Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ROB3AvsaG7BIBikbvyWOACX4f6o.roa
File: ROB3AvsaG7BIBikbvyWOACX4f6o.roa (raw, json)
Hash identifier: i4N7ZUY4n1HiO/xomNpk2uolp+5ZDxQxF01wR/2Zkdo=
Subject key identifier: 44:E0:77:02:FB:1A:1B:B0:48:06:29:1B:BF:25:8E:00:25:F8:7F:AA
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 01827DB7ED3C6AD64A7929E5FD48D1113B3D
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ROB3AvsaG7BIBikbvyWOACX4f6o.roa
Signing time: Mon 08 Aug 2022 13:49:41 +0000
ROA not before: Mon 08 Aug 2022 13:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.170.189.0/24 maxlen: 24
185.170.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:b7:ed:3c:6a:d6:4a:79:29:e5:fd:48:d1:11:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Aug 8 13:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44e07702fb1a1bb04806291bbf258e0025f87faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:a1:ac:d6:47:dd:0c:9e:f5:82:57:d7:ce:
b8:ac:e3:46:bf:20:f2:e1:82:9a:53:87:6e:bc:71:
6d:85:4c:51:5e:35:d6:62:89:92:bd:84:f0:8f:d0:
5b:35:29:da:3c:cd:09:d9:63:c0:73:02:13:f8:c9:
cc:ba:6a:b7:98:a8:6c:c6:82:c1:0c:79:7f:d5:f3:
89:1c:0c:18:6b:e6:8d:b8:04:fa:ee:1a:1a:1a:dd:
5e:18:7d:7f:fa:a2:d3:03:85:66:56:62:9c:4a:d9:
a1:d9:db:67:9d:bd:59:c8:d6:64:cf:d3:2e:d6:a9:
91:f0:25:ad:5e:a0:ca:c2:ed:e6:d2:91:a8:52:3e:
3d:ac:cc:90:2b:0b:57:eb:47:07:1b:b1:a4:0e:bb:
ff:27:cb:bf:77:92:be:67:bb:66:2c:93:97:5a:8b:
d3:cf:c1:38:c9:73:1e:2b:b7:6c:1a:a5:78:fd:53:
d6:01:d7:4f:4d:ff:5a:44:0d:8d:0e:45:15:e4:1d:
03:79:33:ae:43:0b:8a:a6:c5:3d:98:b7:8a:ad:43:
09:63:02:69:14:56:93:73:54:c1:b6:7f:42:ac:e8:
dc:2f:13:f6:be:6a:e2:e6:9a:15:93:ef:29:24:50:
d0:75:ef:1a:c7:74:39:11:83:b8:b5:96:59:95:9d:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:77:02:FB:1A:1B:B0:48:06:29:1B:BF:25:8E:00:25:F8:7F:AA
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ROB3AvsaG7BIBikbvyWOACX4f6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.188.0/23
Signature Algorithm: sha256WithRSAEncryption
49:25:ce:61:60:69:99:ba:9f:f0:6c:bf:46:06:e6:1a:d8:94:
31:5f:77:80:d0:5f:ba:64:c8:ff:21:79:66:4c:1e:37:11:1f:
aa:8f:6f:29:a4:7b:4b:37:b4:5f:ee:c9:80:23:a4:9c:e3:91:
eb:0c:a1:aa:84:58:2d:ff:1f:8b:c4:57:bb:c4:29:30:24:b2:
60:60:49:4b:78:9b:14:bc:1d:39:15:f9:11:b2:f8:07:1c:92:
ec:01:9c:5f:4c:30:a2:78:ca:c8:96:4c:31:89:54:ee:b7:73:
9e:58:7d:49:93:15:ec:2a:4e:c6:49:64:e2:5b:80:48:69:dd:
7e:be:a0:a8:93:e0:fd:e6:c9:ae:0a:c8:c4:74:a0:7b:4d:91:
6f:cf:d1:db:2b:81:81:36:95:fb:f5:9d:1d:e1:c7:ce:14:5e:
72:7f:16:c4:00:95:ad:84:91:43:0a:70:ea:f7:e9:5b:6e:77:
e1:77:05:dd:f3:53:23:f5:fc:63:ec:99:0a:cd:06:c8:68:62:
f7:92:72:82:9d:75:e9:16:3f:f9:e3:a6:e9:ce:bb:24:70:92:
ba:7e:a2:af:e8:6c:4c:7e:2b:54:91:eb:f7:a7:7d:37:ef:da:
79:54:b3:48:04:eb:8b:aa:aa:93:7b:fc:98:7e:ee:3d:60:7a:
47:c6:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:21 2025 by rpki-client