Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t6Q56X3JMQFxIW1eKrg96osWXjg.roa
File: t6Q56X3JMQFxIW1eKrg96osWXjg.roa (raw, json)
Hash identifier: X/H7seYPfeTUPlIb0sB068TLOcMWndoTFnhIYgQQ7WY=
Subject key identifier: B7:A4:39:E9:7D:C9:31:01:71:21:6D:5E:2A:B8:3D:EA:8B:16:5E:38
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FEC826E4310E6CB39AC14FDC1E15
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t6Q56X3JMQFxIW1eKrg96osWXjg.roa
Signing time: Sun 01 Jan 2023 19:35:30 +0000
ROA not before: Sun 01 Jan 2023 19:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212491
IP address blocks: 185.196.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:fe:c8:26:e4:31:0e:6c:b3:9a:c1:4f:dc:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7a439e97dc9310171216d5e2ab83dea8b165e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:e7:4b:06:f4:88:a2:5c:7f:97:4e:fe:72:
11:92:b8:ed:4a:e9:3b:34:74:b7:01:92:ba:4f:38:
e6:f4:71:57:79:9a:17:67:47:20:9b:d9:e5:ac:83:
ad:86:cf:07:ea:74:57:dc:44:ed:9d:49:ad:fb:06:
92:e2:95:0a:da:90:09:eb:a9:8f:dc:f3:78:ca:e0:
2a:95:76:fb:c4:bd:66:cf:b5:85:73:ab:58:3e:fe:
8e:22:cd:91:99:c9:3c:04:1e:81:ec:48:fa:16:89:
87:ff:92:f2:3a:11:f1:50:fd:57:7c:31:ed:df:b4:
1c:05:64:c8:33:60:3a:51:9e:17:14:af:ab:df:82:
06:12:32:6a:ac:06:75:ed:c1:c6:f9:4f:f8:11:41:
fd:77:ea:1c:b1:fb:be:6e:a7:46:af:e4:40:fb:3c:
43:67:2b:5d:e2:c2:47:b3:a8:a7:0a:d3:f2:1b:29:
18:5f:f5:b3:06:a5:72:e8:7b:3b:4e:70:fc:7e:11:
c2:bb:b6:98:df:2c:c3:ef:e2:8f:14:26:ba:b4:1e:
9b:03:26:d3:fd:43:f7:f6:de:f5:47:02:3e:58:dc:
39:83:d1:ab:74:4a:87:c7:ec:df:ad:ea:31:88:0d:
ec:f8:7a:a1:51:db:d6:de:13:10:5c:1e:3c:6d:e8:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:39:E9:7D:C9:31:01:71:21:6D:5E:2A:B8:3D:EA:8B:16:5E:38
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t6Q56X3JMQFxIW1eKrg96osWXjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d6:97:fa:62:ef:3d:3e:bf:1b:dc:5c:6c:dc:45:ae:6b:e2:
20:ce:c9:b2:d3:64:38:46:42:dd:4d:60:cd:d6:d0:a5:42:02:
ed:39:82:f8:73:78:d4:94:4a:89:25:8c:c1:f3:51:22:4f:8f:
f6:97:3f:0a:5b:42:05:eb:a5:c4:64:4b:29:e8:41:ea:6c:5d:
70:a9:2f:e3:7f:02:94:62:c0:ba:fc:a0:55:be:2f:b8:7c:8a:
59:e0:73:04:34:58:e1:2d:f2:60:62:ad:68:13:a7:08:b1:19:
42:55:57:26:c9:72:ea:2d:16:db:2a:88:12:9b:17:d0:b8:72:
79:b6:59:23:47:53:5c:2b:14:54:1b:8e:35:82:28:fd:ca:ab:
b4:24:af:4f:6d:77:6c:7f:55:35:bd:c1:4b:a2:c0:27:74:60:
3d:30:e1:1d:df:60:7a:59:e2:74:8a:8e:8f:99:dc:9d:48:33:
32:54:fe:b7:74:bd:2d:f9:d8:ff:d3:ec:02:04:c8:06:ec:c1:
08:78:46:27:64:21:d6:a1:a1:e0:87:11:ca:8f:c8:29:c9:a7:
ae:57:f9:44:7e:f2:e1:38:40:bc:c9:4a:44:fe:dc:7a:48:f8:
cf:6e:a9:1b:dd:ad:57:8a:7b:71:3c:7d:4b:07:6d:ba:76:63:
14:22:29:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:32 2025 by rpki-client