Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa
File: 33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa (raw, json)
Hash identifier: PKugPtGf+/Cc/Zj79mbqaOqn7TDkdPEFlkvcKzoH8aI=
Subject key identifier: DF:75:B2:0C:14:3D:64:EE:7C:B4:CA:10:B4:F7:01:6B:67:11:08:E6
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01856ED4D8488D9990B38BC330C1EC8D1747
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 185.110.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d8:48:8d:99:90:b3:8b:c3:30:c1:ec:8d:17:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df75b20c143d64ee7cb4ca10b4f7016b671108e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:c3:77:bc:44:81:68:dd:6d:6a:9d:87:44:
81:09:ab:99:22:7b:63:dc:a8:83:3c:28:ca:78:70:
b2:25:39:a7:23:0a:7b:0d:44:6c:f5:f8:91:34:6a:
0e:58:93:48:27:e2:72:2b:0f:88:f0:6d:8c:5d:98:
6a:94:f9:e8:76:9c:09:ea:70:25:bc:52:29:c8:fd:
d5:d4:7f:1c:2e:c0:c7:5d:f7:84:88:1d:70:89:99:
e4:31:4e:14:88:40:e3:20:b3:b3:8c:34:13:ab:ba:
cd:1a:a7:da:4e:70:97:05:55:53:ea:d9:8d:67:de:
b1:5e:e0:2e:20:e8:64:34:c4:c4:3b:27:f8:b4:ea:
3b:4b:6b:50:45:ee:ce:65:9b:77:64:23:b7:ab:d4:
eb:46:0f:6f:79:92:7a:bd:69:d6:b6:56:48:4f:06:
78:a7:62:0d:01:d2:df:24:bb:b6:a4:a1:6b:e6:4d:
3c:34:50:8e:ae:ab:09:2d:d4:d6:51:44:88:55:ca:
d0:dd:bf:a2:a4:b6:06:0f:5a:ff:9f:52:62:f5:38:
0b:d8:52:c2:f3:ed:db:68:b8:a9:83:a5:e5:78:b1:
99:89:c9:0a:6a:2f:65:93:d4:fd:74:10:cb:40:e3:
81:37:5f:b2:6f:3f:f9:39:79:fa:8c:25:d3:59:03:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:B2:0C:14:3D:64:EE:7C:B4:CA:10:B4:F7:01:6B:67:11:08:E6
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.62.0/23
Signature Algorithm: sha256WithRSAEncryption
75:fc:d8:17:6f:65:e3:c2:0f:28:0e:e5:08:8b:3c:a3:07:bb:
cd:07:5f:13:c5:c3:5a:08:2b:59:8f:8c:dd:b3:5b:b9:0b:97:
d4:70:0a:65:d0:50:43:4d:a4:2b:e1:7f:17:81:0b:60:c1:78:
bf:ff:5c:0b:73:98:39:81:e6:e5:f6:c5:dc:dc:42:b7:8a:d7:
fd:d0:e8:d8:81:b3:69:61:e8:fb:12:89:88:86:74:22:bb:1f:
ad:0c:ee:4a:a7:97:08:1b:37:d4:ec:52:84:dc:4d:8e:d6:bf:
09:90:b2:0b:03:0f:bb:d9:9f:1b:4d:80:d5:f2:76:b6:5f:17:
df:64:e8:14:fa:0c:d8:5d:7e:5e:55:98:10:5c:2d:ce:03:6b:
16:a8:f3:4c:1c:fc:03:86:95:b9:87:ff:d2:cd:38:f4:b7:8c:
40:d1:0f:0f:8f:91:46:98:c3:f3:43:14:9f:ee:92:92:9d:16:
2b:1f:9a:ce:16:7c:ae:38:f1:2a:ff:58:1e:e5:82:d9:d2:41:
c8:e6:05:c3:8e:be:ce:cd:cd:ad:a6:fd:49:70:12:09:21:bc:
9c:33:6a:09:df:98:0f:00:f7:78:b4:02:68:ed:a5:01:f4:23:
4a:a1:81:fb:35:59:64:b9:83:65:5b:6f:3b:cb:dc:a9:7f:b8:
26:e4:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:22 2025 by rpki-client