Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/JtazIc8s51U8iI-DxkAIOb83WcA.roa
File: JtazIc8s51U8iI-DxkAIOb83WcA.roa (raw, json)
Hash identifier: B1ioR2Rdi+dHkuYNMb/yB2Wi0EbH58iEbrS61o4tUkk=
Subject key identifier: 26:D6:B3:21:CF:2C:E7:55:3C:88:8F:83:C6:40:08:39:BF:37:59:C0
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 018570673EFA0B336C9CFBF4FD8C249AFBCC
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/JtazIc8s51U8iI-DxkAIOb83WcA.roa
Signing time: Mon 02 Jan 2023 02:54:52 +0000
ROA not before: Mon 02 Jan 2023 02:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64443
IP address blocks: 185.164.107.0/24 maxlen: 24
185.164.104.0/24 maxlen: 24
185.164.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3e:fa:0b:33:6c:9c:fb:f4:fd:8c:24:9a:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jan 2 02:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d6b321cf2ce7553c888f83c6400839bf3759c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:74:2c:23:79:b1:6a:01:47:2e:1f:10:26:
ee:dd:38:aa:8c:11:e0:41:65:7e:77:a4:8d:f1:af:
f5:db:23:12:3f:a2:96:fd:2e:64:0d:94:34:8b:a3:
30:99:1f:80:8f:83:63:89:94:fc:3c:c0:e5:8e:f2:
b8:87:cc:cd:d3:c3:7c:91:15:50:55:0d:40:3c:09:
32:f0:60:d8:c3:f9:06:38:42:7f:97:ff:ff:42:14:
af:f4:7f:86:a5:b8:ed:79:24:bd:63:e6:a7:e4:5e:
d9:1c:6a:a8:6d:24:db:c4:36:b1:f8:1f:5d:4b:48:
f8:fa:90:d4:30:14:a2:79:bf:58:18:e0:84:64:5e:
a9:fb:96:5f:2a:24:bf:0d:35:41:4b:ff:c2:89:89:
3e:78:5e:e7:52:a2:98:54:91:3f:1c:6b:b0:16:6f:
77:45:7a:08:14:1e:a0:88:96:cc:52:53:c9:38:ea:
db:eb:21:f6:4e:4a:51:cc:8b:38:91:28:c4:8c:81:
4a:cb:ab:83:be:42:14:7d:7e:66:72:dc:a7:df:ff:
bf:67:d6:aa:d8:2d:a5:63:51:6c:ec:37:26:d4:a4:
d5:11:da:90:55:c5:13:3c:91:dd:eb:fd:76:81:ac:
80:2c:1d:2d:f1:de:97:35:5d:e5:f2:5d:4b:93:8e:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:B3:21:CF:2C:E7:55:3C:88:8F:83:C6:40:08:39:BF:37:59:C0
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/JtazIc8s51U8iI-DxkAIOb83WcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.104.0/23
185.164.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:35:7c:a5:0e:f3:82:d5:cf:e5:93:71:99:ad:2b:59:60:36:
45:12:34:64:0e:a5:00:80:d6:63:ca:ca:5a:41:91:6e:10:c1:
51:8e:ea:45:e8:e9:b8:1c:0b:a9:28:c2:66:f8:0b:05:94:1b:
e3:78:ff:67:92:50:aa:ec:c7:00:ef:02:2f:d0:06:ab:d3:ed:
ea:07:31:23:9b:eb:9b:75:9b:58:d0:a0:54:95:66:2e:9f:5f:
d3:e4:98:cc:16:51:1b:91:b8:f6:06:9f:f6:72:5f:bf:af:9a:
46:e8:00:c6:98:c0:ad:1e:84:02:8c:d0:cc:9a:1f:83:da:da:
db:ab:08:43:d3:3d:0b:13:98:b0:04:c2:20:4c:20:5a:51:20:
54:1b:65:e1:59:0b:56:4c:96:24:72:74:9f:f5:ce:63:6e:66:
5c:e2:ef:23:01:ce:61:5a:b7:a2:41:0b:58:d0:04:e3:e1:1e:
db:19:e6:ce:05:51:fe:89:cd:1f:50:67:f7:bb:27:67:a1:ab:
ae:de:49:14:56:87:3b:1e:43:3b:90:23:7a:c3:70:ed:e5:fe:
0a:eb:95:07:91:38:9d:e2:99:cf:4b:5f:2f:59:66:d5:1d:25:
87:21:65:6b:71:5c:92:92:13:86:fb:94:55:6a:48:cd:2b:f6:
55:92:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:37 2025 by rpki-client