Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/V9EHJ2h2XS3UM02GYETIgok-qOM.roa
File: V9EHJ2h2XS3UM02GYETIgok-qOM.roa (raw, json)
Hash identifier: UGCkaIhcPcaCND7kAoU5uSLO3uaOrupgcrwrTiBf4Go=
Subject key identifier: 57:D1:07:27:68:76:5D:2D:D4:33:4D:86:60:44:C8:82:89:3E:A8:E3
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018BAA03310C69BF38403C4D7D06EACA3373
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/V9EHJ2h2XS3UM02GYETIgok-qOM.roa
Signing time: Tue 07 Nov 2023 13:40:17 +0000
ROA not before: Tue 07 Nov 2023 13:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62387
IP address blocks: 185.217.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:03:31:0c:69:bf:38:40:3c:4d:7d:06:ea:ca:33:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Nov 7 13:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d1072768765d2dd4334d866044c882893ea8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:3b:c2:a9:0c:96:1c:23:00:d8:5f:bb:9d:
aa:58:3c:ce:26:20:52:dd:97:1a:1d:81:e0:02:ca:
c5:fc:8f:a2:45:0d:be:71:17:81:cb:87:4f:78:32:
9f:b3:6c:fe:8a:8b:35:60:12:02:9c:18:a5:52:ce:
bb:57:11:b4:13:a9:59:d9:48:5f:2b:0f:78:cd:02:
29:04:1b:7a:5f:11:b6:11:13:0e:e4:ad:1e:6e:1e:
be:fe:97:9e:f0:54:92:f2:b1:14:30:e0:28:1a:32:
7a:c1:c2:1e:b7:22:7a:e2:47:aa:40:4c:ca:d0:29:
c2:23:db:d2:77:58:71:ed:5b:6e:0e:96:97:d3:a6:
01:99:75:01:ac:04:07:92:32:8a:7e:f1:c5:63:02:
65:19:f4:4e:d9:99:81:2a:fb:a4:f7:1e:e3:09:0b:
26:8f:0e:fb:60:20:09:db:14:1e:0a:d9:ff:72:a4:
53:10:0b:c2:b8:b8:26:ff:f1:0f:dc:5e:06:f6:c1:
10:10:83:74:3f:13:41:a2:29:52:b4:3d:2f:b0:92:
a4:51:84:92:89:db:f4:83:a9:a6:8b:db:3c:b5:29:
05:28:08:84:fb:98:dc:20:16:72:63:af:a8:c6:50:
c2:eb:8c:6d:c2:5e:48:9d:cd:94:29:02:60:3b:8b:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:07:27:68:76:5D:2D:D4:33:4D:86:60:44:C8:82:89:3E:A8:E3
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/V9EHJ2h2XS3UM02GYETIgok-qOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:cd:50:cf:97:ee:c6:24:8b:24:bf:d7:92:39:3f:9a:b9:bd:
6d:7f:b6:49:48:0d:69:e5:e3:86:7b:09:69:76:7a:7d:db:ab:
f5:74:8a:71:60:38:e2:f7:43:6b:c7:38:51:52:ac:b3:c1:24:
b6:b4:8b:b6:19:ef:5a:11:f5:85:17:a8:9d:9a:bf:a4:7a:07:
d9:a1:0c:8c:20:84:35:1f:5e:28:c7:11:22:c9:d3:9a:b3:5d:
55:4a:d1:67:52:c9:d5:3b:0b:34:b2:dc:e1:d3:5f:b6:13:b4:
05:27:57:71:95:00:fe:f1:2a:c6:bf:59:1c:c1:ab:08:68:ed:
6c:44:a3:91:91:4d:99:d0:41:1e:9e:bb:ae:67:ea:cf:cd:55:
8b:34:54:84:09:82:6d:bd:76:88:89:4b:8f:ab:9b:d3:fa:04:
b1:8f:14:ec:d2:38:f5:f0:24:d8:3e:64:ea:0d:4b:67:b0:54:
6b:30:06:ca:e1:fa:61:ca:2f:3f:44:1f:15:80:99:ac:20:e7:
09:d4:e0:ec:93:95:de:d8:00:09:1b:ce:85:d2:8a:26:68:4c:
c8:e4:f5:8f:d1:cf:7b:d8:b9:a6:a2:cc:e7:72:ab:64:a3:0d:
e3:57:31:52:3c:09:4b:1b:49:96:c7:40:42:e6:5f:d1:54:49:
cb:a5:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:07 2025 by rpki-client