Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/3sDmr0Pdzy9c_wUazlgakJ9KU8o.roa
File: 3sDmr0Pdzy9c_wUazlgakJ9KU8o.roa (raw, json)
Hash identifier: 5N0tzjjYy6gO6w9RmNOjy3CCRbeQvWk2stfmDaxfPPE=
Subject key identifier: DE:C0:E6:AF:43:DD:CF:2F:5C:FF:05:1A:CE:58:1A:90:9F:4A:53:CA
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 01856CEF47CC11D553589F8D37B73DD02B10
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/3sDmr0Pdzy9c_wUazlgakJ9KU8o.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206468
IP address blocks: 185.174.171.0/24 maxlen: 24
2a0b:a907::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:47:cc:11:d5:53:58:9f:8d:37:b7:3d:d0:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dec0e6af43ddcf2f5cff051ace581a909f4a53ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:37:b7:90:3e:cd:4e:b7:26:89:e1:15:7d:
38:06:f0:cd:95:7f:dd:1c:e0:35:af:d6:96:60:1e:
c4:59:30:6a:a5:64:50:b4:99:1e:70:ef:24:d0:ef:
c5:a5:21:8d:36:c9:81:de:1e:84:83:0e:f8:40:8d:
ae:bd:71:1f:b5:a0:06:f6:5c:10:7d:4a:25:3f:65:
45:9d:b9:50:1b:84:10:83:e7:a2:0f:bf:bd:b2:27:
69:13:e8:29:25:d2:2d:ed:b0:88:e8:5c:be:7d:f9:
c6:0c:49:e8:e0:ff:fb:63:63:63:fd:55:b7:d6:5b:
e5:81:31:72:56:43:05:90:a7:e3:a6:82:62:e7:15:
92:83:f4:a9:eb:60:3b:c8:49:0d:e3:9a:db:44:78:
6a:42:9e:43:42:cc:18:18:a2:83:59:9a:63:dc:58:
fa:53:f4:89:4f:84:75:ac:cb:51:77:59:fa:70:6d:
64:de:c8:48:96:bf:f5:81:6c:ab:20:6e:aa:84:0e:
78:19:c6:00:e9:0b:b7:b0:4d:d0:ef:b9:42:f7:dd:
19:01:e3:5c:5c:cd:a8:fa:4b:84:4f:9c:35:eb:cd:
44:7f:74:b3:9c:b1:31:9e:6e:50:37:57:65:9c:4e:
61:14:55:8c:b0:df:2f:0c:a2:04:57:b1:61:8d:8d:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:E6:AF:43:DD:CF:2F:5C:FF:05:1A:CE:58:1A:90:9F:4A:53:CA
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/3sDmr0Pdzy9c_wUazlgakJ9KU8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.171.0/24
IPv6:
2a0b:a907::/32
Signature Algorithm: sha256WithRSAEncryption
9c:40:ce:f8:67:93:03:54:8a:77:a6:b9:ba:c2:90:da:9f:1a:
d6:79:27:34:a1:64:df:b2:5a:3b:cc:cb:5d:d4:12:71:69:cc:
3e:2e:e1:47:88:0e:0d:f7:c7:b8:bf:25:78:45:b9:75:a6:7f:
43:86:1f:52:18:ed:60:92:72:d5:97:af:0e:3c:9d:ab:66:e4:
57:3a:e4:4b:3d:ea:d2:f6:7c:db:d1:5e:95:d7:c6:c9:12:a7:
90:c0:ad:4b:60:46:c6:9e:0d:28:91:dd:e4:00:9a:13:bb:ee:
0a:65:84:c5:1c:1d:c3:06:24:b6:e3:7c:77:ed:45:a4:d2:99:
27:e8:24:8b:42:a8:44:81:cb:b2:5a:bb:d7:64:0d:09:ad:6e:
75:ea:6b:46:8b:98:68:84:cd:65:d4:39:bb:01:f6:d6:ec:80:
22:21:03:d4:53:f8:9a:33:cb:67:10:08:5b:86:cf:b6:d7:ba:
6e:48:ac:f0:cd:4d:b4:1b:95:3d:d8:c1:8f:f5:f5:4d:40:ee:
d2:8b:17:d2:82:91:c4:93:33:ee:9b:2c:04:e5:40:3e:97:e8:
0b:80:08:4f:ba:d2:8d:c1:bd:30:9c:b8:ef:91:8e:60:01:56:
cc:c8:cb:22:a2:bc:20:08:9a:70:fe:ea:d8:77:ba:ac:19:70:
3c:a5:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:40 2025 by rpki-client