Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Bd62iLW_yZk4UUPiebNNWrdk80U.roa
File: Bd62iLW_yZk4UUPiebNNWrdk80U.roa (raw, json)
Hash identifier: nTToIqmrYik/gTmWfL+elSmMAyB/ddUetXXtIMEefTE=
Subject key identifier: 05:DE:B6:88:B5:BF:C9:99:38:51:43:E2:79:B3:4D:5A:B7:64:F3:45
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01856C137C65BD8014F0EABC995929F90C32
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Bd62iLW_yZk4UUPiebNNWrdk80U.roa
Signing time: Sun 01 Jan 2023 06:44:54 +0000
ROA not before: Sun 01 Jan 2023 06:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57809
IP address blocks: 185.222.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:7c:65:bd:80:14:f0:ea:bc:99:59:29:f9:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jan 1 06:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05deb688b5bfc999385143e279b34d5ab764f345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:83:c0:3c:36:4a:fe:87:7a:d3:bf:1a:5e:
23:0c:7b:99:f8:07:c1:2a:64:65:e7:86:7f:8d:00:
1d:24:b1:e9:27:7c:87:05:4c:87:9c:90:a0:01:88:
59:e0:74:ca:f1:b8:31:3d:d6:97:cf:29:b4:46:8f:
5d:db:f8:4f:2e:d1:c7:e9:c7:2e:42:86:28:5e:9a:
52:c7:35:22:15:f6:14:36:d3:cd:b0:81:4f:de:3d:
b7:7e:8a:08:f1:34:c3:e0:95:2e:2e:0d:33:c8:3b:
65:0f:58:4e:70:7e:04:81:76:13:0c:7c:36:9d:2c:
6c:f2:cd:eb:16:da:cb:c9:38:fe:d4:9e:60:e2:2c:
41:21:74:9e:47:38:b7:2f:6b:63:2c:65:11:61:0b:
3e:ce:58:58:df:6a:ca:e1:4f:da:0e:72:df:72:68:
3e:e0:ef:36:a9:bd:c9:b1:1a:72:f4:46:87:43:77:
c8:34:38:b5:e9:7a:52:41:97:d6:51:b8:ee:cc:19:
87:30:cd:85:c8:2f:03:8b:8a:08:7c:de:8e:32:65:
38:2b:3f:63:a9:ef:19:5c:a4:dc:19:75:88:52:28:
79:06:a0:61:58:49:c0:4a:2d:93:cc:be:c7:ec:8a:
90:9c:e3:0e:3c:ff:6b:01:29:03:8e:2b:0e:2b:63:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:B6:88:B5:BF:C9:99:38:51:43:E2:79:B3:4D:5A:B7:64:F3:45
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Bd62iLW_yZk4UUPiebNNWrdk80U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
08:11:27:9f:dd:d5:21:ea:24:e9:d5:39:c1:dd:fa:2a:12:10:
8c:be:ad:e3:96:b6:ce:ef:5e:ea:f3:b8:13:ea:be:cc:68:db:
88:f3:63:13:44:25:c9:b9:f6:78:db:83:25:89:ee:34:ec:0d:
a8:8b:c5:28:71:2b:d4:0c:2f:b1:fb:9e:84:1e:17:ca:b8:63:
e8:6b:fe:5f:26:0f:56:3f:11:f5:d3:2c:9f:03:1f:d4:30:6d:
17:9e:17:ae:8a:8a:5c:b1:11:13:8e:f8:29:6f:44:29:57:bc:
83:dc:eb:ac:d1:06:53:6a:1b:a4:ef:dc:34:86:9e:64:04:48:
ec:e2:4c:eb:92:a6:bf:2c:40:78:c4:76:c0:4d:06:cc:8b:7b:
3f:63:ed:c9:99:fe:b3:de:a7:c0:62:3c:e5:46:db:cf:ac:a1:
6e:64:df:ad:34:c2:47:05:bf:b1:52:15:90:67:b6:36:0c:e1:
dc:44:f4:48:17:5b:96:b3:6e:8c:ea:bf:c5:8d:27:20:39:2e:
4c:3e:49:ee:ee:c5:21:42:1f:19:2e:48:cf:c6:b4:33:99:99:
b5:d0:26:20:7c:23:c1:a8:68:fd:ce:a4:cd:1a:9c:ff:a9:98:
86:74:19:f2:19:55:62:e9:28:84:e0:0d:69:3f:2b:5e:21:07:
e9:a5:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:29:49 2025 by rpki-client