Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sCkLWtTCdjmB5itwd4X-xWLxhUg.roa
File: sCkLWtTCdjmB5itwd4X-xWLxhUg.roa (raw, json)
Hash identifier: 5EJm6GiS+ot6a4OwC+I4uy8VXXs7GLskAbYL9C0+zOE=
Subject key identifier: B0:29:0B:5A:D4:C2:76:39:81:E6:2B:70:77:85:FE:C5:62:F1:85:48
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189217D5D246BF936388FBE3E8105D630BF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sCkLWtTCdjmB5itwd4X-xWLxhUg.roa
Signing time: Tue 04 Jul 2023 15:20:11 +0000
ROA not before: Tue 04 Jul 2023 15:20:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211301
IP address blocks: 185.223.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:7d:5d:24:6b:f9:36:38:8f:be:3e:81:05:d6:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 4 15:20:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0290b5ad4c2763981e62b707785fec562f18548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ef:77:12:61:5b:f7:ae:02:92:5b:30:1f:
e4:39:58:a1:87:ee:00:47:7b:c9:9c:5b:3d:e4:5d:
f3:15:8f:49:2b:c8:b2:cf:a4:ee:3e:75:80:44:cc:
b1:10:44:d8:05:f5:8a:b8:05:e6:8d:51:b0:db:a8:
85:58:71:7d:37:19:51:5e:a2:e1:89:ac:7f:b7:c7:
26:2c:70:4f:e4:bd:da:0c:e0:46:34:d3:4b:82:4a:
13:92:d6:9c:ea:cd:06:3e:c4:ed:df:c3:7c:ca:4e:
5c:85:ce:a6:26:62:59:d0:26:a1:70:3d:d7:bb:f6:
72:e5:f1:15:4d:7d:54:78:8d:c6:da:c6:dc:e4:54:
1d:73:5b:21:ae:57:99:44:bd:9e:d8:bf:26:23:b6:
9c:26:63:a3:de:c5:c9:f6:cd:56:0d:f1:d9:b2:25:
d6:a4:cf:f4:3f:e5:43:ac:21:93:bf:da:bb:09:25:
05:80:fc:b3:8a:c1:08:78:b7:64:84:05:3d:42:95:
6a:0c:46:cd:a0:92:67:1f:fb:56:32:f1:61:56:77:
dc:5f:71:5b:f5:43:75:fd:08:b7:30:43:e1:85:0f:
f1:d5:90:af:5a:ba:34:93:a7:02:7b:5e:07:7f:33:
5a:3b:54:0a:21:dd:2f:87:35:2c:13:09:16:6b:56:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:0B:5A:D4:C2:76:39:81:E6:2B:70:77:85:FE:C5:62:F1:85:48
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sCkLWtTCdjmB5itwd4X-xWLxhUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:89:03:4c:c6:1b:3d:1a:11:95:70:cd:5b:d4:e2:30:e9:
c4:5c:f6:2e:a6:2b:50:a2:74:d5:79:0b:7e:47:9d:ba:8e:ae:
de:3f:4e:87:50:61:fa:c8:d0:8c:07:4a:fe:9e:00:58:5b:90:
c9:95:cc:1c:55:36:36:c5:59:94:00:aa:a8:42:36:9b:88:b8:
52:ad:74:a5:a2:52:ae:d2:39:49:2d:ae:6a:92:78:b4:57:55:
7d:4d:85:1c:7c:66:ca:6a:7d:28:eb:6f:5b:b3:a2:c3:41:72:
32:42:6f:2f:3a:0f:97:52:06:bc:b8:70:1c:84:8a:8e:04:d7:
08:ca:0f:e2:14:6b:3b:f4:77:1d:03:63:a1:63:25:4d:9b:03:
71:4d:5f:62:6f:95:03:57:5a:66:78:81:47:c2:db:e6:08:b2:
98:04:b3:f4:04:1a:cc:08:38:8f:9e:15:47:5e:c7:27:08:04:
b5:e1:69:9d:45:16:a0:87:cb:06:ad:c3:b4:ee:29:74:0d:93:
25:f7:3d:c7:d6:17:c4:f8:96:a8:28:c5:44:a0:91:c6:f6:80:
8e:ef:f7:2d:45:18:a5:67:1c:58:a4:b5:5d:84:0f:f7:da:34:
f8:8a:a4:5c:23:51:2a:45:5c:8f:da:8f:6c:2c:61:4a:bb:40:
ab:14:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:27 2025 by rpki-client