Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/x2ezNk8HgorwVrA3D6koWUtJVXQ.roa
File: x2ezNk8HgorwVrA3D6koWUtJVXQ.roa (raw, json)
Hash identifier: Ore3Os2I6Zvo9fQqqEXJjB579m6XtE038OE9UvBRnl0=
Subject key identifier: C7:67:B3:36:4F:07:82:8A:F0:56:B0:37:0F:A9:28:59:4B:49:55:74
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 018211CD66330ABD49C95972CD3B730E2B51
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/x2ezNk8HgorwVrA3D6koWUtJVXQ.roa
Signing time: Mon 18 Jul 2022 14:54:09 +0000
ROA not before: Mon 18 Jul 2022 14:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 185.9.53.0/24 maxlen: 24
185.203.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:cd:66:33:0a:bd:49:c9:59:72:cd:3b:73:0e:2b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jul 18 14:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c767b3364f07828af056b0370fa928594b495574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:7d:64:41:57:2b:75:99:6e:12:b0:af:04:
fb:b6:d6:c8:96:4f:1b:e8:6e:3a:dd:7a:5d:da:24:
50:a4:90:c1:6a:18:21:0c:f2:c1:c3:ac:a3:eb:f2:
4c:3e:cc:45:35:15:14:7e:c0:36:01:d7:76:42:21:
a4:7f:ca:8e:86:dc:c1:71:23:fe:6c:6b:1b:a4:aa:
5c:c7:44:8c:f2:e0:ce:26:01:ae:18:87:68:ca:2d:
8d:e3:a7:d9:11:b5:2a:3c:fd:e9:9e:31:ad:9c:a2:
f5:3e:60:2c:73:6d:99:bd:59:2b:32:09:be:6d:2b:
bf:18:97:f7:09:07:7c:06:30:53:83:e1:e2:ea:e6:
62:6f:ee:5c:40:e8:27:26:7e:ea:93:42:9f:6c:f0:
cb:4e:51:6b:1d:ba:27:4f:fe:29:0d:7b:55:4c:cf:
7a:33:ed:c0:76:77:1a:92:54:cb:69:ad:bd:b6:4e:
16:b9:5a:d1:04:1b:ac:60:06:0a:ee:ba:a6:51:34:
02:a3:ff:db:2e:76:1b:6b:97:99:76:4e:32:b0:ed:
0b:66:5d:f7:ab:4f:0e:b1:f3:36:6e:43:9d:25:0e:
75:5f:30:aa:3d:9b:bd:2f:a1:30:20:04:fd:17:f2:
e6:85:80:39:12:66:53:94:a2:52:2f:ef:d5:f1:70:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:B3:36:4F:07:82:8A:F0:56:B0:37:0F:A9:28:59:4B:49:55:74
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/x2ezNk8HgorwVrA3D6koWUtJVXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.53.0/24
185.203.88.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e1:81:a5:3b:26:4a:d7:91:9f:56:61:70:98:b0:9d:f7:12:
98:41:fd:6c:b1:af:1c:d9:d1:2b:f5:e7:61:79:df:2a:a4:36:
8d:05:f7:f1:07:47:12:16:73:36:26:dc:a0:28:46:82:9d:1a:
ad:04:65:87:1a:e6:0b:99:27:c4:1f:59:37:90:78:02:8b:3d:
be:9d:21:c7:9c:d4:51:de:0a:13:b7:61:7c:a7:5e:4a:1c:dc:
6c:b9:9e:ce:da:55:57:cf:2a:b1:c8:f0:e0:96:9e:f1:6e:99:
c0:92:45:4f:6e:c1:22:7f:1d:cc:e3:98:f8:d3:d1:bf:23:7e:
0f:58:b9:32:47:84:ea:e7:a5:89:d1:ec:47:b3:d7:61:86:9c:
ae:c7:86:10:6b:cc:d5:6f:2b:8b:3e:ce:fe:04:3b:ba:97:5b:
8f:2b:7a:72:7f:4f:75:16:16:ac:64:96:eb:41:0d:08:1f:38:
89:05:fb:31:d2:2b:46:7e:4b:fc:61:9a:90:05:a3:0e:7d:de:
67:a6:90:af:66:83:dc:68:12:67:1a:8f:e5:bc:e0:f3:a9:10:
1e:a7:3c:72:8d:3b:ce:c7:33:4f:7a:29:50:9b:d9:5f:7c:c8:
dc:dd:37:32:ce:83:35:21:b6:01:ff:e5:1e:84:8f:3f:54:2b:
9d:d9:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:56 2025 by rpki-client