Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/BABeUc5ub5TVL58d8lhvZo7tgYM.roa
File: BABeUc5ub5TVL58d8lhvZo7tgYM.roa (raw, json)
Hash identifier: c6mEro6W3WKHKeTrR1iAdYFc1o9/VEIrcs4BsDHov24=
Subject key identifier: 04:00:5E:51:CE:6E:6F:94:D5:2F:9F:1D:F2:58:6F:66:8E:ED:81:83
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 018AACC275AA7ECF5FDBC38AE1568792C976
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/BABeUc5ub5TVL58d8lhvZo7tgYM.roa
Signing time: Tue 19 Sep 2023 09:25:39 +0000
ROA not before: Tue 19 Sep 2023 09:25:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198601
IP address blocks: 185.234.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:c2:75:aa:7e:cf:5f:db:c3:8a:e1:56:87:92:c9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Sep 19 09:25:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04005e51ce6e6f94d52f9f1df2586f668eed8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:f3:ff:cd:60:9d:85:4d:73:65:99:dd:35:
6e:00:f8:ad:3f:48:76:8d:7d:7a:50:16:5c:ca:07:
15:a4:9a:ea:76:f2:ca:f6:79:b6:69:5b:70:c1:ae:
cc:92:eb:a2:8c:9c:c9:7f:25:79:09:c7:e9:a7:8d:
a9:8a:e0:a6:e4:be:bd:d3:f7:c0:7b:a9:e8:a1:45:
e7:b2:9b:56:fc:b1:3c:6a:39:05:04:12:a7:c0:a9:
c0:4f:23:d6:6d:40:4e:02:4d:c9:51:02:25:27:d4:
dd:e6:73:30:ef:91:d3:c9:4b:b4:2f:b7:60:06:43:
20:be:07:fa:14:d1:ce:82:5f:5f:7c:75:7e:2e:e6:
d5:8f:fa:0d:94:2b:4a:7b:3f:69:99:a3:60:23:0a:
8e:c0:89:56:c5:82:7c:89:25:25:31:15:fb:8b:ed:
61:6d:b0:69:bd:91:55:25:fd:bd:6f:78:e7:f4:ef:
e2:b4:57:02:a8:5b:5b:85:be:b5:0e:b5:07:87:1c:
a1:9d:68:f5:20:8f:d7:4e:79:b3:6d:a3:e7:0d:e7:
13:55:81:05:20:3b:07:94:27:36:e2:11:12:af:fa:
76:dc:b5:63:79:d5:9c:57:2c:8f:af:c3:c3:b0:55:
72:01:36:74:b0:bb:a4:f3:bf:88:8f:a9:0c:4d:1f:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:5E:51:CE:6E:6F:94:D5:2F:9F:1D:F2:58:6F:66:8E:ED:81:83
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/BABeUc5ub5TVL58d8lhvZo7tgYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.113.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7b:47:90:9c:17:ed:9a:4b:eb:75:0f:b5:0f:33:d2:03:2e:
82:39:28:46:4b:e1:0f:12:38:bb:a5:ab:a0:2f:44:92:39:44:
8c:ee:86:af:15:e4:e3:30:00:7b:e7:a8:6c:45:cb:e2:ce:57:
60:f9:02:98:b0:69:ee:82:62:b1:e1:f2:94:82:04:3d:37:8b:
af:49:54:33:0a:fc:02:82:27:1f:22:1b:6e:d6:b6:3e:01:50:
75:17:48:c1:b0:ff:5d:e8:17:a5:eb:52:46:ab:84:8c:8c:e1:
32:20:57:d7:5e:49:fb:b4:87:68:c0:8e:84:9b:e6:61:20:cd:
9a:e8:2c:ee:6f:97:8c:f8:fd:94:6a:61:9f:b9:b1:89:f7:9d:
ba:35:6a:a4:8b:e9:78:99:47:f3:35:50:b6:2a:a3:62:58:e2:
ba:4d:40:22:2c:38:bb:e2:a9:ab:fe:eb:35:4f:6c:d8:92:22:
4b:a0:c1:d4:7a:d9:e2:7a:c0:90:f1:db:1b:21:94:f8:7f:45:
6b:4c:17:4e:c2:86:38:94:60:20:b1:ca:f4:66:df:eb:40:49:
97:b9:2b:8a:bc:63:a0:5a:6d:17:ad:67:55:3e:9b:78:dc:7c:
a8:9a:40:7b:b8:23:7d:e2:43:d9:4a:60:ba:6c:e9:84:38:73:
f3:d0:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:52 2025 by rpki-client