Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/l2KUDcVsbPErLi6PAcsqopmyGsg.roa
File: l2KUDcVsbPErLi6PAcsqopmyGsg.roa (raw, json)
Hash identifier: sPT2cQoiXqFOnfBfvjIbtO80KrRniv8c+tK89TsNy5o=
Subject key identifier: 97:62:94:0D:C5:6C:6C:F1:2B:2E:2E:8F:01:CB:2A:A2:99:B2:1A:C8
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 018C2120B85E76035C82571FADCC77B7FF86
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/l2KUDcVsbPErLi6PAcsqopmyGsg.roa
Signing time: Thu 30 Nov 2023 16:47:21 +0000
ROA not before: Thu 30 Nov 2023 16:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.17.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:20:b8:5e:76:03:5c:82:57:1f:ad:cc:77:b7:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Nov 30 16:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9762940dc56c6cf12b2e2e8f01cb2aa299b21ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:bb:ba:4b:86:53:c6:11:a6:96:10:a7:b3:
d4:a9:17:e0:18:5a:35:a2:3d:d4:25:cc:76:d1:b8:
ec:ec:5a:34:bb:1b:3c:f7:d5:ed:ab:bc:2b:cb:8b:
93:1f:87:aa:55:62:79:b0:9e:f9:b8:82:34:d0:30:
df:51:42:cc:58:0b:3c:36:7a:10:35:cd:ef:13:29:
bf:92:93:03:52:9f:8a:fe:e2:b7:f1:42:94:9f:c9:
12:8d:5b:e3:e2:74:d4:d3:de:5b:2d:7b:68:3f:09:
6e:ea:2b:17:99:75:86:19:62:b1:14:fa:0d:31:22:
27:b7:0a:0b:c7:f6:d1:6e:54:05:f0:c6:c6:f9:ee:
80:7e:82:dc:c5:e2:39:15:98:f4:a0:82:5d:22:b0:
e5:cd:aa:ce:58:52:a3:93:14:56:ff:8d:01:f2:6e:
68:f3:7c:a6:73:b9:7d:ae:ff:0d:6a:7b:73:2d:dc:
da:49:73:4b:7b:1d:dc:38:d9:45:5c:7b:2a:92:20:
14:f5:e4:6e:df:5c:17:ae:f4:c6:6f:a7:20:90:eb:
ea:34:e2:1c:cc:fe:91:57:3e:0d:51:60:bd:f5:97:
42:b3:23:8e:2c:b7:05:33:a7:cb:d2:9c:27:5a:75:
bb:c2:8f:fb:0e:57:00:06:b7:0e:03:37:a8:67:34:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:94:0D:C5:6C:6C:F1:2B:2E:2E:8F:01:CB:2A:A2:99:B2:1A:C8
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/l2KUDcVsbPErLi6PAcsqopmyGsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:2e:18:b1:bc:8e:33:db:20:4f:b0:75:3b:ef:e4:3e:38:ca:
e4:a1:5f:f0:f4:35:8d:10:9d:ce:aa:a9:64:6e:f5:89:3b:2e:
13:db:02:c5:8d:7d:21:28:6c:c7:f9:68:bd:8a:8b:e8:1e:78:
cb:d7:b7:a0:ca:12:06:7b:6a:32:09:4c:2d:4e:06:8d:ff:4e:
ef:62:ff:c9:23:c4:fc:f2:52:13:32:b8:17:8f:48:73:d9:12:
bb:3f:50:11:56:2a:c1:35:e8:f9:a1:40:e6:55:7b:a6:40:cc:
09:e9:b1:43:2c:22:52:d1:d6:d3:a1:05:11:9d:de:2e:f8:5d:
58:7a:4b:e4:15:8d:bf:95:7f:a4:cf:0c:a4:ab:49:4f:7c:3b:
6c:48:d1:9b:80:bb:70:a7:d9:b7:b6:56:3e:3c:21:1b:09:4e:
fd:bb:53:f2:c6:4e:16:45:b0:c8:cc:07:07:95:ba:00:18:7e:
c8:74:c5:33:1c:6f:29:ae:51:ee:6c:22:ea:44:ff:bc:45:ac:
38:56:3c:a5:d6:15:5c:b6:f3:93:1c:64:c8:57:09:df:ae:26:
3e:73:59:91:58:9a:b3:81:03:4f:49:b7:86:54:a2:5b:33:e2:
48:b6:11:59:6d:5a:6d:be:aa:5a:dd:9f:7e:40:ab:8a:dc:0e:
48:e1:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:28 2025 by rpki-client