Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/42wL7cHD2E13Ut45VhbuU95RdxM.roa
File: 42wL7cHD2E13Ut45VhbuU95RdxM.roa (raw, json)
Hash identifier: wcPXf95UcpTRMU1YMM+9xLTarSKV26WEkhxLKe4hIog=
Subject key identifier: E3:6C:0B:ED:C1:C3:D8:4D:77:52:DE:39:56:16:EE:53:DE:51:77:13
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01867E0C8EE211A6F47C9DFED2B0737B918C
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/42wL7cHD2E13Ut45VhbuU95RdxM.roa
Signing time: Thu 23 Feb 2023 11:33:17 +0000
ROA not before: Thu 23 Feb 2023 11:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 185.192.183.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:0c:8e:e2:11:a6:f4:7c:9d:fe:d2:b0:73:7b:91:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Feb 23 11:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36c0bedc1c3d84d7752de395616ee53de517713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:f3:59:63:af:5b:c0:e9:47:ae:fd:04:6b:
b4:1d:19:d6:f6:a4:08:b6:c5:68:90:d7:9c:a0:13:
e5:4d:32:34:5e:62:31:16:cb:ee:ff:53:2f:65:68:
a3:48:83:22:f8:6c:24:9e:3f:6d:9c:5f:d2:96:df:
a5:51:c5:c6:5f:b2:94:3d:24:28:9a:1d:a8:49:c6:
9f:08:8a:9a:8e:e4:bd:97:9f:b6:9a:3f:2e:4b:84:
ca:7c:ce:cb:aa:7e:d3:0b:1d:d8:4e:11:e9:bf:4e:
1e:64:d7:e5:61:16:b8:30:fd:5c:ab:5b:9a:6a:d4:
a2:e5:d5:70:fd:83:99:1c:18:50:2b:a7:65:0a:4c:
3a:38:cd:21:af:5e:db:0e:02:06:08:2e:49:10:1a:
d2:9b:d3:24:a8:61:d9:b9:b0:f2:2e:48:90:17:9b:
e8:0a:f2:27:f6:53:9a:69:72:ac:ba:7d:59:bc:45:
a9:18:db:14:c0:d9:3e:30:6d:03:ec:29:0c:43:19:
96:34:72:44:ee:97:f1:dc:e9:0f:30:61:ca:2e:1a:
53:ac:eb:77:2b:d9:de:fc:6e:24:19:ac:8b:bb:30:
04:00:bf:ae:f8:e7:3c:69:05:27:72:90:76:8e:69:
f1:f9:d7:bb:27:4a:c3:8d:e1:b5:1b:83:50:2c:a0:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:0B:ED:C1:C3:D8:4D:77:52:DE:39:56:16:EE:53:DE:51:77:13
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/42wL7cHD2E13Ut45VhbuU95RdxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.183.0/24
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8c:aa:ca:e1:c6:ad:aa:ac:91:1f:de:0e:92:46:39:bd:95:
f9:52:f0:3c:ef:e9:47:50:b6:98:26:40:e4:f5:78:8b:86:18:
73:06:f3:56:14:97:2c:75:cf:94:76:e6:2b:67:46:28:03:bd:
47:2e:c0:74:45:65:6c:f4:c4:00:09:57:0b:c8:bd:cc:d4:7e:
1a:3b:b8:01:d3:29:58:68:e4:c5:20:6f:8f:9c:f1:e6:5f:29:
d6:b9:ab:f5:12:c8:4f:eb:b2:5e:79:b9:ab:69:4d:83:e7:0e:
fb:1f:7a:63:70:51:5f:71:83:0d:6e:73:4f:20:65:4c:25:e1:
d1:aa:91:c9:68:b4:24:83:87:29:f6:2c:de:12:cd:b5:33:b9:
92:4c:b0:53:43:5e:f1:4f:de:42:99:ce:11:3d:60:57:fa:0b:
50:b0:b5:7d:ab:f3:91:23:ea:1a:9e:8c:ba:94:98:21:c7:d3:
15:f6:3f:ac:2c:e2:63:0b:34:3c:2b:68:ea:5a:5a:58:12:c0:
0f:02:cc:ad:56:54:95:fd:32:a5:b6:a3:05:29:85:57:c2:02:
86:ac:d5:3d:b0:1b:6d:dd:6b:1f:01:c3:82:60:ba:c0:3d:74:
8d:24:2b:10:32:5c:20:d9:49:40:84:de:e0:b7:cc:8c:bf:0b:
c0:6e:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:53 2025 by rpki-client