Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/2557FwXq6HacVBMNqrXiMC7di1M.roa
File: 2557FwXq6HacVBMNqrXiMC7di1M.roa (raw, json)
Hash identifier: AGb8sbP5u47Q3v/x9tsi1ui30MzKVz67Odh0xw2tKZg=
Subject key identifier: DB:9E:7B:17:05:EA:E8:76:9C:54:13:0D:AA:B5:E2:30:2E:DD:8B:53
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 08CF8443
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/2557FwXq6HacVBMNqrXiMC7di1M.roa
Signing time: Sat 01 Jan 2022 14:55:34 +0000
ROA not before: Sat 01 Jan 2022 14:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200020
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147817539 (0x8cf8443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 1 14:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db9e7b1705eae8769c54130daab5e2302edd8b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:35:b8:c6:a8:45:b2:75:b6:f4:d4:f2:f2:
68:eb:0b:fc:24:e1:99:3b:46:e8:f5:6b:2e:01:fc:
b9:fc:be:88:06:46:c4:23:4d:3d:95:2f:ce:1e:c8:
6a:f7:c5:31:cb:e4:10:68:ad:70:1d:ed:ad:7d:65:
da:14:c2:81:d1:9c:17:6f:d1:83:cd:51:e8:49:bb:
65:8c:e6:68:ab:94:b2:a6:88:3f:a9:b6:dd:c0:b0:
ee:1c:2b:50:59:c4:7a:01:01:82:4c:b0:1e:aa:eb:
5e:72:22:78:55:72:23:83:fa:9c:53:3d:38:c2:90:
00:42:0f:38:0f:e5:4b:d5:d5:f9:86:dd:b1:3f:07:
ee:b4:c6:c2:f3:fc:05:69:17:7a:65:de:43:33:9b:
9a:50:2b:67:81:eb:15:fe:36:e7:7e:6a:21:98:42:
67:0a:f7:d0:23:10:d0:07:ed:e9:aa:3a:6d:9f:f8:
e0:08:6c:5a:c3:b4:c8:76:68:fb:3d:e8:16:cb:03:
e1:db:dc:83:ae:5a:db:cf:1e:a4:5e:0c:49:6a:2d:
db:e1:6f:81:f3:48:96:95:b5:ac:3a:2d:2c:88:2e:
96:d3:af:b1:dc:81:be:4a:4f:97:4b:32:5d:39:91:
10:63:27:62:d5:98:7a:2e:c3:cb:e7:9b:2d:4b:07:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:7B:17:05:EA:E8:76:9C:54:13:0D:AA:B5:E2:30:2E:DD:8B:53
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/2557FwXq6HacVBMNqrXiMC7di1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d4:3e:6d:b1:a1:ac:93:ba:87:d7:fe:51:2d:c6:bc:ea:41:
0e:49:00:f0:39:2c:ed:a8:95:5e:1b:34:72:31:e5:60:b2:bf:
28:40:33:3c:b8:a0:05:83:47:92:7d:d6:98:0e:09:fa:53:a2:
59:c9:a1:3b:2a:50:e7:ca:6f:cf:a0:37:35:a1:8e:ed:83:14:
cc:f9:83:0f:fa:53:f0:7f:dc:d9:b9:87:80:32:1b:11:9e:36:
96:c0:b2:61:17:86:d2:8e:0d:43:ef:b7:95:82:21:fa:61:78:
a6:1d:9d:4e:f9:b9:e5:ae:11:02:db:e3:fa:81:f8:57:7b:2c:
de:eb:52:62:26:3a:5b:62:f3:b4:ef:1f:54:89:60:46:51:23:
ab:a7:7d:f1:17:5c:e3:0e:48:7a:16:4d:2d:e8:07:f5:0e:4d:
bf:82:88:9e:b3:94:8c:15:c7:71:eb:94:7c:2f:88:8c:1e:c9:
b6:34:db:e2:e8:2d:b5:30:60:8e:2b:fd:35:1d:71:c9:fb:7f:
43:23:50:2a:44:cb:03:b0:9e:d1:0e:64:a7:b1:a4:73:ee:48:
de:1a:2d:26:e1:1e:8f:f3:ac:fb:c3:12:2d:76:b8:6e:0c:9c:
32:ba:ae:ab:46:b8:b5:4b:2a:c2:05:fc:e7:0c:34:89:83:51:
cc:14:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:19 2025 by rpki-client