Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1-ZdzdAz0nfyB4QjcBg-NYP41Hfg.roa
File: 1-ZdzdAz0nfyB4QjcBg-NYP41Hfg.roa (raw, json)
Hash identifier: XWAiNl4Mf3Jb9ALfzkftWMIo2P8Krpg5VLpmd86iXCY=
Subject key identifier: F9:97:73:74:0C:F4:9D:FC:81:E1:08:DC:06:0F:8D:60:FE:35:1D:F8
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 1B13F583
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1-ZdzdAz0nfyB4QjcBg-NYP41Hfg.roa
Signing time: Sat 01 Jan 2022 13:57:13 +0000
ROA not before: Sat 01 Jan 2022 13:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 185.24.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454292867 (0x1b13f583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 13:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f99773740cf49dfc81e108dc060f8d60fe351df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:c1:36:70:17:9d:91:53:a0:db:45:d3:02:
89:62:f7:4e:de:a2:76:be:d0:b0:d9:fd:ea:de:01:
be:05:ac:c9:aa:e4:9d:de:be:26:a9:03:40:50:88:
7b:24:12:3a:27:c0:34:e1:d9:7a:dd:13:75:ac:4d:
f0:57:61:59:bf:57:6c:6a:7b:52:da:0b:e5:8e:08:
ff:ec:2f:6f:4f:96:40:91:54:24:99:97:56:46:0e:
06:2d:e1:5f:e4:7b:1e:9f:0d:87:ec:93:e7:7e:3a:
20:dd:d3:55:79:49:ee:39:d8:70:9d:4b:f0:66:82:
5c:ed:24:06:85:0c:ba:17:b1:c4:80:53:10:b7:a6:
2c:27:b3:3e:64:e0:3c:da:7d:ad:ae:50:48:0b:58:
62:f6:20:87:4b:ff:ed:57:9d:ba:56:6a:7d:69:a1:
9f:a9:a5:1e:73:46:fb:d6:16:43:88:e3:bd:e8:f8:
f1:3d:9f:66:5c:d8:49:ef:d9:dd:c1:5b:b9:90:f0:
2f:aa:c7:02:fb:84:e6:05:b6:b2:8a:f1:18:2c:17:
7a:de:e1:b6:12:e0:48:b0:e2:69:ae:2a:f4:f5:64:
5d:af:76:45:d9:ed:30:52:dc:01:57:83:ca:bf:57:
1e:73:f9:d5:8d:17:f3:99:6c:79:be:ea:29:37:a9:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:73:74:0C:F4:9D:FC:81:E1:08:DC:06:0F:8D:60:FE:35:1D:F8
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1-ZdzdAz0nfyB4QjcBg-NYP41Hfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.255.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9c:f7:13:b0:fb:4d:bb:dc:f5:b9:b7:af:dd:02:76:c9:1a:
9b:fd:9c:a6:f3:66:ac:4d:2e:d1:98:07:5d:30:62:65:a0:98:
29:1e:f8:ac:30:2d:25:66:da:ad:d5:20:a5:6b:40:18:51:4d:
57:9d:1b:4a:8d:86:03:d0:4a:98:e2:38:d4:ee:0a:5c:8e:1f:
a1:95:11:75:db:13:28:91:d6:4c:e0:18:64:2f:bf:de:c9:17:
0d:db:49:3f:93:01:3f:8c:af:a8:43:ea:b9:27:9a:a1:9e:0f:
d5:e2:11:16:86:f7:41:77:a3:05:b3:a2:ad:20:73:b0:9a:9d:
2b:2f:a5:90:33:f5:56:f9:95:c4:10:9f:9f:58:12:95:f6:7c:
e2:de:27:54:45:a8:50:3d:15:b5:22:89:71:b9:b5:98:0d:f5:
b6:79:33:08:cd:43:4f:e1:a8:7c:e6:58:53:86:4b:8d:38:b6:
3b:7f:14:81:e5:49:00:c2:16:83:ad:6f:47:7c:2e:ba:0e:3c:
9f:81:2d:fa:52:af:75:39:c9:f9:39:aa:59:9a:01:3f:ef:1c:
d0:25:b4:46:28:b5:67:50:33:5a:c4:15:e8:d8:c3:6a:2a:87:
9b:ed:55:9b:f7:e3:2a:49:a9:a1:78:cf:c2:0f:86:ff:20:36:
86:8c:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:29 2025 by rpki-client