Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/i3XJ2iQCE1F5nb7qJNWjZhjza68.roa
File: i3XJ2iQCE1F5nb7qJNWjZhjza68.roa (raw, json)
Hash identifier: 9rN/jHUGXc9NZTA5XkEwH9UT2lskOxEb+sbwF+W86oU=
Subject key identifier: 8B:75:C9:DA:24:02:13:51:79:9D:BE:EA:24:D5:A3:66:18:F3:6B:AF
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01856E0B103CA7BD983CABE9FAFEE3017310
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/i3XJ2iQCE1F5nb7qJNWjZhjza68.roa
Signing time: Sun 01 Jan 2023 15:54:56 +0000
ROA not before: Sun 01 Jan 2023 15:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 185.60.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:10:3c:a7:bd:98:3c:ab:e9:fa:fe:e3:01:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 15:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b75c9da24021351799dbeea24d5a36618f36baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:9d:c1:cf:d6:6a:bf:20:bd:c3:7a:08:a7:
d3:f9:f4:e7:7e:21:66:23:89:26:f9:a9:39:ff:f2:
ab:2a:2c:f1:8e:af:0a:17:52:83:4a:f2:ad:5b:6d:
c9:e7:81:22:63:8f:d4:76:7d:f5:96:86:bf:5a:7d:
53:8d:f7:13:a0:d8:c0:97:6a:1a:00:6e:fc:81:88:
ba:c5:12:b8:5e:55:9d:a5:d4:cf:c7:e0:9e:d9:eb:
e8:60:23:68:b5:66:8d:0a:bd:1b:b7:58:40:b6:a3:
60:88:59:c3:2f:b6:b8:8f:45:6d:e8:0e:51:e2:d6:
39:18:bb:bc:91:db:33:5e:5d:3c:73:f8:33:eb:07:
4e:7f:21:7c:b4:66:b8:a2:9b:25:de:89:55:14:02:
eb:cc:84:b0:ec:a8:42:92:f2:75:6e:f3:ed:da:fe:
b3:e8:77:46:8f:cc:0d:a8:d6:fe:13:42:3c:86:b8:
f9:12:40:5c:4c:f1:9e:38:99:aa:09:33:39:24:2a:
8c:69:c0:ac:0c:ff:40:00:8b:f9:d2:98:3f:3f:d5:
cb:62:95:54:51:08:fb:e2:6c:a7:36:6c:45:9a:0f:
b7:c7:5d:43:79:29:4c:6e:65:86:3b:06:a3:66:10:
58:97:d3:37:27:1b:41:c6:3f:e9:91:33:28:bf:a3:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:C9:DA:24:02:13:51:79:9D:BE:EA:24:D5:A3:66:18:F3:6B:AF
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/i3XJ2iQCE1F5nb7qJNWjZhjza68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:79:40:ad:e7:ee:7b:c1:c2:48:86:8d:5c:5a:00:7f:07:82:
6a:4c:ea:15:45:c4:b8:38:f6:7a:63:d2:b3:0e:d8:8e:5b:dd:
11:6a:14:3d:73:d3:7e:fa:60:91:91:ef:6b:9f:12:72:a4:5f:
4e:22:88:87:8f:ac:29:ef:ba:fa:51:b3:13:99:a3:a6:b2:e7:
2d:d9:95:3b:ed:3c:0d:82:72:99:01:2e:9f:c5:c4:62:db:22:
aa:bb:28:f1:1c:c0:f6:12:80:d0:20:44:d2:f9:c9:93:38:d7:
f3:b6:e1:50:1c:88:9a:ea:9b:a7:69:ef:cb:5f:0a:fb:b4:c7:
0b:03:ee:35:7b:7f:2e:74:66:5e:c1:84:f5:3e:bf:bb:0a:72:
22:9e:b0:72:a6:af:57:a1:ff:73:e5:b0:7b:3a:79:54:45:3e:
83:28:fe:2a:4a:03:da:48:cc:2e:c3:83:86:20:4f:da:7a:d4:
b5:bc:df:74:c3:4f:db:2d:89:e6:87:44:95:e3:35:63:eb:b1:
a2:c6:16:f4:e3:59:35:4f:c1:fc:54:0d:c4:8a:2a:8a:99:61:
88:3f:6c:48:78:a4:a3:46:cf:e2:43:ce:92:18:27:d1:8f:e4:
99:71:37:78:b7:1f:03:82:83:da:fc:94:04:10:f5:50:37:a4:
c1:07:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:37:11 2025 by rpki-client