Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/ae9PILFUTY8YNNAPc2GeXdb6Gv8.roa
File: ae9PILFUTY8YNNAPc2GeXdb6Gv8.roa (raw, json)
Hash identifier: 2J5c3y4aTEouBTsZW597kAh3tcjsM70GwuqlN9iHZFA=
Subject key identifier: 69:EF:4F:20:B1:54:4D:8F:18:34:D0:0F:73:61:9E:5D:D6:FA:1A:FF
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 01856D8ABBC9EF632073DA665A5B0C9C88C9
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/ae9PILFUTY8YNNAPc2GeXdb6Gv8.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.167.204.0/24 maxlen: 24
185.167.205.0/24 maxlen: 24
185.167.206.0/24 maxlen: 24
2a0b:b600:3c04::/48 maxlen: 48
2a0b:b600:110::/44 maxlen: 44
2a0b:b600::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:bb:c9:ef:63:20:73:da:66:5a:5b:0c:9c:88:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ef4f20b1544d8f1834d00f73619e5dd6fa1aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:da:04:99:9d:cb:be:50:b4:bb:d8:02:38:
fb:c8:83:25:ee:95:a3:47:8a:d1:0c:7e:ff:b1:c8:
68:54:e7:a7:a7:bb:f4:da:00:3f:93:44:53:fc:24:
e4:f6:1b:be:74:ee:4c:64:75:8d:ca:9e:21:34:5d:
10:12:e4:db:6b:75:33:c9:f1:b7:5f:62:6c:6e:bd:
3e:4c:77:ff:76:d0:11:21:4a:5d:06:ec:6d:59:2b:
2f:c1:b0:29:47:b8:47:ff:41:db:5d:c9:28:76:26:
44:cb:43:f3:01:87:b7:de:99:40:8e:8f:91:fb:fe:
64:ce:b7:9a:6d:31:b7:10:d2:c4:30:08:7d:a4:b2:
81:3c:f0:e3:4a:06:2b:94:d7:cd:b0:6e:22:14:cf:
a1:3a:62:6b:28:36:e2:e7:c5:4a:14:8b:cd:78:5c:
01:b9:1a:52:8f:4e:2a:b7:2d:0e:c8:f8:96:96:ad:
54:c8:d5:ce:b9:60:c3:97:c1:c4:dd:ce:86:3c:10:
e5:86:2c:87:60:42:c3:95:0b:60:27:8d:f8:87:ca:
f3:37:05:8b:7f:f1:bb:39:a4:f8:5a:23:6c:85:1c:
69:c3:e6:6a:c0:f6:c4:ba:32:2f:f0:c7:96:02:25:
e8:05:55:ff:06:b0:51:6d:5d:5f:27:4a:d3:ab:82:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:4F:20:B1:54:4D:8F:18:34:D0:0F:73:61:9E:5D:D6:FA:1A:FF
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/ae9PILFUTY8YNNAPc2GeXdb6Gv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.204.0-185.167.206.255
IPv6:
2a0b:b600::/48
2a0b:b600:110::/44
2a0b:b600:3c04::/48
Signature Algorithm: sha256WithRSAEncryption
43:a3:12:f2:73:db:e8:ed:a0:18:7a:de:dd:7c:19:28:f3:c3:
10:9a:bd:4c:aa:2e:8e:58:f7:cf:4d:8b:45:bd:de:14:60:e4:
7e:e8:6b:9a:b0:f1:37:b1:3b:87:01:2a:c7:7b:64:64:2b:ed:
0d:01:b5:2b:35:ac:f7:d1:d7:9b:c4:dd:a8:dc:8d:7b:a7:e1:
21:ce:5c:cf:94:c4:ed:c0:cf:b4:46:be:e8:02:4c:4a:10:25:
26:9e:b8:a0:88:75:6e:d7:4d:f9:da:19:78:bf:e1:f1:fd:85:
1a:31:1f:ac:6b:54:0a:8f:18:8f:44:fb:ed:78:05:e6:fc:11:
0b:ea:5b:80:47:ed:9d:56:1e:8f:92:ac:fe:17:cd:a4:9a:b2:
36:30:4c:3e:3c:87:a1:52:91:50:ca:72:bb:ae:ab:05:54:e6:
f5:a9:66:d5:5c:a6:84:b7:e5:de:4c:56:ab:0f:49:54:a5:ac:
0a:6e:0e:50:47:14:f9:e3:23:51:fc:f4:df:47:0b:ea:10:d3:
fe:95:4c:bc:cd:bf:a5:48:36:54:c2:35:bd:50:e2:35:a0:67:
98:1c:46:3b:56:49:dd:7c:05:8b:8e:fb:d9:75:92:c7:d6:0b:
b0:fe:9d:44:b0:f4:1c:87:db:0c:e5:c0:ba:33:f6:9e:93:1d:
88:bc:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:50 2025 by rpki-client