Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/speic7NVYd3ThrLrcLAt6Cj4T1c.roa
File: speic7NVYd3ThrLrcLAt6Cj4T1c.roa (raw, json)
Hash identifier: dlgm7xtDcFN1O9koLsnH9XBINhDYNos/Vo+1p4pSEHo=
Subject key identifier: B2:97:A2:73:B3:55:61:DD:D3:86:B2:EB:70:B0:2D:E8:28:F8:4F:57
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 01856FCBC22B7495DD48FBC174BE22EDBCEB
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/speic7NVYd3ThrLrcLAt6Cj4T1c.roa
Signing time: Mon 02 Jan 2023 00:05:02 +0000
ROA not before: Mon 02 Jan 2023 00:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199989
IP address blocks: 185.6.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:c2:2b:74:95:dd:48:fb:c1:74:be:22:ed:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jan 2 00:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b297a273b35561ddd386b2eb70b02de828f84f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:a2:0c:b2:16:b4:bf:9a:d0:7e:26:58:3c:
86:79:c6:af:90:d5:ed:81:69:7f:89:cd:19:a1:84:
46:41:89:53:f8:65:b8:a1:c2:90:ed:8e:9a:3c:fa:
98:3c:b4:18:cd:d4:6f:bc:39:dc:23:9c:c2:61:90:
b8:56:2b:9d:47:6a:42:60:1b:c0:c8:7f:6f:f1:ea:
f0:e7:66:75:38:d6:00:b2:14:65:c6:b3:be:e8:26:
4e:90:5b:dd:fe:9f:15:63:94:27:87:35:a9:93:09:
65:df:22:10:82:2b:c9:8b:b5:08:ae:98:42:89:4d:
e1:5f:ab:e6:2f:69:4c:0c:9c:17:b7:cd:e1:4b:3a:
ca:e9:94:6b:f6:aa:7f:be:fa:59:55:a1:df:c5:c6:
99:9d:41:66:9c:3e:b6:48:ce:ec:3b:a4:18:23:22:
bb:d7:96:d4:04:69:c1:3c:86:cd:5a:84:bc:b8:70:
12:b1:b8:95:ba:03:74:47:e8:80:a6:30:64:80:3e:
57:71:2d:96:39:b9:2c:47:bb:87:22:e6:a4:10:fb:
2c:1d:6f:b6:bd:24:dc:5d:bd:c9:72:ee:af:ec:89:
ad:0a:62:af:39:79:e1:4a:78:7a:29:22:fa:db:fc:
04:94:7d:21:1e:cf:78:c0:de:cb:66:55:96:eb:74:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:A2:73:B3:55:61:DD:D3:86:B2:EB:70:B0:2D:E8:28:F8:4F:57
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/speic7NVYd3ThrLrcLAt6Cj4T1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:17:5f:81:14:8c:37:6b:5e:d0:1b:86:21:07:64:c4:af:08:
4c:68:94:8a:fc:60:48:f7:d4:4f:a7:a7:8f:9f:5e:12:bf:df:
c8:78:d2:51:9e:76:46:c0:da:4a:c2:ae:5c:5e:59:c0:2b:b7:
cf:da:95:d9:10:a1:a5:3e:56:59:e3:23:0f:59:42:d9:b4:46:
6b:31:60:f9:f5:23:4b:f7:d1:16:93:bc:63:4d:f1:2c:4f:f3:
17:98:d5:17:b6:b0:38:2b:57:1e:55:b6:89:32:6d:b4:96:ee:
1b:02:07:64:21:7b:0d:da:49:e3:7a:d3:8b:29:00:43:04:64:
a9:cc:21:9d:d5:50:85:27:a4:0e:ac:e1:a3:46:f3:fe:6b:a3:
d7:5c:76:88:fa:7e:8a:6f:63:cd:cd:fe:1f:f4:9a:b6:79:a7:
ff:50:1a:f8:f3:b0:77:41:cd:ff:c1:ed:f0:55:14:7f:7c:4d:
ce:5b:39:b6:1e:e0:8b:8d:5f:c0:c9:63:ce:01:26:7d:a3:0e:
fd:26:55:10:1a:ba:ce:50:05:d5:ae:40:2c:6f:0f:db:f5:5f:
3a:4e:59:37:4c:d2:90:ae:95:14:ee:1e:99:a5:81:25:6b:41:
76:38:ca:47:14:be:a9:d0:1e:f8:27:03:92:26:f3:e6:39:03:
dc:cd:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:49 2025 by rpki-client