Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/T3_r4f6t2ogOjPShEXyKshsMYbs.roa
File: T3_r4f6t2ogOjPShEXyKshsMYbs.roa (raw, json)
Hash identifier: mt+WprHkxf+1E4WRF2l0MAtuIbBUfD9AxlTQeSDf0FQ=
Subject key identifier: 4F:7F:EB:E1:FE:AD:DA:88:0E:8C:F4:A1:11:7C:8A:B2:1B:0C:61:BB
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01856BCA442253CC86B486C7BF70DC246774
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/T3_r4f6t2ogOjPShEXyKshsMYbs.roa
Signing time: Sun 01 Jan 2023 05:24:55 +0000
ROA not before: Sun 01 Jan 2023 05:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206353
IP address blocks: 185.186.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:44:22:53:cc:86:b4:86:c7:bf:70:dc:24:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 1 05:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7febe1feadda880e8cf4a1117c8ab21b0c61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:0a:19:cb:dd:be:6b:ca:8a:1c:7e:bb:87:
ca:3c:44:9c:32:62:1c:fa:a1:bb:03:99:41:5a:39:
0e:b5:e0:92:dc:78:00:dd:06:d4:35:71:cf:c1:61:
5b:57:1c:de:59:19:a8:d6:01:42:37:bc:45:00:9e:
49:88:e8:25:95:34:ae:25:3c:27:5c:e9:01:bd:f2:
7f:37:b6:54:8d:a8:33:cd:2a:71:af:2b:43:ee:f7:
a2:96:f1:08:f0:4f:b4:8c:0d:97:01:6e:17:5b:b6:
bc:fa:72:da:c6:65:d4:ce:ae:ae:c1:50:53:ab:47:
0a:6c:90:96:9b:a8:d9:35:cf:58:1b:4a:d2:0e:39:
13:f9:4f:2d:eb:6a:de:99:5d:06:29:98:da:d8:61:
7c:8f:10:96:c2:f8:2f:a9:35:44:87:a7:25:39:b4:
9b:1f:de:47:f7:fd:a4:60:8f:c2:0c:e2:a6:fb:81:
5c:8d:31:be:0e:b1:3e:67:f8:68:8d:6f:ab:4b:21:
b8:7a:db:71:a7:6a:c7:d2:16:d4:e9:d5:e0:e0:53:
f9:a5:f1:81:9a:38:60:19:8f:d4:e8:4e:09:66:fa:
7c:fc:43:76:ee:67:7c:d5:fd:f1:ba:5a:d1:d5:09:
a7:ce:d4:b8:59:fb:60:48:86:d6:cd:d7:70:1f:b6:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:EB:E1:FE:AD:DA:88:0E:8C:F4:A1:11:7C:8A:B2:1B:0C:61:BB
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/T3_r4f6t2ogOjPShEXyKshsMYbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.128.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e5:0a:a6:99:9e:7f:62:0e:49:3e:a3:df:07:89:6b:4f:8b:
88:ef:94:d7:c6:7b:8e:bb:84:eb:88:50:b1:73:d1:16:98:d7:
58:9d:61:23:48:a2:77:81:8c:6a:aa:89:b5:8a:ad:d3:18:2a:
47:72:48:46:c5:11:1f:15:a7:f7:70:00:95:ac:83:8d:92:84:
7e:5d:58:b0:fb:81:62:cd:9b:3c:65:d1:41:13:59:87:ab:27:
38:c5:9d:90:85:39:f6:4a:46:2f:62:1b:ed:cd:d5:a0:55:88:
56:f2:69:78:a7:af:6a:bf:c4:e4:02:3f:94:7e:4f:07:bc:8b:
7b:af:4d:7b:99:c9:69:e2:5c:d9:e1:bf:37:e5:fd:43:3c:b4:
fa:b1:92:95:40:c3:aa:53:48:8e:ec:ad:dc:8b:d9:ba:3a:49:
46:5f:ec:cc:28:d6:40:c0:d8:7f:ad:44:4f:34:63:15:4f:69:
af:12:9c:97:02:15:39:ee:f8:fc:3c:77:93:b5:6d:ff:77:7b:
35:a6:ba:e3:8e:63:0a:07:f3:41:fa:c5:29:d5:7a:af:9b:79:
ff:4c:fe:46:8d:ca:23:a8:e3:bb:0e:53:92:b3:c9:8d:15:57:
35:c8:d0:93:3c:08:35:94:55:96:d8:ff:ef:83:70:fe:f1:94:
6c:99:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:56 2025 by rpki-client