f0:45:6e:b3:
4b:7d:fc:dc:21:95:6f:fe:24:be:b1:86:af:7b:8c:10:20:e2:
64:93:56:53:04:1b:c4:3b:6b:03:d7:24:96:bd:40:08:e5:80:
23:2a:ca:d6:fa:f4:c1:6c:48:0d:f4:85:70:f6:23:e0:e6:c8:
9f:c7:be:8d:ba:86:95:6e:74:cd:32:4e:c3:e5:b2:96:3d:74:
6b:a8:6d:91:da:0a:df:ac:1e:ec:cc:d2:5d:72:78:78:0d:1f:
6f:81:95:aa:48:8d:28:33:b4:cd:0d:25:7e:b9:35:ab:08:2a:
ae:ef:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:28 2025 by rpki-client