Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/N5E5L1akY2gCFGxce4XdGBifVZo.roa
File: N5E5L1akY2gCFGxce4XdGBifVZo.roa (raw, json)
Hash identifier: ukWhSi0aFBlI+ERtVBD6tFWyNHZRky8SoEMDJhlnjNU=
Subject key identifier: 37:91:39:2F:56:A4:63:68:02:14:6C:5C:7B:85:DD:18:18:9F:55:9A
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 03CB1DA6
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/N5E5L1akY2gCFGxce4XdGBifVZo.roa
Signing time: Tue 15 Mar 2022 08:15:59 +0000
ROA not before: Tue 15 Mar 2022 08:15:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212538
IP address blocks: 185.180.30.0/24 maxlen: 24
185.180.31.0/24 maxlen: 24
185.180.28.0/24 maxlen: 24
185.180.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63643046 (0x3cb1da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Mar 15 08:15:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3791392f56a4636802146c5c7b85dd18189f559a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:bf:62:01:e5:96:ce:67:f3:68:13:5b:91:
c7:b0:25:64:68:96:09:b0:43:84:39:9d:bc:8f:46:
85:20:02:54:f7:d7:0b:d6:99:b9:60:b5:de:71:13:
f9:40:fc:a5:f7:6a:00:14:d5:2d:a5:e6:4c:2d:3c:
29:78:43:97:0a:b7:c5:8d:c7:f0:69:43:de:1b:e6:
62:94:e3:af:9e:7f:d9:ce:c5:99:23:31:c5:55:3b:
f8:e6:15:bd:73:e0:3c:e1:6f:f6:03:22:5d:9e:41:
ff:37:30:59:1d:6e:20:e4:f7:64:44:c1:84:98:38:
01:33:33:4b:c3:2e:2c:92:e1:0d:cf:e4:3c:1c:3c:
fc:b2:e9:da:75:cf:5a:29:55:02:81:71:20:33:67:
95:ce:dc:ba:d5:aa:50:f9:98:36:3e:b7:5f:ed:27:
4c:80:e4:83:27:d3:08:1d:12:e4:ec:20:20:a9:75:
a1:ff:a0:4b:01:7b:b7:64:71:f9:0d:12:17:6c:e4:
1f:16:e9:4e:75:b4:07:a1:76:f1:ed:d6:f2:a2:fb:
c2:8d:8f:0c:ab:55:26:90:48:25:a3:a5:ac:01:52:
92:51:91:8b:93:a3:f0:12:91:a8:38:e9:3c:74:56:
0b:77:0c:db:6e:42:15:01:0e:a4:fd:5c:6c:83:c5:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:39:2F:56:A4:63:68:02:14:6C:5C:7B:85:DD:18:18:9F:55:9A
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/N5E5L1akY2gCFGxce4XdGBifVZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.28.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1f:00:79:76:22:5d:ec:7a:11:b2:7b:07:05:33:73:22:49:
f2:18:dd:f7:aa:43:b5:bb:6b:9e:b0:db:b6:15:38:f9:bf:94:
1c:91:1a:30:bc:ce:68:50:83:2f:74:9d:4c:4c:6f:dd:7a:0b:
1c:75:ed:79:ad:9b:49:ee:8a:4e:4e:05:18:4a:80:ef:5c:6b:
6e:5d:11:3c:45:1f:e6:31:09:cd:e4:8e:31:46:d3:f8:c6:a4:
f6:14:ee:7d:bd:76:12:76:3b:8c:e1:2f:d6:69:46:d1:9f:29:
06:45:67:a7:8e:f0:09:b2:2c:de:7a:e8:4b:73:4b:bc:5d:b2:
0a:2d:6d:ff:3e:6a:a7:4e:07:dc:06:3b:e5:f9:4c:17:20:38:
ef:64:e4:b9:ef:cd:2e:a8:78:36:f5:9f:16:d8:ec:1b:84:78:
b1:68:c9:d5:9d:0c:f9:6f:8d:2f:92:bf:b9:22:5f:d5:09:12:
fe:45:62:66:35:a9:79:4d:fa:37:80:93:65:da:d9:0f:06:ec:
fd:58:97:ce:2a:e6:ae:4f:e2:52:86:7e:ed:f6:9f:4f:4c:eb:
1a:43:f1:fe:ba:19:94:19:7f:6f:d1:cf:1e:53:23:6d:12:72:
50:34:52:75:85:d9:a4:ef:58:26:d2:df:70:67:e6:d4:3f:cb:
4f:8d:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:40 2025 by rpki-client