Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/tBIWBlmgMkyw4j0jP3EnUme0cRk.roa
File: tBIWBlmgMkyw4j0jP3EnUme0cRk.roa (raw, json)
Hash identifier: l47SumVVv46E3erYm0bLNGnXU3FWthTfoiKbeTZduuM=
Subject key identifier: B4:12:16:06:59:A0:32:4C:B0:E2:3D:23:3F:71:27:52:67:B4:71:19
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0185720C8814C60E6D281AD9BFCEF1E7A0C6
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/tBIWBlmgMkyw4j0jP3EnUme0cRk.roa
Signing time: Mon 02 Jan 2023 10:35:01 +0000
ROA not before: Mon 02 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209014
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:88:14:c6:0e:6d:28:1a:d9:bf:ce:f1:e7:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 2 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b412160659a0324cb0e23d233f71275267b47119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:da:2f:87:35:98:45:02:ce:b5:0f:44:81:
69:86:1a:fc:f8:8b:0f:f0:39:a8:26:83:de:5d:8d:
d5:61:b5:24:87:21:7f:ff:48:5d:ad:fb:e7:90:a7:
f6:7d:63:28:e0:b2:79:93:46:8c:b4:52:ad:01:cd:
0c:4a:02:a9:dc:bd:87:44:39:19:7c:98:6d:6d:ea:
ca:68:98:23:8a:5c:a1:7b:f4:ad:43:ac:20:85:52:
c7:c7:59:ba:bc:94:e5:cc:70:8b:46:16:77:a1:20:
33:b6:58:79:c7:97:88:49:4c:b7:3b:17:28:44:01:
c3:9a:4f:8f:bd:54:0a:69:7e:ad:61:04:4a:ca:d0:
71:26:39:74:db:7f:84:c9:f5:36:fb:00:d0:77:42:
da:83:3f:f5:95:30:4a:79:08:67:ff:63:8f:9c:e4:
a4:f2:9f:e1:aa:79:c0:66:cf:43:d7:21:7d:ff:91:
7c:69:06:e6:fa:21:53:da:44:d6:4d:67:fc:4f:24:
cb:03:d7:41:39:7f:4f:cc:36:ec:b2:d8:ca:3b:9f:
0d:4e:98:47:24:b6:6e:72:5c:11:0e:08:1d:f5:6f:
5f:5f:33:2e:38:8d:fc:45:a6:46:32:2f:70:5a:ad:
05:e7:1f:d9:3a:e5:00:51:39:18:60:3d:7d:a5:fc:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:16:06:59:A0:32:4C:B0:E2:3D:23:3F:71:27:52:67:B4:71:19
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/tBIWBlmgMkyw4j0jP3EnUme0cRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
71:14:71:7a:82:80:53:11:f9:a6:3a:eb:e9:f6:c5:4c:a9:cf:
17:8e:e9:c0:37:1d:d8:13:2b:49:75:02:97:13:e7:d2:55:65:
19:64:a8:01:64:38:08:df:4e:fc:af:e8:11:0e:cf:3c:3f:dc:
bb:68:4a:e6:68:2c:5b:5b:a5:46:d9:ed:3e:cf:d2:c8:db:69:
03:b7:ee:26:ee:69:71:c1:43:62:fd:c8:03:27:db:4e:8c:40:
b5:92:42:3e:af:e0:e6:a2:ca:da:69:c3:4d:ae:cd:26:f2:57:
32:bd:36:56:f0:f6:d7:b8:d5:64:9d:47:88:80:d1:fe:3c:b2:
f1:8e:34:ff:4a:4a:35:fd:a2:31:35:95:46:4f:20:56:af:ca:
ab:d6:ae:25:e3:c0:a7:8e:da:ab:89:c8:ee:66:6d:16:6e:f3:
c2:ba:78:c5:31:41:50:b5:56:d8:4e:09:56:d5:7b:80:c7:74:
5c:d4:2a:3c:09:5e:1b:80:02:84:da:aa:3f:4f:7c:bb:72:25:
b4:c5:dc:5e:6d:92:74:a5:5c:1b:58:45:69:b8:e4:5f:c9:ae:
41:24:4d:1a:2d:48:76:3d:11:74:57:a4:b6:73:1e:80:f6:d1:
02:51:7d:30:26:5e:46:8f:e7:b5:3e:30:78:2d:f7:d5:ba:00:
6e:4a:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:50 2025 by rpki-client