Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/1kWABtzqxC6JrdqgHLU7XHPyyNg.roa
File: 1kWABtzqxC6JrdqgHLU7XHPyyNg.roa (raw, json)
Hash identifier: nZLPt6Vi+KPaJ+QQntrsUpLzJVOOybunlOn7fwAMyiw=
Subject key identifier: D6:45:80:06:DC:EA:C4:2E:89:AD:DA:A0:1C:B5:3B:5C:73:F2:C8:D8
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 0187B7B717CF20FE725D5B3E9BFD9820E8AA
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/1kWABtzqxC6JrdqgHLU7XHPyyNg.roa
Signing time: Tue 25 Apr 2023 09:20:42 +0000
ROA not before: Tue 25 Apr 2023 09:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210671
IP address blocks: 85.92.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:b7:17:cf:20:fe:72:5d:5b:3e:9b:fd:98:20:e8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Apr 25 09:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6458006dceac42e89addaa01cb53b5c73f2c8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:12:5d:3e:c2:b0:18:4f:2b:d1:33:bf:20:
a0:84:8f:c5:4c:9c:47:5c:7a:d0:f5:1d:e3:54:19:
d5:84:fa:32:a3:ef:f6:6a:e2:98:36:d7:dc:cf:d8:
ad:7e:1a:e6:4f:e6:09:2d:5d:9f:17:99:e3:4e:7d:
1e:ca:e4:3a:d4:ed:47:da:72:c9:d6:0f:15:ac:e9:
84:48:7d:1b:55:9a:f3:42:b7:43:a6:59:79:c7:4f:
b6:2d:a8:f2:a6:50:9f:2b:da:bd:cd:20:ed:f5:0e:
b9:78:67:10:55:17:6e:91:73:c5:78:dd:3c:7c:30:
61:1d:02:90:28:38:73:2f:4a:c5:ff:02:11:6a:be:
b9:e9:50:9e:b1:0e:93:c2:cc:b3:79:da:17:e2:e9:
e2:95:ac:13:4b:10:f6:be:0e:64:a6:d5:f2:49:e7:
35:f4:31:8a:28:e6:5b:fe:ee:07:7c:d7:90:9e:29:
76:f9:13:49:6c:22:c1:2b:7e:ba:82:a1:1e:ea:7e:
a7:2a:92:de:4b:75:dc:f0:18:b9:39:24:80:66:84:
2a:59:a7:c8:80:6f:95:e7:11:30:0a:a8:98:37:7b:
a7:87:4e:f4:ed:71:2e:2a:ac:49:38:79:99:79:b0:
ac:c8:17:73:c2:56:be:15:b1:90:90:5b:20:7e:1a:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:80:06:DC:EA:C4:2E:89:AD:DA:A0:1C:B5:3B:5C:73:F2:C8:D8
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/1kWABtzqxC6JrdqgHLU7XHPyyNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.119.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7b:d9:dc:4c:ae:27:54:9c:00:9c:88:f5:9c:be:01:22:d7:
d4:8b:67:a7:e0:45:f4:0c:2b:1c:33:fa:45:8a:8d:95:25:98:
38:0b:57:b9:fc:92:35:47:57:bc:72:7e:33:1c:14:00:31:2d:
09:67:f9:35:c6:2c:3b:f9:08:1a:c9:f0:5b:3a:2e:b7:7d:b4:
bc:d0:0e:03:75:07:6d:0e:8d:a6:a9:b4:a2:67:eb:9d:85:e9:
ad:ef:5c:d7:40:27:fb:45:eb:62:46:c9:72:05:43:d1:e9:75:
26:22:04:28:1a:ab:ae:bd:ef:1c:8d:fe:50:27:6d:a0:21:d9:
a2:db:e9:66:03:4e:76:5e:ef:4c:bc:0a:84:92:56:65:23:50:
23:2f:94:4c:10:2d:e2:2e:e2:84:ef:c9:1b:e6:01:90:cc:02:
9b:a5:11:72:2a:c5:e6:11:4a:76:fa:9b:c5:ac:d2:9a:a3:ee:
d2:96:85:d1:5f:4c:04:98:b2:b8:78:b1:46:e0:3a:94:0a:ac:
45:c1:5e:86:65:95:a2:db:1d:76:47:e9:bb:19:67:f4:79:8d:
20:ae:bc:44:a4:c3:c2:e1:d1:0e:87:4f:df:2e:4a:57:a2:a9:
90:fc:df:4c:4a:43:70:c8:12:65:7c:33:c1:03:63:5d:b2:3e:
ff:e8:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:14 2025 by rpki-client