Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/p74V9uoY6ow1OqoO2beIcKigZc8.roa
File: p74V9uoY6ow1OqoO2beIcKigZc8.roa (raw, json)
Hash identifier: 9zTdUn2znTC9TbxxPj3I/LYoTR4cGk+gnflKAGUntEs=
Subject key identifier: A7:BE:15:F6:EA:18:EA:8C:35:3A:AA:0E:D9:B7:88:70:A8:A0:65:CF
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0185707972C9C98B9D923D7DABBCA4963B61
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/p74V9uoY6ow1OqoO2beIcKigZc8.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201882
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:72:c9:c9:8b:9d:92:3d:7d:ab:bc:a4:96:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7be15f6ea18ea8c353aaa0ed9b78870a8a065cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:fe:eb:24:ee:cc:17:9b:8f:76:fe:8a:35:
11:c6:de:0e:84:b7:d1:2b:e5:5f:20:31:49:24:77:
a3:0f:e7:52:55:43:b2:68:cd:e4:97:af:7a:11:eb:
00:00:0f:1b:23:04:a9:59:ce:08:72:2a:2c:e2:04:
50:a8:46:91:6c:d8:5c:cd:e7:50:16:47:5a:43:66:
34:eb:07:8f:d5:5e:2f:c7:4b:c1:b2:6a:6a:bb:86:
68:3c:e5:46:56:5b:f3:b7:3c:bd:c9:ab:00:64:dc:
ce:52:58:06:02:6f:31:a0:0a:31:f3:d8:41:fa:ba:
59:6a:0b:7f:59:14:c6:a4:d0:66:4a:8c:c2:bd:ba:
3e:ec:fb:5c:05:14:e3:56:d8:33:18:53:81:e6:34:
1d:25:6a:81:3b:62:a8:bc:1b:91:fa:91:51:ad:94:
44:e4:b7:96:bb:fe:61:2a:07:4f:96:bc:50:e0:e3:
2f:ed:e1:05:56:42:dc:3f:0c:00:b3:b3:9a:1d:dd:
58:f5:5b:22:30:bb:9e:d5:48:66:35:98:5c:c6:84:
6b:16:7b:7f:c2:1c:fb:10:b3:f4:24:b5:1d:17:a0:
28:9d:13:c9:a1:b9:a1:7e:5f:90:94:85:83:f6:5b:
66:3d:bf:11:c2:dd:bf:e2:2b:1a:ff:87:04:8f:cb:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:15:F6:EA:18:EA:8C:35:3A:AA:0E:D9:B7:88:70:A8:A0:65:CF
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/p74V9uoY6ow1OqoO2beIcKigZc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7f:1e:29:c0:d2:f2:21:67:f7:b8:da:f4:06:ca:4c:88:96:
39:70:c6:aa:e4:e8:31:79:25:af:ad:5b:ce:58:3c:b4:19:f7:
61:b4:af:8d:5f:1b:78:dd:ca:73:47:fb:e6:9f:09:90:32:47:
12:e0:e7:26:c9:b8:48:1f:1b:19:5c:c8:2a:0c:46:10:cf:9c:
a7:1b:24:1c:9d:f1:1a:1c:32:19:91:86:0a:94:5a:30:ae:07:
f6:c6:9b:f4:6b:36:05:24:f3:ab:3a:94:72:78:96:fd:7e:4d:
c1:5d:a4:20:b5:9d:bf:45:db:50:aa:8d:d8:93:a4:93:47:3e:
62:ee:8d:3f:08:f0:4c:99:e5:13:36:0b:8e:81:50:74:ea:36:
e6:9d:dc:80:12:c0:c4:3c:c2:69:ef:b7:a9:0e:66:97:70:6f:
88:ef:f7:06:07:42:e0:04:35:0c:ea:b8:00:ec:3f:3d:18:57:
2a:92:8f:3e:c3:0a:46:3e:8c:06:aa:58:77:4c:0e:70:5d:f6:
85:52:3a:3e:7c:3e:2b:30:a1:aa:66:3c:da:2c:ff:ba:b8:95:
be:25:d1:77:a7:04:4c:2d:68:93:71:cb:2d:0c:df:9f:c7:f6:
31:b9:99:52:6e:7f:88:b4:8f:f4:9b:38:bf:9a:93:f9:c5:88:
c4:35:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:12 2025 by rpki-client