Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/1-ARaiAmnx26d9w4lTu-SbELO2pA.roa
File: 1-ARaiAmnx26d9w4lTu-SbELO2pA.roa (raw, json)
Hash identifier: relQ1dMhRnrshKYpx2vg4quCNmC5nJrmxoCAYbEI8c8=
Subject key identifier: F8:04:5A:88:09:A7:C7:6E:9D:F7:0E:25:4E:EF:92:6C:42:CE:DA:90
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 05AF1462
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/1-ARaiAmnx26d9w4lTu-SbELO2pA.roa
Signing time: Wed 11 May 2022 11:13:01 +0000
ROA not before: Wed 11 May 2022 11:13:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203684
IP address blocks: 185.187.86.0/23 maxlen: 23
185.187.86.0/24 maxlen: 24
185.187.87.0/24 maxlen: 24
185.186.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95360098 (0x5af1462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: May 11 11:13:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8045a8809a7c76e9df70e254eef926c42ceda90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:b9:06:2a:63:11:9d:95:87:57:7a:ee:13:
68:f3:17:90:94:58:b2:41:56:1a:e6:15:4a:63:4a:
89:8e:db:18:0a:85:45:28:3a:0b:f6:cf:d4:58:73:
ab:25:f3:1b:ec:26:1a:82:f2:d6:7a:be:13:71:1b:
c1:44:d5:96:40:ec:67:d0:dc:0e:e6:62:37:2e:a7:
5f:45:da:b1:8d:c5:1d:74:21:f1:9a:69:54:8b:d6:
62:f8:d2:e1:d6:a9:da:03:53:3a:fb:e2:84:33:a6:
c9:8b:5b:c9:b3:11:94:e8:54:f0:94:c2:10:e7:c5:
d6:ad:a5:0b:33:97:34:4f:2b:d3:9a:c6:c2:5c:78:
13:c9:5f:90:f3:c1:6f:2f:cd:15:66:f1:d7:e0:6c:
bd:6e:78:ce:c4:a5:17:d0:7b:32:81:68:e2:a4:0f:
28:f8:81:95:40:38:6b:41:05:5b:c6:78:0f:0c:48:
a4:0c:6a:06:4b:bb:ce:48:1d:18:47:6a:42:e5:60:
4d:02:dd:0c:57:78:57:4f:4c:27:8b:83:a9:82:12:
04:1d:ca:b5:25:a1:99:68:4d:69:ae:a8:be:95:85:
e6:01:b9:49:c7:bf:26:b8:4e:a8:b2:ee:92:ca:6f:
81:bf:a6:ac:13:ae:34:c9:bc:4a:7a:e5:84:69:1a:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:04:5A:88:09:A7:C7:6E:9D:F7:0E:25:4E:EF:92:6C:42:CE:DA:90
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/1-ARaiAmnx26d9w4lTu-SbELO2pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.240.0/24
185.187.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:19:c5:d2:46:cc:96:91:76:95:f1:44:cf:44:f6:2f:91:67:
79:7c:35:8a:f6:67:8c:f9:57:5f:7d:3c:60:a6:0c:47:68:59:
f3:fc:b2:1d:cc:31:b0:92:0e:ea:7a:e6:41:2d:a5:70:df:2c:
89:3e:7b:a7:bd:8c:77:51:20:56:b8:0f:fe:81:27:ff:dc:fb:
49:cb:97:e7:85:2a:14:ad:5d:ee:20:19:87:95:00:81:fd:18:
52:fc:72:b5:57:5b:16:6c:ec:53:36:6d:93:f3:d4:48:c6:1f:
1d:04:bc:13:ae:70:39:df:07:38:3c:cd:1f:69:a4:1f:61:c9:
ea:ff:2f:ed:e4:1b:b7:52:29:67:0c:67:2c:6e:da:49:a2:33:
b2:92:32:a6:da:44:14:72:1e:d6:e9:9c:34:a6:b4:ea:d8:c7:
3f:0c:6b:d5:03:90:75:14:8a:fe:a6:af:34:59:ab:d0:d2:c1:
fb:dd:b0:20:c9:23:a5:a2:e5:46:d4:eb:6c:79:45:58:bc:d6:
33:c1:30:22:27:c0:94:66:d5:33:31:15:2c:34:2a:8b:3e:4f:
17:44:3e:2f:f0:f6:6f:52:b0:35:8e:ba:32:32:28:d5:d0:18:
fb:85:1d:cb:0a:e0:10:66:63:e0:36:65:55:f6:bf:4f:0d:69:
6c:8a:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:18 2025 by rpki-client