Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/8Hm297MxVOGkJHL0GECRjtrYSAs.roa
File: 8Hm297MxVOGkJHL0GECRjtrYSAs.roa (raw, json)
Hash identifier: c2GNZ2EHHa8U/MIoeiZcQOb57sMyDlaO50+HcHwnvJ8=
Subject key identifier: F0:79:B6:F7:B3:31:54:E1:A4:24:72:F4:18:40:91:8E:DA:D8:48:0B
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0A2C173E
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/8Hm297MxVOGkJHL0GECRjtrYSAs.roa
Signing time: Sat 01 Jan 2022 06:53:09 +0000
ROA not before: Sat 01 Jan 2022 06:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49206
IP address blocks: 185.41.48.0/24 maxlen: 24
185.41.51.0/24 maxlen: 24
185.41.50.0/24 maxlen: 24
185.41.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170661694 (0xa2c173e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jan 1 06:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f079b6f7b33154e1a42472f41840918edad8480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:a5:72:dc:ea:54:e9:eb:4e:8f:08:eb:ee:
37:6f:79:87:eb:2a:49:8d:63:fc:a4:70:a4:da:69:
fc:dd:af:8e:45:41:c3:c7:a9:88:78:c0:00:6a:a1:
76:df:a8:d0:7f:d0:09:d3:e7:6a:d6:27:3a:b3:9c:
96:c9:72:6c:63:f5:a4:cf:8a:d1:0e:d0:5c:ce:0f:
3c:bd:cb:65:5c:35:44:d0:97:0a:c2:b5:91:e7:28:
79:5c:aa:d4:d5:d4:79:fd:a2:6e:98:2f:f6:27:b6:
96:6a:31:c5:2d:87:0e:2f:64:fb:dc:d5:10:0b:b0:
cf:5c:b9:cb:03:27:37:98:a7:0b:00:62:ab:ac:52:
1a:83:79:33:cd:e5:6c:8e:38:9f:5d:9b:1e:80:85:
38:35:66:4c:53:81:9e:41:9a:4f:28:1b:0a:1c:3a:
07:86:33:7f:86:c5:0f:5d:30:6a:0f:5d:f2:10:41:
76:af:1f:4a:02:6a:5b:e8:44:a3:47:04:ce:c2:7f:
b9:41:85:d1:4d:fb:3d:44:37:17:4c:5a:77:0d:5f:
5d:d5:1a:ae:7e:4a:06:15:e5:2a:18:1e:66:d1:fd:
5b:6f:07:c6:10:c9:90:0d:aa:33:72:48:d7:ae:a2:
d8:5d:b8:26:a7:75:f5:9f:96:5d:f1:ca:32:52:04:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:B6:F7:B3:31:54:E1:A4:24:72:F4:18:40:91:8E:DA:D8:48:0B
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/8Hm297MxVOGkJHL0GECRjtrYSAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:63:1c:cd:9f:d6:53:ba:13:1f:df:e8:0e:76:36:bc:c3:11:
15:4f:7b:3d:9c:0b:ea:01:6a:1b:c1:7d:63:d2:76:81:d2:1a:
a2:78:2a:d4:8c:14:e3:7b:61:49:74:8b:46:43:47:bc:ad:a5:
25:34:8c:79:c9:59:33:94:c0:6b:6f:ce:74:d4:3f:3a:0d:4c:
ab:56:f4:27:48:ba:56:63:81:7c:c2:96:20:e5:41:5b:e0:a6:
0e:2f:6a:d3:06:c5:0c:3d:af:59:e7:5d:36:36:c7:2d:6e:e0:
d0:05:06:c3:15:2d:e1:69:16:7a:4b:61:f7:27:a2:63:b5:e1:
e8:89:53:16:9d:45:12:96:f1:83:1a:7c:29:47:2a:b1:6e:47:
2f:73:16:21:6e:63:85:4b:6a:f2:ae:0e:9d:45:ed:f6:ef:e3:
b5:d3:d8:6a:14:da:81:9b:53:cd:8a:93:d4:70:77:69:af:ce:
96:d8:ad:6f:50:9d:c4:b9:f5:59:e2:16:5c:2d:28:b3:ab:61:
f0:f0:5b:a5:e2:a2:f4:7e:0b:c5:f4:20:9b:40:59:ba:72:ef:
95:e6:4d:ae:96:b1:cf:90:fa:6b:8f:44:ae:aa:94:b8:a5:68:
8d:ae:99:a4:bc:cf:4e:4a:7c:37:cd:f8:e0:e9:4f:37:8e:3c:
72:ab:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:52 2025 by rpki-client