Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/anYjH9bvsX3kWX2GDc6KZVTmTEw.roa
File: anYjH9bvsX3kWX2GDc6KZVTmTEw.roa (raw, json)
Hash identifier: JCdxk6SZlxaazZLQMDVQKgSiLQVpFtUQaQdfhUzidlM=
Subject key identifier: 6A:76:23:1F:D6:EF:B1:7D:E4:59:7D:86:0D:CE:8A:65:54:E6:4C:4C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 018BB506B413C7A21B7F0FB645AB6DA6B388
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/anYjH9bvsX3kWX2GDc6KZVTmTEw.roa
Signing time: Thu 09 Nov 2023 16:59:57 +0000
ROA not before: Thu 09 Nov 2023 16:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206289
IP address blocks: 185.189.251.0/24 maxlen: 24
185.189.250.0/23 maxlen: 23
185.189.248.0/24 maxlen: 24
185.189.249.0/24 maxlen: 24
185.189.248.0/22 maxlen: 22
185.189.248.0/23 maxlen: 23
185.189.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:06:b4:13:c7:a2:1b:7f:0f:b6:45:ab:6d:a6:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Nov 9 16:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a76231fd6efb17de4597d860dce8a6554e64c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:30:8a:1c:68:73:0a:65:6c:4a:6f:11:99:
2c:74:fa:03:88:03:44:54:3a:5d:54:03:b1:d9:5b:
6b:ea:6c:b6:aa:80:e2:9f:3b:f8:9a:8e:0f:ca:8e:
3a:fd:39:ae:32:dc:2e:09:c1:4f:20:1f:26:70:03:
90:f5:d6:ca:2b:8f:3a:f4:13:b3:29:c7:69:4b:42:
50:b3:8f:31:ca:b5:7c:0c:6e:4d:7e:bf:91:35:f4:
4b:e6:18:dd:67:35:d6:95:e6:71:d9:04:5a:c1:5f:
33:50:83:f1:03:3a:07:2d:4d:b7:c0:a0:bc:64:3e:
ae:6b:4a:42:ac:26:df:5c:7a:2b:90:04:4a:06:88:
0f:44:2c:8c:d2:8d:49:5b:4e:fd:59:4a:a5:7c:7c:
8c:e5:df:b2:d2:23:35:7e:b2:85:49:26:d2:41:b6:
f3:72:d1:69:ba:d9:7a:2c:dc:c6:e3:5c:1b:f3:bf:
08:55:d5:81:2b:bd:18:a0:fd:e0:d0:72:37:ed:0a:
94:ae:c4:30:b5:1b:da:cf:7b:e7:7e:1a:69:cc:3a:
24:01:60:bf:02:74:ee:c6:82:4a:18:7a:43:ba:1a:
ea:b1:46:70:c0:37:2c:b6:b2:21:d0:c0:be:72:61:
2a:97:d4:a2:95:fe:b7:45:0d:7e:92:3e:3a:2d:8a:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:23:1F:D6:EF:B1:7D:E4:59:7D:86:0D:CE:8A:65:54:E6:4C:4C
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/anYjH9bvsX3kWX2GDc6KZVTmTEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:59:6f:e7:f9:a0:29:f1:5d:c2:b8:77:7f:fa:f0:3c:72:b8:
75:e2:d5:69:bc:13:c4:d9:24:e1:af:7c:11:3c:46:e2:a1:f8:
1d:93:bf:05:37:77:ed:63:63:0a:3e:d2:59:ad:62:cd:c8:06:
39:3d:ef:42:25:eb:61:e1:16:a1:93:c2:89:33:cc:59:f4:fb:
ad:51:ff:d4:c8:10:d3:41:4c:22:97:31:b9:fc:4e:87:3c:ac:
5e:6f:cb:87:99:9b:c5:dc:87:4e:0a:9e:f3:32:55:ad:a5:a0:
c5:0c:2f:d7:7e:3b:81:bd:af:fc:96:23:d2:7e:39:ef:47:c9:
8c:fa:36:75:c6:f1:43:c9:67:a6:65:b3:cf:3b:17:57:74:20:
fc:1a:7f:c1:5c:9a:6e:8c:8c:b1:39:62:72:d4:c3:b5:36:12:
d8:53:1c:b0:cf:ff:76:6e:7c:70:98:b6:d0:3a:6d:6b:b2:f5:
24:64:cf:a3:02:93:59:86:9a:51:93:ca:98:78:05:50:88:1e:
d3:f8:ba:96:d9:3f:e7:ef:81:6b:61:cb:39:3f:78:81:25:e0:
49:c5:ef:2f:98:4d:2d:4b:2d:10:1b:b4:f4:4b:24:aa:9d:38:
4e:95:46:20:3f:26:af:55:ff:e9:47:af:cf:14:76:b4:e9:6b:
b4:bb:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:49 2025 by rpki-client