Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/Abhaptf9Vklmd_4mxIus4iJjT2g.roa
File: Abhaptf9Vklmd_4mxIus4iJjT2g.roa (raw, json)
Hash identifier: qeACC7p77yZZyivjB0nA+Fli2+I+s+VYhsoj+pydI1E=
Subject key identifier: 01:B8:5A:A6:D7:FD:56:49:66:77:FE:26:C4:8B:AC:E2:22:63:4F:68
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0185720C86EE0605B76F12687979B3BE65E1
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/Abhaptf9Vklmd_4mxIus4iJjT2g.roa
Signing time: Mon 02 Jan 2023 10:35:01 +0000
ROA not before: Mon 02 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49321
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:86:ee:06:05:b7:6f:12:68:79:79:b3:be:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 2 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b85aa6d7fd56496677fe26c48bace222634f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:8c:25:1f:f8:b0:90:b2:ee:c8:10:04:f8:
b0:bb:34:ce:02:0f:dd:28:1d:88:6a:48:6d:d3:0a:
ea:c4:ba:c0:27:cf:4a:96:20:cd:6a:2a:4e:bd:14:
b5:05:a4:9a:ae:34:63:05:2b:44:ba:ec:00:5f:02:
13:bd:76:02:a3:2b:2d:58:3a:4f:32:76:93:44:84:
6c:da:22:fd:c1:6c:39:86:8c:8e:ed:40:8c:f2:ef:
97:7e:eb:43:db:4f:95:f0:76:5f:fb:92:c7:cc:ad:
f4:aa:42:cb:78:f4:91:54:a6:4d:59:c0:cb:20:7e:
48:d0:3b:7d:9e:53:12:8e:6c:f9:74:2f:dd:f0:61:
b9:df:b4:8c:87:9e:86:e2:3b:9c:80:ef:87:ce:58:
ef:e1:63:01:58:29:68:a7:25:62:1f:03:a9:4b:3a:
8c:9d:84:11:35:5d:ef:eb:91:d3:7e:d3:52:c3:04:
51:9c:4e:40:cc:73:d6:41:e6:1c:66:e6:d0:2b:2c:
a7:ff:6d:19:6c:99:5c:e0:6e:87:04:03:a2:45:4c:
56:17:97:ba:3d:34:c0:1b:6e:67:0a:52:f9:de:8f:
df:7d:89:fd:b0:2c:ba:5f:68:03:98:c4:a1:a2:a0:
3f:81:85:22:7d:8c:8b:71:84:30:a8:aa:b8:4b:5e:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:5A:A6:D7:FD:56:49:66:77:FE:26:C4:8B:AC:E2:22:63:4F:68
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/Abhaptf9Vklmd_4mxIus4iJjT2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:7e:b0:40:2d:7b:7b:6e:80:84:f1:fe:c1:c1:7d:3f:5d:7a:
31:d2:b8:1a:db:c9:53:22:80:5c:71:28:d3:a3:7e:56:9f:18:
3d:67:fa:a3:1e:2b:42:f2:1f:91:a9:09:e5:97:dd:6a:08:fd:
ea:6f:b3:e4:62:c8:93:59:4d:a4:fc:c2:fe:8f:c2:d9:51:eb:
b9:1d:a4:ac:3c:97:ed:48:a4:36:38:a6:13:25:6f:09:d9:c7:
20:72:bf:be:8b:d0:4e:4a:ba:5f:a7:7f:a4:df:80:db:fc:46:
f9:7c:42:3e:a8:7b:7e:2b:00:1f:93:5a:44:77:a7:b5:78:b4:
fc:2e:39:02:a9:fc:08:39:ae:21:af:a8:82:ad:b3:36:b5:c5:
5f:44:3b:a6:eb:ab:36:42:3f:ab:bb:9a:c1:7e:e4:2d:1f:13:
09:f4:69:e7:06:0f:37:7f:63:02:dd:75:3d:f6:7f:61:c7:0a:
c1:48:c4:89:b5:72:8f:75:ce:41:38:7f:c4:e1:a3:44:dd:92:
18:8c:3b:e6:4c:c4:11:a4:03:4a:a7:09:05:2b:d3:c5:d2:b7:
11:9c:a1:20:0c:26:58:84:b4:b5:57:4e:b4:f9:47:61:e2:b5:
a3:e6:a3:03:ed:79:b9:2b:db:e8:49:c6:a1:8d:77:65:6e:04:
be:12:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:24 2025 by rpki-client